Privacy Notice
Draft prepared 23 October 2026. This notice will take effect when published with complete business details.
1. Data controller
The controller is Jaroslav Kindl, natural person, planned place of business Šípková 824, 411 08 Štětí, Czech Republic; IČO pending assignment. Contact: [email protected], +420 606 881 093.
2. Data processed
When you send an inquiry, I process your name, email address, optional phone number, selected service, description and any files you choose to attach, along with confirmations that you are authorized to provide them. Depending on the service, files may include photos, STL/3MF models, text or artwork for business signage, or GPX route data containing location and movement information. The website does not request payment details and has no customer accounts.
3. Purposes and legal bases
- Handling an inquiry, preparing an offer and communicating before a possible contract: steps taken at your request before entering into a contract (GDPR Article 6(1)(b)).
- Performing a future contract and related communication: GDPR Article 6(1)(b).
- Optional 3D route preview and elevation lookup after a separate checkbox: consent under GDPR Article 6(1)(a).
- Optional storage of a GPX design and its settings under a link for 7 days: separate consent under GDPR Article 6(1)(a).
- Accounting, tax and other legal duties: GDPR Article 6(1)(c).
- Website security and abuse prevention: legitimate interests in operating a secure service (GDPR Article 6(1)(f)).
The checkbox below the inquiry form records that you acknowledge this notice. It is not consent and is not the legal basis for handling your inquiry. Data is not used for marketing without a separate legal basis, and no automated decisions are made.
4. Attachments and retention
A GPX file may contain precise location and movement data, and could reveal a home address or regular habits. Attach only the route section needed for the inquiry; where possible, remove the exact start and end points and unnecessary information about other people.
When you use the 3D configurator, the GPX file is processed in your browser. Only after you separately check the box, the route area's bounds are sent to our server; it creates a 10 × 10, 15 × 15 or 20 × 20 elevation grid according to the selected resolution and forwards it to OpenTopoData in batches of no more than 100 points. The full file and exact route line are not sent for the preview. If you later add the GPX to an inquiry, it is submitted with the form and retained as described below.
Attachments are stored in a private Cloudflare R2 bucket for the purpose of handling the inquiry. They are automatically deleted after 7 days; download links sent by email expire after the same period.
After separate confirmation, saving a design stores the full GPX and its colours, dimensions, title and date in private Cloudflare R2 storage for 7 days. Anyone who knows the random link can open the design; it is not an account or a document protected by sign-in. Do not publish the link if the GPX contains sensitive data. The link expires after 7 days, and the files are subject to the same seven-day storage lifecycle as attachments. You can request deletion and withdraw consent by emailing the contact address with the design link. Withdrawal does not affect earlier lawful processing or copies already downloaded by other recipients.
Unsuccessful or closed inquiries are deleted without undue delay and no later than 30 days after the correspondence ends. If a contract or dispute arises, only the data needed for performance, legal claims and statutory duties is retained for the applicable legal period.
5. Processors and recipients
The website uses Cloudflare for hosting, Pages Functions and file storage; Resend to send transactional email; Seznam.cz for the recipient mailbox; and, when you explicitly request a preview, OpenTopoData for elevation samples based on the route-area bounds. These providers process data as needed to deliver their services under their applicable terms and data-protection arrangements. Personal data is not sold.
Depending on provider settings, data may be processed outside the European Economic Area. Where required, transfers rely on an appropriate GDPR transfer mechanism and the provider’s applicable safeguards.
6. Your rights
Depending on the legal basis and circumstances, you may request access, correction, erasure or restriction, object to processing, or request data portability. Contact [email protected]. You may also lodge a complaint with the Czech Office for Personal Data Protection.
7. Cookies and technical data
The current website does not use analytics or marketing cookies, advertising pixels or external analytics scripts. Hosting and security providers may process technical request data as needed to operate and protect the service. If analytics or marketing tools are added later, the required information and consent mechanism will be provided before they run.
8. Security and third-party materials
The website uses HTTPS. Access to uploaded attachments is restricted by time-limited signed links. If a photo or file contains information about another person, make sure you have the right to provide it for the stated purpose.
9. Updates
This notice describes the current website workflow and will be updated if the form, providers or processing purposes change. Questions may be sent to [email protected].