Privacy & cookie policy

Effective from 11 November 2026

This policy explains what personal data we process when you visit vibekodo.cz or contact us, why we do it and what rights you have. We follow Regulation (EU) 2016/679 (GDPR) and Czech Act No. 110/2019 Coll., on the processing of personal data.

1. Who the controller is

The controller of your personal data is Sofie Panfilova, a sole trader registered in the Czech Trade Register, company ID (IČO) 08256209, registered office Jaromírova 487/4, 128 00 Prague 2, Czech Republic (“we”).

Contact for data protection matters: sofia.panfilova@gmail.com

We have not appointed a Data Protection Officer, as we are not legally required to.

2. What data we process and why

When you write to us

The brief form on the website does not send or store any data itself: when you click it, it opens your email app with a pre-filled message that you send yourself. We therefore process the data you send us by email, typically your name, email address and possibly your phone number, company name and a description of your project.

  • Purpose: to reply to your enquiry, prepare a quote and, where applicable, conclude and perform a contract.
  • Legal basis: steps taken prior to entering into a contract and performance of a contract (Art. 6(1)(b) GDPR); for general enquiries, our legitimate interest in replying to communication (Art. 6(1)(f) GDPR).
  • Retention: for the duration of our communication and no longer than 3 years after the last contact if no contract is concluded. If a contract is concluded, for its duration and then for as long as necessary to protect legal claims. Accounting and tax documents are kept for the period required by law (usually 10 years).

When you visit the website

  • Technical data (IP address, browser type, time of access) is processed by our hosting provider so that the website works and is protected against attacks. The legal basis is our legitimate interest in operating the website securely (Art. 6(1)(f) GDPR). We do not analyse this data ourselves.
  • Visitor analytics (Google Analytics 4) runs only if you give your consent in the cookie banner. It tells us which pages people read, where they come from and which devices they use, so we can improve the website. The legal basis is your consent (Art. 6(1)(a) GDPR and Section 89(3) of Czech Act No. 127/2005 Coll., on electronic communications). Google Analytics data is kept for 14 months.

We do not sell personal data, and we do not use it for automated decision-making or profiling with legal effects.

3. Cookies

Cookies are small files that a website stores in your browser.

Cookie / storage Provider Purpose Duration Consent
Cookie banner choice vibekodo.cz remembers whether you allowed or refused analytics 12 months not needed (strictly necessary)
_ga Google distinguishes visitors for statistics 2 years yes
_ga_<ID> Google keeps session state for statistics 2 years yes

You can change or withdraw your consent at any time via the “Cookie settings” link in the website footer. Withdrawing consent does not affect the lawfulness of processing before the withdrawal. You can also delete or block cookies in your browser settings.

4. Who we share data with

We share data only with processors who help us run our services, and only to the extent necessary:

  • Cloudflare, Inc. – website hosting and security;
  • Google Ireland Limited / Google LLC – email (Gmail) and, if you consent, Google Analytics.

Some of them may also process data in the USA. Such transfers are based on the European Commission’s adequacy decision (EU-U.S. Data Privacy Framework), in which these companies participate, or on standard contractual clauses.

We may also disclose data to public authorities where the law requires it.

5. Your rights

You have the right:

  • to access the data we process about you;
  • to have inaccurate data rectified;
  • to erasure, if the data is no longer needed or the processing is not lawful;
  • to restrict processing;
  • to data portability;
  • to object to processing based on legitimate interest;
  • to withdraw your consent to analytics cookies at any time.

Send your request to sofia.panfilova@gmail.com. We will reply without undue delay and within one month at the latest.

If you believe we handle your data in breach of the rules, you can lodge a complaint with the Czech supervisory authority, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 727/27, 170 00 Prague 7, uoou.gov.cz, or with the supervisory authority in the EU country where you live.

6. Changes to this policy

We may update this policy, for example when we add a new service or tool. The current version is always published on this page together with its effective date.