Privacy policy.

This site, www.patrikrepkovsky.dev, is run by me — Patrik Repkovský — as a private individual based in Slovakia. I decide what personal data is collected here and why, which makes me the data controller under the General Data Protection Regulation (GDPR).

For anything to do with your data — a question, a correction, a deletion request — write to repkovsky.patrik@gmail.com. There is no separate data protection officer; the messages come straight to me.

The form on the contact page asks for your name, your email address and a message. That, plus anything you decide to put in the message itself, is all I receive. Nothing is collected in the background as you browse, and nothing about you is stored if you never submit the form.

Why. So I can read your message and reply to it. The legal basis is my legitimate interest in answering people who contact me (Art. 6(1)(f) GDPR), or — where your message is about working together — taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR).

How it reaches me. Your message goes from your browser straight to Web3Forms, a form-to-email service operated by Web3Creative in India, which processes the submission on servers in the United States and forwards it to my inbox. Web3Forms acts as a processor on my behalf, and may hold the submission on its own servers for a limited period; the details are in their privacy policy. My inbox is a personal email account hosted by Google.

Transfers outside the EEA. Because that provider operates from India and the United States, your message leaves the European Economic Area. The transfer is covered by the provider's data processing agreement and the European Commission's Standard Contractual Clauses it incorporates. If you would rather your message did not leave the EEA, email me directly instead of using the form.

Spam protection.To stop the form being used to flood my inbox, it checks with this site before sending, and the site allows three submissions an hour from the same internet connection. To count them, the server briefly notes your IP address and the times you submitted — my legitimate interest in keeping the form usable (Art. 6(1)(f) GDPR). Your message is not part of that check. Those few timestamps live in the server's memory, are never written to a database or attached to your message, and are gone within the hour.

How long I keep it. I keep correspondence for as long as the conversation is useful — normally no more than two years — and delete it afterwards. You can ask me to delete it sooner at any time.

The site is not aimed at children, and I do not knowingly collect personal data from anyone under 16.

The site is hosted on Vercel (Vercel Inc., United States), which acts as a processor under its data processing agreement. As with any web server, each request is logged automatically: your IP address, the page requested, the time, and your browser's user agent string.

These logs exist so the site can be delivered, kept secure and debugged when something breaks — my legitimate interest in operating it (Art. 6(1)(f) GDPR). They are kept only briefly by the host and are then discarded. I do not read them routinely, do not build profiles from them, and never connect them to the content of anything you send through the contact form — the only IP address I handle myself is the hour-long submission count described above.

This site sets no cookies at all, and uses no analytics, measurement or advertising tools. Nothing here follows you between sites.

The one thing it does store is a single entry in your browser's session storage, intro-played, so the opening animation on the homepage plays once rather than on every navigation. It holds no personal data, never leaves your browser, and disappears when you close the tab.

Fonts, images and scripts are all served from this domain. The typefaces come from Google Fonts but are downloaded at build time and self-hosted, so loading a page sends no request to Google and shares no IP address with them.

Some pages link out — to GitHub, LinkedIn, and to the live sites of projects I have worked on. Nothing from those services is embedded in these pages, so they learn nothing about you until you actually follow a link. Once you do, that site's own privacy policy applies and this one no longer does.

Under the GDPR you have the following rights over your personal data. Exercising any of them is free, and I will respond within one month.

There is no automated decision-making or profiling on this site. To use any of these rights, email repkovsky.patrik@gmail.com.

If you think I have handled your data badly, you can complain to the Slovak supervisory authority — Úrad na ochranu osobných údajov Slovenskej republiky, dataprotection.gov.sk. I would appreciate the chance to sort it out first.

If what this site does with data changes, I will update this page and the date at the top of it. No older versions are kept — the page always describes what happens right now.

Questions about any of it are welcome: get in touch.