Privacy & cookies

Last updated 18 September 2026

Who is responsible

The controller of personal data on frengl.cz is Daniel Frengl, IČO 19491522, Hluboký Důl 5, 280 02 Nebovidy, Czech Republic. Contact: [email protected].

What is collected and why

Email. If you write to me, I use your address and message only to reply and to handle the enquiry (legal basis: steps before a contract / legitimate interest). I keep the correspondence as long as it is needed for that, at most three years after our last contact, unless a longer period is required by law.

Analytics, only with your consent. If you click “Allow”, the site loads:

• Google Analytics 4 (Google Ireland Ltd.): pages visited, time on page, device, browser, approximate location and where you came from. IP addresses are not stored in GA4. Data is kept for 14 months.
• Microsoft Clarity (Microsoft Ireland Operations Ltd.): heatmaps and recordings of how the pages are used (mouse movement, clicks, scrolling). Text you type is masked. Recordings are kept for 30 days, aggregated heatmaps and statistics for up to 13 months.

The purpose is to see which work people look at and where the site is hard to use. The legal basis is your consent (Art. 6(1)(a) GDPR). If you click “Decline”, neither tool is loaded at all and nothing is sent to Google or Microsoft.

Cookies

Without consent the site sets no cookies. Your choice itself is remembered in your browser’s local storage (ga-consent) so the bar does not appear on every visit. With consent, Google Analytics sets _ga and _ga_* (up to 2 years) and Clarity sets _clck (1 year) and _clsk (1 day), plus Microsoft cookies such as MUID on its own domain.

You can change your mind at any time in cookie settings (here, or at the bottom of the other pages). Withdrawing consent deletes these cookies and stops both tools; it does not affect what was collected before.

Who receives the data

Google and Microsoft process analytics data as my processors. Both may transfer data to the United States; these transfers rely on the EU–US Data Privacy Framework, under which both companies are certified. The site is hosted on Railway (Railway Corp., USA) and served through Cloudflare (Cloudflare, Inc., USA), which process technical request data such as IP addresses to deliver and protect the site.

Your rights

You can ask for access to your data, its correction or deletion, restriction of processing, data portability, and you can object to processing or withdraw consent. Write to [email protected]. You also have the right to lodge a complaint with the Czech data protection authority, Úřad pro ochranu osobních údajů (uoou.gov.cz).