Privacy Policy

01 Who processes your data

The controller under the GDPR and Act No. 18/2018 Coll. on the protection of personal data is:

I have not appointed a data protection officer (DPO) — the scope of processing doesn't require one. For data protection matters, write directly to the email above.

02 What data, and why

Contact form and email

In the form on naklikaj.sk you fill in your company name, name, email or phone number, team size, and a short description of what you want solved. You can tell me the same by email or over the phone.

Filling in the form isn't mandatory. But without contact details, I have no way to reply to you.

03 Where the data ends up

Naklikaj.sk is a static site. The only piece of code that runs on a server is a function that receives the submitted form, records it, and sends it by email. Your data travels these paths:

• Into an enquiry log. The enquiry function writes to a database before it even tries to send the email. This is a safeguard against loss: if sending fails, the enquiry would otherwise vanish without a trace and I'd have no way to get back to you. The record holds what you filled in, the address of the page you sent it from, the time, and whether the email went out. The database is located in Frankfurt.
• Into my email inbox. From the same data, the function composes an email and sends it to info@naklikaj.sk.
• Into your own email program. If the function is unavailable or sending fails, the form tries to open a pre-filled message in your email program. In that case, nothing is sent anywhere until you send the message yourself.

From there, the enquiry lives on as an email in the inbox and as a row in the log, and I handle it the same as any other message you write to me. I don't profile it, don't combine it with anything else, and don't forward it anywhere.

04 How long I keep it

I delete data once the period expires. If you ask for earlier deletion, I delete everything except records I must keep by law.

05 Who I share it with

I do not sell your data or share it for marketing. It only reaches those without whom the service couldn't be provided:

• Google Ireland Limited (Gmail) — the email inbox enquiries arrive through and are stored in
• Vercel Inc. — website hosting, anonymous traffic measurement and the function that receives and sends the form; form data only passes through it and isn't stored there
• Neon — the database holding the enquiry log; the data is stored in Frankfurt
• Accountant and tax advisor — processing invoices
• Public authorities — where required by law

The database with the log is in Frankfurt, within the European Union. Google, Vercel and Neon are companies based in the USA or with a US parent company, and the transfer to a third country is covered, for all of them, by standard contractual clauses approved by the European Commission.

06 Cookies and traffic measurement

Naklikaj.sk doesn't use analytics or advertising cookies and has no consent banner, because there's nothing to consent to. I don't track you across sites and have no advertising pixel here.

I measure traffic with Vercel Web Analytics. It stores no cookies or other identifier in your browser. It tells visits apart only by a hash of the request that is discarded after 24 hours, so I can't find out who you are from it or recognise you on a later visit. I only see aggregate numbers: how many people came, which pages they opened, where they came from, and their country and device. The measurement helps me understand what visitors are interested in and is processed on the basis of legitimate interest.

The web host keeps standard technical access logs (IP address, time, page address). These serve operation and security purposes and are processed on the basis of legitimate interest.

07 Company data during the training

This is the part companies care about most. During the training we work on your data, and it may include personal data belonging to your employees, customers or suppliers.

• For this data, you are the controller. I access it only to the extent needed to run the training.
• The data stays on your computers and in your accounts. I don't copy it, don't take it away, and have no access to it after the training.
• For practice, I recommend a sample or anonymised data. To learn the method, you never need the full database.
• If I genuinely process personal data on your behalf during the training, we'll sign a data processing agreement under Article 28 GDPR. Just mention it before the session.

Every training includes a section on what may and may not be sent to the model, and how to build a tool so that sensitive company data doesn't leave the company.

08 Artificial intelligence and your data

The tools we build during the training may send text to a language model. What this means in practice:

• Only what the tool sends to it goes into the model — that is, the text you or your tool feed it. Not the entire contents of your computer, and not your other files.
• We use your own accounts and keys. The relationship with the model provider is therefore yours, and its terms apply between you and it.
• Model providers on business accounts generally don't train models on your inputs, but check the current terms of the specific service — they can change, and I don't control them.
• Tools that don't need a model work entirely offline. Most of the demos in the gallery are exactly like that.

09 Your rights

You have the following rights with respect to me:

• Access — I'll tell you what data about you I hold
• Rectification — I'll correct an inaccurate item
• Erasure — I'll delete what I'm not required to keep by law
• Restriction of processing and objection to processing based on legitimate interest
• Portability — you'll receive your data in a common, machine-readable format

Just write to info@naklikaj.sk. I'll respond within 30 days. Exercising your rights is free of charge.

10 Changes to this policy

I may update this policy when the way I provide the service changes. The current version is always on this page together with its effective date. For a substantial change affecting an already agreed project, I'll notify you by email.

The terms and conditions under which I deliver the training are on a separate page.

This version is effective from 3 October 2026.