Privacy policy

Data controller

The data controller is David Zelenka, marketing consultant, e-mail: jsem@davidzelenka.cz. I operate this site (tools.davidzelenka.cz) as a self-employed individual.

What data I process

I try to process as little data as possible. Specifically:

• Newsletter: first name and e-mail — only if you sign up yourself.
• CtrlV (encrypted pastebin): the encrypted content of your text is temporarily stored on the server. I never see the plaintext — the decryption key lives only in the URL, known only to you and the recipient. Everything is auto-deleted after the configured time (max 30 days).
• Other tools (UTM, Pixelov, SEO Preview, Redirect Checker): run entirely in your browser. No data is sent to the server.
• Technical logs: Vercel (hosting provider) keeps basic access logs (IP, time, URL) for operational and abuse-prevention purposes.

Purpose of processing

• Newsletter: sending updates about new tools and digital marketing tips.
• CtrlV: enabling the sharing of encrypted content between sender and recipient.
• Technical logs: operation, error debugging, abuse prevention.

Legal basis

• Newsletter: consent given when subscribing. You can unsubscribe anytime via the link in every e-mail.
• CtrlV and other tools: performing a service you explicitly requested.
• Logs: legitimate interest in ensuring operation and security.

Retention period

• Newsletter: until you unsubscribe.
• CtrlV: according to the expiration you set (1 hour to 30 days) or until first read for burn-after-read. Data is automatically deleted.
• Logs: for the scope and period the hosting provider retains.

Processors

For operation I use these external services:

• Vercel Inc. (USA, EU data centers) — web hosting.
• Ecomail s.r.o. (Czech Republic) — newsletter delivery.
• Redis Labs / Redis Cloud (EU) — temporary storage for CtrlV.

All processors are bound by a Data Processing Agreement (DPA) and meet GDPR requirements.

Cookies and tracking

For traffic analysis I use Google Analytics 4 (GA4) via Google Tag Manager. I track anonymized traffic — where visitors come from, which tools they use, and where errors happen. IP addresses are anonymized and no personal data is stored in analytics. No marketing or retargeting pixels (Meta Pixel etc.) are present. You can opt out of tracking anytime in the cookie banner (Consent Mode V2) — in that case no analytics cookies are stored and neither GA4 nor GTM will be loaded.

Your rights

Under GDPR you have the following rights, which you can exercise by e-mail at jsem@davidzelenka.cz:

• Right of access — get a copy of the data I process about you.
• Right to rectification of inaccurate data.
• Right to erasure ("right to be forgotten").
• Right to restrict processing.
• Right to data portability.
• Right to object to processing.
• Right to withdraw consent (for the newsletter).
• Right to lodge a complaint with the Czech Data Protection Authority (uoou.cz).

Contact

Got a question about how your personal data is processed? Write to jsem@davidzelenka.cz and I'll respond within 2 business days at the latest.