Privacy Policy

1. Data controller

The following proposed operator details are taken from the supplied codeee.cz source and must be confirmed for codeeestudio.com before launch:

Matyáš Změlík
Business ID (IČO): 24080951
Korunní 2569/108, 101 00 Prague 10, Czech Republic
Email: contact@codeeestudio.com

2. Information collected

When you submit a project enquiry, the website may collect:

• name and email address;
• company or business name;
• current website URL;
• project type, budget range and desired timeline;
• the project description and additional notes you provide;
• technical information needed to protect and operate the form, including the submitting IP address for temporary rate limiting and a necessary session identifier.

Please do not submit passwords, payment details, health information or unrelated confidential material.

3. Purpose and legal basis

Enquiry information is used to review your request, respond to you, clarify requirements, prepare a proposal where appropriate, prevent form abuse and protect the website. The intended legal bases are steps taken at your request before entering a contract and the controller’s legitimate interest in secure business communication. These bases must be confirmed during legal review.

4. Hosting, email and service providers

The production hosting provider and email provider will process data as needed to host the website and deliver enquiries. Infomaniak is the preferred provider mentioned in the project brief, but the final provider and its processing terms have not yet been confirmed. No analytics, advertising pixels or marketing platforms are included in this build.

If another provider or integration is added, this policy must be updated before that service is enabled.

5. Retention

Enquiry emails should be retained only for as long as needed to respond, prepare or perform a contract, meet legal obligations and handle potential claims. The precise operational retention period is [TO BE CONFIRMED]. Temporary anti-spam records are designed to retain timestamps for no longer than 24 hours.

6. Cookies and similar storage

The current build does not include analytics, advertising or preference cookies. The contact form uses a strictly necessary session cookie to keep its anti-spam challenge tied to the same browser session. It expires when the browser session ends. Because only essential functionality is present, a consent banner is not included. This must be reassessed if tracking or optional services are added.

7. Security

The form validates input on the server, uses an anti-spam challenge, a hidden field and request-rate limits. SMTP credentials are read from server-side environment variables and are not included in public HTML or JavaScript. No online system can be guaranteed completely secure.

8. Your rights

Depending on applicable law, you may have rights to access, correct, erase or restrict processing of your personal data, object to certain processing, receive portable data and lodge a complaint with a supervisory authority. Contact the confirmed controller using the address above to exercise a right.

9. Updates

This notice should be updated when the controller details, providers, form workflow, retention practices or tracking technologies change. The publication date and revision history should then be added.