Privacy policy

Updated

This site collects very little. Below is exactly what happens to anything you send us, and what you can do about it.

Who the controller is

The joint data controllers are Daniel Černý, Jáchym Šolta, Tadeáš Kótka, working together under the name DJT Group. We are not a company – there is no registered entity, no company number and no VAT number behind this site. We are three secondary-school students in Říčany, Czech Republic, who build websites and software together and enter hackathons and competitions. Reach all three of us at hello@djt-group.com.

We have no Data Protection Officer, and under Art. 37 GDPR we are not required to appoint one – we are not a public authority, we do not carry out large-scale systematic monitoring, and we do not process special categories of data at scale. Send anything data-related to the address above.

What we process

The contact form

When you send us a message we process your first name, optionally your surname, your email address and the text of the message. We need the name and email to reply, and the message to know what about.

Legal basis: steps taken at your request prior to entering a contract (Art. 6(1)(b) GDPR), or our legitimate interest in answering an enquiry and keeping a record of it (Art. 6(1)(f) GDPR).

Do you have to provide it? No. You do not have to use the form at all – plain email works. But without a name and an email address we cannot reply, so the form will not submit without them. There is no other consequence to not providing anything.

Retention: two years from our last contact at the most. If the enquiry turns into actual work, for as long as that work lasts and then for any period the law requires.

Analytics

Only with your consent, asked for by the banner on your first visit. Without it nothing is stored in your browser and nothing is measured. With it we load Google Analytics 4 with IP anonymisation on, and advertising signals and personalisation off. The full list is in the cookie policy.

Legal basis: your consent (Art. 6(1)(a) GDPR and § 89(3) of Czech Act No. 127/2005 Coll. on electronic communications). You can withdraw it any time on the cookie page; withdrawal does not affect processing before it, and declining does not limit the site in any way.

Server logs

Our host automatically records technical details of each request (IP address, browser, time, page). They keep the site running and defend it against attacks, are kept briefly, and are not linked to you as a person.

Legal basis: our legitimate interest in running the site securely (Art. 6(1)(f) GDPR).

Who we share with

We never sell it and never hand it over for advertising. Our processors:

ProcessorFor whatWhere
Vercel Inc.Website hosting and server logsEU / USA
Plus Five Five, Inc. (Resend)Delivering email from the contact formEU / USA
Google Ireland Ltd.Google Analytics – only with consentEU / USA

All three may process data outside the EU. Transfers to the US are covered by the EU–US Data Privacy Framework, to which they are certified, or by standard contractual clauses under Art. 46 GDPR. Even so, US public authorities have broader access to data than EU ones – which is why we send only what is strictly needed to deliver a message and run the site.

What we do not do

Your rights

Under GDPR you have the right to:

Write to hello@djt-group.com and we will deal with it within one month. We may ask you to confirm who you are, so we do not hand your data to somebody else. We charge nothing for this.

Complaints

If you think we are handling your data badly you can complain to the Czech Data Protection Authority (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz. We would rather you told us first.

Changes

If we change this policy we update the date at the top. Anything significant we announce on the site itself.