Who processes the data
Ján Halanda, Slovak Republic. I am the controller under the GDPR (EU) 2016/679. Contact details for exercising any of the rights below are at the end of this page.
Last updated 3 September 2026
Short and without the legal padding: what this website and my e-mail collect about you, why, how long I keep it and what you can do about it.
Ján Halanda, Slovak Republic. I am the controller under the GDPR (EU) 2016/679. Contact details for exercising any of the rights below are at the end of this page.
I collect only what I need in order to reply: your name, e-mail, optionally a phone number, the topic and the message itself. It reaches me by e-mail and stays in my mailbox — it goes into no database, no CRM and no third-party tool.
The legal basis is taking steps at your request prior to a contract: you wrote to me so that I would answer. I keep the data for the duration of our exchange and then for three years, in case of a complaint or a follow-up to an older enquiry. You can ask for earlier deletion at any time.
When you book a consultation I process your name, contact details and the chosen slot so the meeting can be confirmed and held. Same regime and same retention as the contact form.
E-mails I send you may contain a transparent one-pixel image hosted on this website. When your mail client downloads that image, my server records the time of the request, the IP address it came from and the identification header of your mail client or browser (program, operating system, language). From that I can tell whether and when the e-mail was opened.
This does not collect the content of your mailbox, your other messages, or anything you do outside of opening my e-mail. The records sit on my own server in the European Union, I send them to no analytics or marketing service, and I do not merge them with a profile from other sources.
The legal basis is legitimate interest under Art. 6(1)(f) GDPR — knowing whether a quote or a reply reached the recipient at all, so that I neither chase you needlessly nor fail to follow up. I do not use it for bulk mailings or profiling, and records are deleted after twelve months at the latest.
How to switch it off: disable automatic downloading of remote images in your mail client. Thunderbird and Outlook have it off by default for unknown senders, in which case nothing is recorded at all. Or simply write to me and I will disable tracking for your address permanently.
From the IP address I look up the country, city and internet provider, so that I know where the message was opened from. This is done by the service ip-api.com, which receives the IP address itself; it is the only point where the tracking communicates outside my own server. The answer is stored on my side and the same address is never asked about again. The location is accurate to a city and a provider, not to an address — and for messages opened through a proxy it shows the provider’s data centre, not you.
The hosting server keeps ordinary operational logs: IP address, time, requested address, status code, browser identification header. They serve operation and security — protection against spam and brute-force attempts. They are kept briefly and I do not link them to your identity.
Forms are protected by a computational task solved by your browser and by a limit on submissions from one IP address. That is why a fingerprint of the IP address is stored temporarily — not the address itself.
If you agree to analytics in the bar, the site records how you move through it: which pages you opened and in what order, how long each was actually visible, how far you scrolled, which cell of a notional grid you clicked, where you came from (referring site or utm parameters), your device type, operating system and browser.
This is measured by my own tool running on this server. It is not Google Analytics or anything like it — the data goes to nobody else and is not combined with anything from outside.
Your IP address is not stored — not in a file, not in the analytics log. No fingerprinting is used (canvas, font list, audio, WebGL); recognising a repeat visit rests on a plain first-party cookie you can delete at any time. Clicks are turned into a grid cell inside your browser, so what is stored is "this cell was clicked 412 times", never one person’s trail across the page.
The legal basis is your consent under Art. 6(1)(a) GDPR. Until you give it, the measuring script is not even printed into the page and no analytics cookie is stored. You can withdraw consent at any time through the link in the Cookies section above — withdrawing is exactly as easy as giving it.
Raw behavioural records are deleted automatically after 90 days. The heatmap and visit counters live longer, but at most a year — a grid cell describes the page, not a person.
The site uses no third-party analytics, no advertising scripts and no tracking cookies. It stores a single technical cookie with your chosen language, a cookie with your decision about analytics, and a session cookie when I log into the admin area — all strictly necessary, none of which requires consent.
The fonts sit on this server. Until September 2026 they were loaded from Google Fonts, which exposed your IP address to Google, and that is what the bar used to ask about. I moved the files here, so nothing leaves when a page loads and there is nothing to ask about — the fonts load always and immediately. The right way to solve a consent question is to remove the reason for it, not to add another prompt.
Nobody, for commercial purposes. Technically the data sits with my hosting and mailbox providers, who act as processors for me within the EU. I do not sell it, trade it or use it for advertising.
You have the right to know what I hold about you, to get a copy, to have it corrected or erased, to restrict processing and to object to processing based on legitimate interest — including e-mail open tracking. I will honour an objection without asking for a reason.
One message to the contact below is enough; I reply within 30 days. If you are not satisfied with how I handle it, you can turn to the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, Bratislava.
Write through the contact form on the home page and put “privacy” in the topic. I answer from the address I use for ordinary correspondence.
This site has no advertising, no third-party tools, and loads its fonts from its own server. I am asking about one thing only: whether I may measure usage with my own tool on this server — which pages you opened, for how long and where you came from, with no IP address and no fingerprinting. Without consent nothing is measured and the site works just the same. More in the privacy policy