## Who is responsible

Nichita Roilean, Petržílkova 2705/32, 158 00 Prague, Czech Republic. Company
number (IČO) 22389032, VAT number (DIČ) CZ0212231877 — a sole trader entered in
the Czech Trade Licensing Register, not in the Commercial Register. Questions
about this notice, and any other message: info@sitely.cz.

## There are no accounts here

This site is a portfolio and a way to describe a project. It has no sign-in, no
registration and no password, so it holds no account of you. The content
management system a client signs into after a project is delivered is a separate
product at cms.sitely.cz with its own notice.

## What we process, and why

**What you write in the project form** — your e-mail address, and whatever you
tell us about the project: what is being built, who it is for, what it has to
do, and the address of a site you already have. A name only if you give one; the
form does not ask for one. Legal basis: taking steps at your request before
entering a contract (GDPR art. 6(1)(b)). Kept until the project is agreed, and for two years from your
last message if it is not.

**A hash of your IP address, not the address** — one submission is stored with a
day-bucketed SHA-256 of the address it came from, so that twenty submissions
from one place in one day can be recognised as abuse without keeping anybody's
address. Legal basis: legitimate interest in not running an open relay (art.
6(1)(f)).

**Four cookies that make the site work** — `guest_id`, `locale`, `consent` and
`cms_preview`. None of them identifies you and none can be refused, because
without them the site cannot remember your language or your cookie choice. Legal
basis: the ePrivacy art. 5(3) exemption for strictly necessary storage. See the
[cookie policy](/en/cookies).

**Measurement** — only if you agree to it. See the [cookie policy](/en/cookies)
for the vendors and how to change your mind at any time. Legal basis: consent
(art. 6(1)(a)).

**Error diagnostics** — when something breaks, we record the error. Session
replay, which records what you did before the error, runs only with your
consent.

## Who else sees it

- **Hetzner Online GmbH** — the servers this site runs on, in Falkenstein,
  Germany.
- **Supabase** — the database behind the site.
- **Cloudflare** — DNS, the CDN in front of the site, and the storage the
  images are served from.
- **Seznam.cz** and **Resend** — delivering the e-mail we send you.
- **Functional Software, Inc. (Sentry)** — error diagnostics, ingested in the EU.
- **Google Ireland Limited** — measurement, and only if you consented to it. See
  the [cookie policy](/en/cookies).

The platform that receives the form is our own infrastructure, not a third
party. Some of the above process data outside the EEA under the European
Commission's standard contractual clauses.

## Your rights

Access, rectification, erasure, restriction, portability, and objection. You
may withdraw consent at any time — through **Cookie preferences** in the page
footer, or on the [cookie policy](/en/cookies) page — without affecting processing
that already happened. You may complain
to your supervisory authority; in the Czech Republic that is the Úřad pro
ochranu osobních údajů.

## Changes

We will update this page and, where the change is material, ask again.