Privacy, cookies & website terms

1. Who is responsible for your data

The controller of personal data processed through this website is:

Registered in the Czech trade register (živnostenský rejstřík) as a self-employed person (OSVČ).

2. What data is processed

This is a static informational website. It has no accounts, no login, no contact form, no comments and no newsletter. In practice only two kinds of processing happen:

No profiling and no automated decision-making take place. No special-category data is collected. Nothing is sold or shared for advertising.

3. Cookies

This website does not use cookies. It sets no cookies of its own, uses no third-party advertising or tracking cookies, and does not fingerprint your device or browser.

Because nothing is stored on or read from your device for tracking purposes, the consent requirement under §89(3) of Act No. 127/2005 Coll. on Electronic Communications (implementing Article 5(3) of the ePrivacy Directive) is not triggered — which is why you see no cookie banner and there is nothing for you to manage.

The one thing stored locally is your light/dark theme preference, saved in your own browser's local storage so the site remembers how you like to read it. It is a single setting, never transmitted anywhere, and cannot identify you. Clearing your browser data removes it.

4. Analytics

This site uses Cloudflare Web Analytics to see aggregate traffic — roughly how many people visit which pages, and where they arrived from. It is cookieless, does not track visitors across websites, does not build profiles, and does not fingerprint.

As with any web server, IP addresses are processed in order to serve the site and produce those aggregate counts. Under the GDPR an IP address can be personal data, so for completeness: the lawful basis is legitimate interest, and the interest is narrow — understanding whether anyone reads this site.

No Google Analytics, no Google Tag Manager, no Meta Pixel, no LinkedIn Insight Tag, no Microsoft Clarity, no heatmapping and no advertising tags are used. The only file a page loads from outside this site is the Cloudflare analytics script described above, and Cloudflare is already the company hosting the site — no third company is involved. The Inter typeface is stored here and served from here, not from Google Fonts, so opening a page sends nothing to Google.

5. Who else processes data

Both are established providers offering GDPR-compliant data processing terms. Some processing may take place outside the European Economic Area; such transfers rely on the applicable safeguards, including the EU–US Data Privacy Framework and Standard Contractual Clauses.

6. How long data is kept

• Aggregate analytics: retained by Cloudflare according to its own retention periods; the data is aggregated and not linked to an identifiable individual.
• Email correspondence: kept for as long as the conversation is relevant, and where a contract results, for as long as legal and accounting obligations require.
• Server and security logs: retained by the hosting provider for a short period for security and abuse-prevention purposes.

7. Your rights

Under the GDPR you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to data portability. Where processing rests on legitimate interest, you may object at any time.

Given how little this site collects, there is usually nothing held about an individual visitor at all. To exercise any right, email contact@makskulish.com — I will respond within one month.

You also have the right to lodge a complaint with the Czech supervisory authority, the Úřad pro ochranu osobních údajů (uoou.cz), Pplk. Sochora 27, 170 00 Prague 7.

8. Security

The site is served exclusively over HTTPS with a certificate managed by the hosting provider. It is a static site with no database and no user accounts, which removes most common attack surfaces. Email is protected by the provider's standard security controls together with SPF, DKIM and DMARC records on the domain — three standards that stop other people sending email that looks like it came from this domain.

9. External links

This website links to external services including LinkedIn, X, YouTube and the websites of third-party conferences. Once you follow such a link, that site's own privacy policy applies — this policy covers only makskulish.com.

10. Content & website terms

The content of this website — text, structure and design — is the work of Maks Kulish, unless stated otherwise. Quotations reproduced in the recommendations section remain the words of their authors and are published with their knowledge as public LinkedIn recommendations.

You are welcome to quote from this site with attribution and a link back. Republishing whole articles or reproducing the site's design requires permission — just ask.

Content here reflects personal views and professional experience. It is provided in good faith for general information and is not professional advice for any particular situation.

11. Changes to this policy

If this policy changes, the "last updated" date at the top of the page changes with it. If the site ever starts collecting more than it does today — a contact form, a newsletter, or analytics that use cookies — this page will be updated before that happens.