Privacy policy
UpdatedThis site collects very little. Below is exactly what happens to anything you send us, and what you can do about it.
Who the controller is
The joint data controllers are Daniel Černý, Jáchym Šolta, Tadeáš Kótka, working together under the name DJT Group. We are not a company – there is no registered entity, no company number and no VAT number behind this site. We are three secondary-school students in Říčany, Czech Republic, who build websites and software together and enter hackathons and competitions. Reach all three of us at hello@djt-group.com.
We have no Data Protection Officer, and under Art. 37 GDPR we are not required to appoint one – we are not a public authority, we do not carry out large-scale systematic monitoring, and we do not process special categories of data at scale. Send anything data-related to the address above.
What we process
The contact form
When you send us a message we process your first name, optionally your surname, your email address and the text of the message. We need the name and email to reply, and the message to know what about.
Legal basis: steps taken at your request prior to entering a contract (Art. 6(1)(b) GDPR), or our legitimate interest in answering an enquiry and keeping a record of it (Art. 6(1)(f) GDPR).
Do you have to provide it? No. You do not have to use the form at all – plain email works. But without a name and an email address we cannot reply, so the form will not submit without them. There is no other consequence to not providing anything.
Retention: two years from our last contact at the most. If the enquiry turns into actual work, for as long as that work lasts and then for any period the law requires.
Analytics
Only with your consent, asked for by the banner on your first visit. Without it nothing is stored in your browser and nothing is measured. With it we load Google Analytics 4 with IP anonymisation on, and advertising signals and personalisation off. The full list is in the cookie policy.
Legal basis: your consent (Art. 6(1)(a) GDPR and § 89(3) of Czech Act No. 127/2005 Coll. on electronic communications). You can withdraw it any time on the cookie page; withdrawal does not affect processing before it, and declining does not limit the site in any way.
Server logs
Our host automatically records technical details of each request (IP address, browser, time, page). They keep the site running and defend it against attacks, are kept briefly, and are not linked to you as a person.
Legal basis: our legitimate interest in running the site securely (Art. 6(1)(f) GDPR).
Who we share with
We never sell it and never hand it over for advertising. Our processors:
| Processor | For what | Where |
|---|---|---|
| Vercel Inc. | Website hosting and server logs | EU / USA |
| Plus Five Five, Inc. (Resend) | Delivering email from the contact form | EU / USA |
| Google Ireland Ltd. | Google Analytics – only with consent | EU / USA |
All three may process data outside the EU. Transfers to the US are covered by the EU–US Data Privacy Framework, to which they are certified, or by standard contractual clauses under Art. 46 GDPR. Even so, US public authorities have broader access to data than EU ones – which is why we send only what is strictly needed to deliver a message and run the site.
What we do not do
- We do not sell or rent personal data.
- We do not profile you or make automated decisions within the meaning of Art. 22 GDPR.
- We do not use your data to train AI models.
- We run no advertising or retargeting scripts and send no newsletter.
- We do not knowingly collect data from children under 15.
Your rights
Under GDPR you have the right to:
- know what we hold about you and get a copy (Art. 15),
- have it corrected (Art. 16),
- have it erased (Art. 17),
- restrict its processing (Art. 18),
- receive it in a machine-readable form (Art. 20),
- object to processing based on legitimate interest (Art. 21),
- withdraw analytics consent at any time (Art. 7(3)).
Write to hello@djt-group.com and we will deal with it within one month. We may ask you to confirm who you are, so we do not hand your data to somebody else. We charge nothing for this.
Complaints
If you think we are handling your data badly you can complain to the Czech Data Protection Authority (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz. We would rather you told us first.
Changes
If we change this policy we update the date at the top. Anything significant we announce on the site itself.