Privacy.

This policy explains how I process the personal data of visitors to tamasoft.net and of people who contact me about courses, talks or consultations, in line with Regulation (EU) 2016/679 (GDPR) and the Czech Act No. 110/2019 Coll. on personal data processing.

1. Controller

The controller of personal data is:

Tamasoft s.r.o.
Company ID: 08530866
Registered office: Vačkářova 278, 251 01 Dobřejovice, Czech Republic
Registered in the Commercial Register kept by the Municipal Court in Prague
Contact: jan.tamas@tamasoft.net

The controller has not appointed a data protection officer, as it is not required to.

2. What I process

Only what you give me through the contact form or by email:

• your name,
• your email address,
• your phone number (optional),
• your company, role or other details you include in your message,
• the content of your message and our correspondence.

If we enter into a contract (a course or consultation), I also process billing details as far as the law requires (name, registered office, company ID).

3. Purpose and legal basis

• Replying to your enquiry — the controller's legitimate interest (Art. 6(1)(f) GDPR), or steps taken at your request before entering into a contract (Art. 6(1)(b)).
• Performing a contract (course, talk, consultation) — Art. 6(1)(b) GDPR.
• Legal obligations (accounting, tax, keeping records) — Art. 6(1)(c) GDPR.
• Protecting the form from abuse (spam filtering) — the controller's legitimate interest.

Giving your data is voluntary, but without basic contact details I can't reply or provide the service.

4. How long I keep it

• Contact form and email: as long as needed to deal with your enquiry, and no longer than 3 years from our last contact.
• Data linked to a contract: for the contract's duration and then as long as the law requires (tax and accounting records for 10 years).

5. Who processes it for me

I don't pass personal data to third parties for marketing. These processors handle it technically:

• Cloudflare (Cloudflare, Inc., USA) — hosting the website and its server functions;
• Resend (Resend, Inc., USA) — delivering the emails sent from the contact form;
• Cloudflare Web Analytics (Cloudflare, Inc., USA) — anonymous visitor statistics without cookies;
• an accounting provider, when invoicing.

Transfers outside the EU (to the USA) rely on the European Commission's standard contractual clauses or the EU–U.S. Data Privacy Framework.

6. Cookies and analytics

The site uses no advertising or tracking cookies. Visitor numbers are measured with Cloudflare Web Analytics, which uses no cookies, stores no personal data and cannot identify individual visitors. The data is aggregated and used only to see which pages people find useful.

The site sets one small cookie only if you switch language yourself, to remember your choice. It holds nothing else and is not used for tracking.

7. Your rights

Under the GDPR you have the right:

• to access your data and get a copy,
• to have inaccurate data corrected or incomplete data completed,
• to have your data erased ("the right to be forgotten") where there is no legal reason to keep it,
• to restrict processing,
• to object to processing based on legitimate interest,
• to data portability,
• to withdraw consent where processing is based on consent,
• to complain to the supervisory authority — the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7.

Email jan.tamas@tamasoft.net to use these rights. I'll reply without undue delay, and within one month at the latest.

8. Security

I keep data in secured services with encrypted transfer (HTTPS), protected by strong passwords and two-factor authentication, and take reasonable technical and organisational measures against unauthorised access, loss or misuse.

9. Changes

I may update this policy from time to time. The current version is always on this page.

In force from 22 April 2026, last changed in October 2026.