We take the protection of your personal data very seriously. This Privacy Policy informs you about how we handle personal data when you visit our website and use our contact form in accordance with the General Data Protection Regulation (GDPR) and applicable EU data protection laws.
1. Data Controller
The entity responsible for data processing on this website (Data Controller) is:
- Name / Legal Entity Name: Jan Čecháček
- Address:
- Email: cechacek@sciontech.eu
2. Overview of Data Processing
Our website does not collect, track, or store personal data or use analytics cookies on its own. The only data processing that takes place on this website occurs when you voluntarily contact us via our contact form.
3. Contact Form & Web3Forms
a. Scope and Purpose of Processing
When you submit a message via our contact form, we collect the personal data you provide (such as your name, email address, and message content). This data is processed solely for the purpose of receiving, processing, and responding to your inquiry.
b. Legal Basis
The legal basis for processing this data is Art. 6(1)(f) GDPR (legitimate interest to process user inquiries) or Art. 6(1)(b) GDPR if your inquiry aims to enter into a contract or pre-contractual measures.
c. Data Processor (Web3Forms)
To power and deliver contact form submissions without storing them on our own web server, we use Web3Forms, operated by Web3Forms.
When you submit the contact form, your submission data is securely routed through Web3Forms to our email address. Web3Forms acts as a data processor on our behalf.
Provider Privacy Policy: For details on Web3Forms' security and privacy practices, please refer to the Web3Forms Privacy Policy.
4. Spam Prevention (hCaptcha)
a. Scope and Purpose of Processing
To protect our website and contact form against automated abuse, spam, and bot attacks, we integrate hCaptcha, a service provided by Intuition Machines, Inc.
hCaptcha analyzes user behavior (e.g., mouse movements, interaction duration, IP address, user agent) to determine whether a form is being submitted by a human or an automated script.
b. Legal Basis
The legal basis for using hCaptcha is Art. 6(1)(f) GDPR (legitimate interest in protecting our web infrastructure against spam, abuse, and cyber threats).
c. Data Recipient & Third-Country Transfer
hCaptcha processes hardware and software information, such as device and application data, and sends it to Intuition Machines, Inc. for analysis.
Service Provider: Intuition Machines, Inc., 350 Alabama St, San Francisco, CA 94110, USA.
Data Transfer Notice: Where data is transferred to the USA, data protection is ensured through appropriate safeguards under GDPR, including Standard Contractual Clauses (SCCs) and/or EU-US Data Privacy Framework certification.
Provider Privacy Policy: hCaptcha Privacy Policy and hCaptcha Terms of Service.
5. Storage Duration
We store the personal data you send us via the contact form only for as long as necessary to fulfill the purpose of your inquiry or until you request its deletion.
- Email communications are retained for standard legal/commercial retention periods where required by law (e.g., statutory accounting or commercial obligation regulations).
- If no legal retention obligations apply, your inquiries are periodically deleted once fully resolved.
6. Your Rights Under GDPR
As a data subject located in the EU/EEA, you have the following rights under the GDPR regarding your personal data:
- Right to Access (Art. 15 GDPR): You have the right to request confirmation as to whether your personal data is being processed and obtain a copy of that data.
- Right to Rectification (Art. 16 GDPR): You can request the correction of inaccurate or incomplete personal data.
- Right to Erasure / "Right to be Forgotten" (Art. 17 GDPR): You can request the deletion of your personal data where grounds apply.
- Right to Restriction of Processing (Art. 18 GDPR): You can ask us to limit the processing of your data under certain conditions.
- Right to Data Portability (Art. 20 GDPR): You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
- Right to Object (Art. 21 GDPR): You have the right to object at any time to the processing of your personal data based on Art. 6(1)(f) GDPR (legitimate interests).
- Right to Lodge a Complaint: You have the right to lodge a complaint with a Data Protection Supervisory Authority in your EU Member State.
To exercise any of these rights, please reach out to us using the email provided in Section 1.
7. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy to reflect changes in legal requirements or changes to our data processing practices (e.g., if we introduce new features, services, or analytics tools in the future).