Privacy policy

1. Controller of personal data

The controller of the personal data processed through this website is Leadora Technologies s.r.o., Company registration number (IČO) 24624136, with its registered office at Hostěradice 44, 252 82 Kamenný Přívoz, Czech Republic, entered in the Commercial Register kept by the Municipal Court in Prague, file reference C 444314/MSPH (the “controller”). The site is run for the controller and enquiries are handled by David Sak.

Contact for personal data matters: business@dsak.tech.

This policy describes the processing of personal data on www.dsak.tech including the English version. The client portal at app.dsak.tech and the password protected samples are run separately, and information about the processing in them is given to clients directly when their access is set up.

2. What data we process

Data you give us yourself by submitting the contact form:

• name,
• e-mail address,
• preferred consultation date (if you pick one),
• the content of your message.

Data that arises technically as soon as you visit the site:

• IP address and browser headers in the hosting operational logs, briefly and only for running and securing the site,
• country derived from the IP address and information about the browser and the device for traffic measurement, described in section 3.

The site also uses Plausible traffic analytics, which works without cookies. The details are in section 3.

3. Traffic measurement

For traffic measurement we use Plausible Analytics, a service of Plausible Insights OÜ, established in Estonia. The data is processed and stored solely in the European Union, it is not transferred outside the EU.

Plausible uses no cookies and stores nothing on your device. That is why you will find no cookie bar on the site and why we do not ask you for consent: without storing and reading data on your device, no duty to obtain consent arises under Section 89 of Act No. 127/2005 Coll., on electronic communications.

The following data is recorded: the address of the page visited, where you came from, the type of browser, operating system and device, and the country. The country is derived from the IP address, the IP address itself is not stored. To tell repeat visits apart within a day, a fingerprint is computed from which no particular person can be identified, and the input used to compute it is deleted every 24 hours.

If you close the floating consultation offer, that choice is saved in the browser memory (sessionStorage) until the tab is closed, so that we do not offer it to you again. This is not tracking, the value never leaves your device and is not used for anything else.

The legal basis is our legitimate interest under Article 6(1)(f) GDPR in knowing which pages people are interested in and where they come from. You can object to this processing at business@dsak.tech, or block the measurement with a browser extension.

4. Purpose and legal basis of the processing

We process the data from the form solely so that we can answer your enquiry and arrange a consultation or cooperation, that is, for steps taken prior to entering into a contract under Article 6(1)(b) GDPR. The subsequent communication is kept on the basis of the controller's legitimate interest (Article 6(1)(f) GDPR) in keeping business records.

We do not use your data to send unsolicited commercial communications and we do not sell it to third parties.

Providing this data is neither a statutory nor a contractual obligation. We do, however, need your name, e-mail address and the text of the message in order to answer you, which is why the form will not submit without them. The consultation date is optional. Leaving it blank has no other consequence.

Neither the processing of the contact form data nor the traffic measurement involves automated decision making or profiling within the meaning of Article 22 GDPR.

5. Retention period

We keep the data for as long as your enquiry is being handled and then for no longer than 3 years from the last communication between us, after which we delete it. Data that forms part of contractual or accounting documentation is kept for the period laid down by law.

A copy of the message sent stays briefly with the service through which we deliver the e-mail, together with the technical records of the sending. The hosting operational logs with technical data about requests are kept briefly under the provider's terms.

6. Who has access to the data

The data is accessible to the controller and to David Sak, who runs the site and handles enquiries for the controller. For the technical operation of the site we use the following processors:

• Vercel Inc. (USA), running the website and the server side,
• Resend (USA), sending the contact form message to our address,
• Plausible Insights OÜ (Estonia), traffic measurement,
• the e-mail mailbox provider, storage of the received communication.

We serve the web fonts and all other content from our own infrastructure, no network font is loaded from anyone else's servers. The only thing loaded from elsewhere during ordinary browsing is the Plausible measurement script described in section 3.

The home page has a booking calendar from the service Cal.com. It does not load by itself, it appears only after you click it. Until then nothing is sent to the calendar provider, not even your IP address. Once you open the calendar, the Cal.com terms apply to the booking. You do not have to book, writing to business@dsak.tech is enough.

The site runs on Vercel Inc. infrastructure, which processes technical data about requests including the IP address in order to run it. For this service, the transfer outside the EU is covered by standard contractual clauses.

The message from the contact form leaves through our own server function, which sends it by e-mail using the service Resend. Resend is a US service, the transfer outside the EU is covered by standard contractual clauses. If sending fails, your e-mail client opens with the message prefilled. At that moment the message goes straight from you to us, it passes through no third party, and it is not sent until you send it yourself. If passing data outside the EU does not suit you, write to us directly at business@dsak.tech, you do not have to use the form.

7. Your rights

In connection with the processing of personal data you have the right:

• of access to your data and to information about its processing,
• to rectification of inaccurate data,
• to erasure (the “right to be forgotten”),
• to restriction of processing,
• to data portability,
• to object to processing based on legitimate interest,
• to lodge a complaint with the supervisory authority, Úřad pro ochranu osobních údajů (Office for Personal Data Protection), Pplk. Sochora 27, 170 00 Praha 7, Czech Republic, uoou.gov.cz.

You exercise your rights by e-mail at business@dsak.tech. We will answer within 30 days at the latest.

8. Security

Access to the enquiries received is protected by credentials, and only the controller and David Sak, as the person entrusted with running the site, have access to it. The site does not accept or store any payment data.

So that the form cannot be misused for mass sending, your IP address is held in the server memory for a short time and the number of submissions is counted from it. The record deletes itself and is not passed on anywhere.

9. Changes to this policy

We may update this policy from time to time, for example when the services we use change. The current wording is always available on this page.