Privacy policy and legal notice
Last updated: TODO: date
TODO: Operator details come from src/config/site.ts and are still placeholders. Replace them with the real values and have the text reviewed by a lawyer before going live.
1. Site operator
TODO: obchodní jméno / Ing. Tomáš Kraus
TODO: ulice a číslo popisné
TODO: PSČ a město
Česká republika
Company ID: TODO: IČO
VAT ID: TODO: DIČ / USt-IdNr.
Registration: TODO: zápis v živnostenském / obchodním rejstříku
Email: tomas@kraus-ai.com
Website: kraus-ai.com
2. Scope of processing
This website is a static information site. It contains no contact forms, no user accounts and no analytics or tracking tools. It sets no cookies that would require consent. Fonts are served from our own server, so no connection is made to Google Fonts or comparable services.
3. Server logs
The site is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When a page is requested, the hosting provider processes technically necessary access data:
- IP address of the requesting device
- date and time of access
- requested URL and volume of data transferred
- referrer URL, browser type and operating system
This processing is required to deliver the site and to keep it secure. The legal basis is Article 6(1)(f) GDPR, our legitimate interest in secure and uninterrupted operation. A data processing agreement under Article 28 GDPR is in place with the hosting provider, and transfers to the United States rely on the European Commission's standard contractual clauses.
4. Contact by email
If you contact us by email, we process your email address, name and the content of your message solely in order to answer your enquiry. The legal basis is Article 6(1)(b) GDPR for pre-contractual steps, otherwise Article 6(1)(f) GDPR, our legitimate interest in responding to enquiries.
Messages are deleted once the enquiry has been dealt with, unless statutory retention periods apply. Commercial and tax retention obligations remain unaffected.
5. Scheduling through an external service
TODO: Once a scheduling service (Cal.com or Calendly) is embedded, extend this section with the provider, its address, the data processed, the legal basis and the data processing agreement.
No scheduling service is currently embedded on this website. Appointments are arranged by email only.
6. Links to third-party sites
This website links to external services such as GitHub, LinkedIn and demo applications. Clicking such a link takes you off this site. We have no influence over how those operators process data, and their own privacy policies apply.
7. Your rights
In relation to your personal data you have the right to:
- access the data being processed (Article 15 GDPR)
- rectification of inaccurate data (Article 16 GDPR)
- erasure (Article 17 GDPR)
- restriction of processing (Article 18 GDPR)
- data portability (Article 20 GDPR)
- object to processing (Article 21 GDPR)
An informal message to tomas@kraus-ai.com is enough to exercise any of these rights.
8. Complaints to a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your residence, place of work or the place of the alleged infringement (Article 77 GDPR). The competent authority for the operator is the Office for Personal Data Protection of the Czech Republic, Pplk. Sochora 27, 170 00 Prague 7,www.uoou.cz.
9. Transport security
This website uses TLS encryption. You can recognise an encrypted connection by the address bar of your browser starting with https://.
10. Copyright
The content of this website, including text, graphics and source code, is protected by copyright. Reproduction, adaptation and distribution beyond statutory licences require the written consent of the author.
11. Changes
We will update this document as soon as data processing on this site changes, for example when a scheduling service is added. The version published on this page is the one that applies.