Privacy notice.
Who processes your data
The controller of this personal website is Radoslav Štefánek, acting as a private individual. For privacy questions and requests to exercise your rights, contact me through my LinkedIn profile. This website is not an official communication channel of a public authority.
Contact form and spam protection
When you send a message, I process your name, email address, message and, optionally, the organisation you provide. Required fields are identified in the form. Providing information is voluntary; the form cannot send a message without the required fields. Please do not include sensitive information or unnecessary personal data about other people.
The form uses Cloudflare Turnstile and server-side request limits to protect the website and mailbox against automated abuse. My legal basis is legitimate interests under Article 6(1)(f) GDPR. Cloudflare receives technical signals including your IP address, browser information and the site using verification. The form does not send your message content to Cloudflare. Cloudflare acts as a processor when providing verification and as an independent controller when improving detection, as described in the Turnstile privacy policy.
The server stores counts, timestamps and keyed hashes of the IP address and message for rate limiting, rather than raw IP addresses or message contents. Daily files older than 48 hours are removed the next time the form is used. The hosting provider may keep its own technical and security logs under the Websupport service settings.
LinkedIn posts and external links
To display recent public posts, your browser automatically connects to the public SociableKIT data feed (data.accentapi.com). The provider receives your IP address and technical browser information when establishing the connection. The website sends neither login credentials nor the address of the page you are viewing with this request. See the SociableKIT privacy policy. My purpose is to display current authored content; my legal basis is legitimate interests under Article 6(1)(f) GDPR.
You choose whether to open links to LinkedIn or other websites. Any subsequent processing is governed by those services’ own policies.
Cookies and visitor analytics
This website’s own code does not use advertising cookies, visitor analytics, localStorage or sessionStorage. External services and the platform providing access may process technical information under their own policies. I do not send a newsletter or use correspondence for unsolicited marketing.
Message retention and recipients
If you contact me, I use your contact details and correspondence to handle your enquiry and necessary follow-up. My legal basis is a legitimate interest in receiving and handling correspondence under Article 6(1)(f) GDPR. I retain messages while handling the enquiry and related follow-up, and afterwards only to the extent and for the period necessary to comply with a legal obligation or establish, exercise or defend legal claims.
Email is technically provided by Websupport s. r. o. and Google (Gmail). Further information: Websupport and Google. I do not sell or publish your correspondence. Technical providers may have access as needed to provide their services, as may competent authorities where required by law.
Processing outside the EEA
Some services operate globally and may process data outside the European Economic Area. Information about processing locations, transfer conditions and each provider’s safeguards is available in the privacy policies linked above. You may also contact me with questions about a particular transfer.
Your rights
Subject to the conditions of the GDPR, you may request access, rectification, erasure or restriction of processing and, where applicable, data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. I may need to verify your identity in a proportionate way when handling a request.
You may lodge a complaint with the Office for Personal Data Protection of the Slovak Republic. I do not make solely automated decisions producing legal or similarly significant effects on visitors.
Updated: 21 October 2026.