Privacy / GDPR

PRIVACY
POLICY

Clear information about how we process email addresses submitted through the contact form on the Phams website.

1. DATA CONTROLLER

The controller of your personal data is Hai Pham Van, Company ID 22051091, with registered office at Příkop 843/4, Zábrdovice, 602 00 Brno, Czech Republic.

NameHai Pham Van
Company ID22051091
Registered addressPříkop 843/4, Zábrdovice, 602 00 Brno
Privacy contacthai@phams.cz

You may use the email above to exercise your rights or ask a question about the processing of your personal data.

2. DATA WE COLLECT

Through the contact form, we process only:

  • the email address you provide,
  • the date and time at which the form was submitted,
  • anonymous page-view statistics consisting of the visited path and time.

The web server may also generate necessary technical and security logs, such as an IP address, request time and requested URL, according to the hosting provider’s configuration.

To prevent automated abuse, the server temporarily keeps request counters associated with a daily-changing, keyed hash of the connecting IP address. Raw IP addresses are not stored in these counters. The identifiers are not linked to contact emails or used for advertising. Expired counters are removed during subsequent accepted requests.

3. PURPOSE AND LEGAL BASIS

Handling your inquiry

We use your email to contact you, handle your inquiry and continue communications about a potential collaboration. The legal basis is Article 6(1)(b) GDPR — taking steps at the request of the data subject prior to entering into a contract.

No newsletter subscription

Submitting the form does not subscribe you to a newsletter. Without a separate legal basis, we will not use your email for bulk marketing communications or sell it to third parties.

Providing your data

Providing your email is voluntary, but without it we cannot reply to your inquiry. No automated decision-making or profiling takes place.

4. RETENTION PERIOD

We retain the email address and submission time for as long as necessary to handle the inquiry, but no longer than 12 months after the last communication. If a contract is concluded, related data may be retained for longer where required by law or necessary to establish, exercise or defend legal claims.

5. RECIPIENTS AND HOSTING

Your data may be accessed by the controller and only by people who need it to handle the inquiry. The website uses OpenAI Sites and Cloudflare infrastructure for hosting, database storage, media delivery and Turnstile bot protection. Resend is used to deliver contact-form notification emails.

This website also uses Google Fonts. These technical providers may process connection data under their own terms and applicable data-transfer safeguards.

6. YOUR RIGHTS

Subject to the conditions set out in the GDPR, you have the right to:

  • obtain confirmation as to whether we process your data and request access to it,
  • request the correction of inaccurate data or its erasure,
  • request restriction of processing,
  • receive your data in a structured, commonly used and machine-readable format where the conditions for data portability are met,
  • lodge a complaint with the Czech Office for Personal Data Protection.

Czech Office for Personal Data Protection: Pplk. Sochora 27, 170 00 Prague 7, Czech Republic; email posta@uoou.gov.cz; website uoou.gov.cz.

7. SECURITY

Contact submissions and anonymous visit counts are stored in a non-public database. Access to the administration is restricted through authenticated sign-in and an owner allowlist. Contact submissions are protected by server-side validation and Cloudflare Turnstile. The controller restricts access to authorised persons and protects connected service accounts with appropriate authentication.