06Privacy
Privacy & cookies.
A short, plain-language summary: what data I collect, why, how long, and what your rights are.
Ing. Ondřej Novák, MBA — Company ID 74534599, VAT ID CZ8602020020, registered in Prague, Czech Republic.
Contact: ondrej@on-consulting.cz
I am not required to appoint a Data Protection Officer (DPO). Please send privacy enquiries directly by e-mail.
This is a static informational site. Nothing is measured without your consent, and there is no retargeting or cross-site tracking. If you allow analytics in the banner, I process visit data: pages viewed, where you came from, device, browser and screen size, and approximate location derived from your IP address.
Otherwise I receive personal data only when you contact me:
- Contact form on this site — name, e-mail, company name (optional), and your message.
- E-mail or LinkedIn message — any data you choose to share in our correspondence.
I use your data solely to respond and to discuss next steps. Legal basis: legitimate interest (Article 6(1)(f) GDPR) — handling business correspondence you initiated.
Traffic measurement (Google Analytics, Microsoft Clarity, Ahrefs Web Analytics) helps me improve the site. Legal basis: your consent (Article 6(1)(a) GDPR), which you can withdraw at any time under Cookie settings in the footer.
I do not sell, share with marketing partners, or use the data for automated decision-making.
I keep e-mails and conversation history for as long as needed for the project or follow-up, but no longer than 3 years from the last contact. After that I delete or anonymise the correspondence.
To run this site and our communication I use these services:
- Web3Forms (Web3Forms LLC, USA) — processes submitted form data. Web3Forms is a pass-through; it doesn’t store data longer than needed to deliver the e-mail. Privacy policy →
- hCaptcha (Intuition Machines Inc.) — anti-spam protection on the contact form. Stores technical cookies and reads browser data to decide whether you’re human. Privacy policy →
- LinkedIn (LinkedIn Ireland Unlimited Company, Ireland) — embedded profile badge on the Contact page. Loaded only after your consent to marketing cookies; until then a plain link is shown. Privacy policy →
- Hosting provider — the server delivering the site. Standard access logs (IP, time, requested URL) are part of normal hosting operation and serve security.
- Google Tag Manager, Google Analytics 4 (Google Ireland Ltd., Ireland) — traffic and behaviour measurement. Loaded only after your consent, in Google Consent Mode v2 with IP anonymisation. Privacy policy →
- Microsoft Clarity (Microsoft Ireland Operations Ltd., Ireland) — heatmaps and an anonymised recording of on-page movement (scrolling, clicks). Entered text and sensitive fields are masked automatically. Loaded only after your consent. Privacy statement →
- Ahrefs Web Analytics (Ahrefs Pte. Ltd., Singapore) — cookie-free traffic measurement. Loaded only after your consent to analytics. It uses the IP address only to estimate location and, according to Ahrefs, does not store it; unique visits are counted from a hash of IP address and browser with a key that changes every 24 hours, so visits on different days are not linked. Data is transferred to Singapore; Ahrefs offers a data processing addendum with the EU Standard Contractual Clauses. How Ahrefs measures →
Without your consent the site stores necessary cookies only. Analytics start at the moment you allow them in the banner — nothing is measured before that. Neither Google Tag Manager nor Ahrefs loads before consent.
| Cookie | Purpose | Duration | Category |
|---|---|---|---|
hCaptcha (hc_accessibility and others) | Verifying the form is submitted by a human | session – 1 year | Necessary |
on-consent-v1 | Storing your cookie choice (localStorage) | 1 year | Necessary |
_ga, _ga_* | Google Analytics — distinguishing visitors and sessions | 2 years | Analytics |
_clck, _clsk | Microsoft Clarity — linking actions within a session | 1 year / 1 day | Analytics |
MUID, CLID | Microsoft Clarity — browser identifier | 1 year | Analytics |
| Ahrefs Web Analytics | Traffic measurement, uses no cookies or browser storage | — | Analytics |
bcookie, li_gc and others | LinkedIn — embedded profile badge on the Contact page | up to 2 years | Marketing |
You can change your choice at any time via Cookie settings in the footer. When consent is withdrawn, analytics cookies are deleted immediately. I also honour the browser signals Global Privacy Control and Do Not Track — if either is on, the banner does not appear and nothing is measured.
Legal basis for analytics cookies: your consent under Article 6(1)(a) GDPR and Section 89(3) of Czech Act No. 127/2005 Coll. Declining has no effect on how the site works.
As a data subject under GDPR you have the right to:
- access the data I hold about you,
- have inaccurate data corrected,
- have data erased (right to be forgotten),
- restrict processing,
- data portability,
- object to processing,
- lodge a complaint with the Czech Office for Personal Data Protection.
Send your request to ondrej@on-consulting.cz. I’ll respond within 30 days at the latest.
This version is effective from November 2, 2026. If a material change occurs, I’ll update this page and announce it on the homepage.
Copyright and use of content by artificial intelligence
All content on this website — text, images, diagrams and structure — is a copyrighted work protected under Czech Act No. 121/2000 Coll. on Copyright.
Search engines and AI services may crawl and use the content of this website, including for model training. When quoting, please cite the source.
Licensing enquiries are welcome — write to ondrej@on-consulting.cz.