Privacy
Updated: 29 September 2026
We collect only what we need to answer your enquiry or arrange a call. Nothing is sold and nothing is handed to marketing platforms. We measure traffic only if you allow it in the cookie bar.
Who controls the data
The controller is the sole trader named below, who works under the Chronicles studio brand. For anything concerning your data, write to the address below. You'll reach the same person you would discuss a project with.
- Kyrylo Kalinov (Chronicles studio)
- IČO: 21631522
- Na Bučance 1622/4, 140 00 Praha 4 - Nusle
- info@chronicles.cz
What we collect
From the form, only what you fill in yourself:
- name
- phone (optional)
- enquiry topic
- your message
The form checks for bots with Cloudflare Turnstile and stores a hidden field and the page render time. To limit repeated submissions we keep the IP address and e-mail only as a one-way hash (SHA-256) that cannot be turned back into the original value.
When you book a call, also the chosen time slot and a note if you write one. Booking runs on our own server.
The website check tool sends only the address you enter to be measured (Google PageSpeed Insights). It needs no personal data.
Why, and on what basis
To reply to you, prepare a quote and arrange a call. The legal basis is steps taken before entering a contract (Art. 6(1)(b) GDPR). Spam protection, backups and security rely on legitimate interest (Art. 6(1)(f)). Traffic measurement with Google Analytics happens only with your consent (Art. 6(1)(a)), which you can withdraw at any time.
Giving us your data is voluntary, but without a name and a contact we cannot reply. We make no automated decisions and do no profiling.
Who else sees it
No advertising platform. Besides us, these services technically handle the data:
| Processor | Purpose | Region |
|---|---|---|
| Vercel Inc. | Website hosting and form processing | EU/US |
| Cloudflare, Inc. | Bot protection for forms (Turnstile) and encrypted CRM backups in the EU | EU/US |
| Upstash, Inc. | Short-term copy of an enquiry (90 days) and anti-spam counters, stored as hashes instead of IP and e-mail | EU (DE) |
| Hetzner Online GmbH | Our own server in Germany: enquiry records (CRM) and call booking | EU (DE) |
| Sendinblue SAS (Brevo) | Sending e-mails: confirmations and replies to enquiries | EU (FR) |
| Google Ireland Ltd. | The mailbox your enquiry arrives in | EU/US |
| Google Ireland Ltd. | Playing case-study videos (no-cookie mode) | EU/US |
| Google Ireland Ltd. | Traffic measurement, only with your consent | EU/US |
For services based in the US, transfers rely on standard contractual clauses or the EU-US Data Privacy Framework. A Telegram message tells us a new enquiry arrived, but it contains no name, e-mail, phone or message text.
How long
An enquiry that does not turn into a project stays in our records for a year: projects often come back. The short-term copy disappears on its own after 90 days, anti-spam counters after an hour and a day. For completed projects the statutory periods for tax documents apply. You can ask us to delete anything earlier. Analytics data is kept for at most 14 months.
Your rights
You have the right to access your data, to rectification, erasure, restriction of processing, portability, and to object. An e-mail is enough. There is no form for it. We answer within a month, usually the same day. If our answer does not satisfy you, you can complain to the Czech Data Protection Authority (uoou.gov.cz).
Contact
Anything about this text or your data goes to: info@chronicles.cz.
Cookies