Privacy

Who is responsible

The controller of personal data on this site is Petr Pořízek (Rhiz3K), privacy@rhiz3k.dev.

What this site does not do

• No cookies, no tracking scripts and no analytics in the page.
• No requests to other servers. Fonts, images and videos come from this domain, and the Content-Security-Policy (default-src 'self') blocks anything else.
• The web server in the container (nginx) keeps no access log. Only its error log may record a request when something fails.

Hosting and technical logs

The site runs on a Hetzner server, behind Coolify and its Traefik reverse proxy. To operate and secure the site, IP addresses and request metadata are processed in the technical logs and statistics listed below. The legal basis is the legitimate interest in running a secure website (Art. 6(1)(f) GDPR).

• Access logs of the hosting proxy (Traefik): full IP address, time, URL path, User-Agent and Referer. Kept for 7 days.
• Error log of the web server (nginx in Docker): IP address, time, URL path and User-Agent. At most about 150 MB, deleted on every deployment; new containers are limited to 3 × 10 MB.
• Aggregate visitor statistics (Coolify Sentinel): IP address shortened to /24 or /48, no individual requests. Hourly statistics are kept for 30 days and daily statistics for 395 days.

Recipients and processors:

• Hetzner Online GmbH (Germany) – server hosting.
• coolLabs Solutions Kft. (Hungary) – Coolify, the platform used to operate the server and its proxy and statistics.
• Cloudflare, Inc. (USA) – DNS for the domain and e-mail routing for privacy@rhiz3k.dev.

If you send an e-mail

If you write to privacy@rhiz3k.dev, the controller processes your address, your message and its metadata in order to handle your request.

Cloudflare, Inc. (USA) and Google LLC (USA) – e-mails sent to privacy@rhiz3k.dev pass through Cloudflare Email Routing and are forwarded to a Gmail mailbox. Both companies are certified under the EU-US Data Privacy Framework; transfers rely on the European Commission adequacy decision of 10 July 2023 (Art. 45 GDPR).

Retention: 365 days from the request being resolved, then deleted.

Your rights

Under the GDPR you have the right to access your personal data, to have it corrected or erased, to restrict its processing, to object to it and to data portability, where these rights apply. Write to the address above.

You also have the right to lodge a complaint with the Czech supervisory authority, Úřad pro ochranu osobních údajů (ÚOOÚ).