Privacy policy

Who is behind the website

The operator of the KRESIO project and data controller is Karel Matusiak.

Phone: +420 606 517 615. Contact email: info@kresio.cz. He is a self-employed natural person, business ID 30210453.

What happens in the form

The form includes your name, email, optional company and phone, project type, estimated budget and message. In a local or unconnected preview, “Prepare project brief” only creates a local copy; nothing is sent to a server or by email. You can download the brief as a text file to your device.

On kresio.cz, “Send enquiry” passes the details to a Cloudflare Pages Function, which forwards them through Proton SMTP to info@kresio.cz. The protected preview sends in the same way only when its connection is switched on. In a local or unconnected preview the button stays “Prepare project brief” and nothing is sent. Your email address is used as the reply address. The form sends no automatic reply. Acceptance by the email service does not itself guarantee delivery to the mailbox.

Draft entries remain in the open page’s memory. Neither the form nor the selection guide stores their contents in persistent browser storage. Closing the window alone may not clear entries; your browser may restore or automatically fill them in. Please do not include passwords or sensitive documents.

On kresio.cz the form uses Cloudflare Turnstile before sending, to tell a person apart from an automated submission. The browser loads a script and embeds a frame from challenges.cloudflare.com. Cloudflare processes technical request details, including the IP address, and returns only a one-time check result to our function. We do not store that result. It is not analytics or advertising.

If you contact us directly

For phone or written enquiries, we handle the information you provide to respond and clarify the possible project. A request for a quote concerns steps before a contract; other enquiries rely on the legitimate interest in responding to correspondence. Providing information is voluntary, but we may need contact details to reply.

We do not use this information for automated decisions or profiling. This website has no newsletter or advertising measurement.

Cookies and storage

KRESIO’s code does not set its own cookies, does not measure visits and does not store the form or the guide in persistent browser storage. A draft brief stays in the memory of the open page until you close it. Your browser may restore or fill in fields on its own.

The public website at kresio.cz therefore sets no cookie of its own. The Turnstile check may store a technical cookie on challenges.cloudflare.com that the check needs. KRESIO does not read it. The protected preview on Cloudflare Access uses the provider’s necessary session cookies to check sign-in. The website has no analytics or advertising cookies.

Technical operation and external services

The public website runs on Cloudflare Pages. A submitted enquiry uses Cloudflare Pages Functions and D1. The protected preview also uses Cloudflare Access. Cloudflare processes technical details needed to deliver and protect content, such as your IP address and request information. On the protected preview, Access checks entry with a login email and necessary session cookies. A local preview runs on your computer and does not send the enquiry.

Submitted enquiry contents pass through the Cloudflare server function and the Proton mail service. The application does not store those contents in D1 or its own operational logs. To limit spam and duplicates, D1 stores only the submission identifier, state, timestamps and keyed HMAC fingerprints of the IP address and submission contents; it does not store the actual IP address, email or message in this database.

Manrope and JetBrains Mono are stored on this website. The browser does not download them from Google. The website does not use processors other than Cloudflare and Proton.

KRESIO’s code includes no analytics or advertising scripts. Provider details: Cloudflare privacy policy and Proton privacy policy. Any transfer outside the EEA follows their documents. This website does not state specific contractual safeguards of its own.

Access and retention

The operator and the providers who technically carry the message can access correspondence that was actually received. A message in the Proton mailbox stays for as long as it takes to handle the enquiry and any follow-up about the same brief. If no contract follows, we do not keep it longer than that. If a contract, invoice or other accounting or tax record follows, we keep it for the period required by accounting and tax law.

Technical records in D1 become eligible for deletion after 24 hours. Cleanup runs in batches when further new submissions arrive, so records may remain longer. Deletion exactly after 24 hours is not guaranteed, and this rule does not delete an email already received.

Your rights and contact

Under GDPR Articles 15 to 21 you may request access, rectification, erasure, restriction or portability and object to processing based on legitimate interests. We do not use the information for automated decisions or profiling. Giving details in the form is voluntary; without a contact we may be unable to reply.

Write to info@kresio.cz or to the operator’s address. You may lodge a complaint with the Czech Office for Personal Data Protection.