Privacy Policy

Hello! Your privacy is important to me, Rehuel Lobato de Mesquita. This Privacy Policy explains how I collect, use, and protect your personal data when you visit my website (rehuel.cz) or use my services. I aim to be transparent and comply with data protection laws, including the EU General Data Protection Regulation (GDPR).

The controller of your personal data is:

Rehuel Lobato de Mesquita

IČO: 21870837

Address: Nové sady 988/2, 602 00 Brno, Czech Republic

Email: hello@rehuel.cz

I collect personal data in the following ways:

• Information You Give Me Directly:
  • Contact Form: Your name, email address, and the message you send.
  • Free Website Checkup Request: Your name, email address, website URL, potentially your choice of maintenance plan interest and comments, and your explicit consent to process this data for the checkup.
  • Service Booking/Inquiries (e.g., Sounding Board, Development): Your name, email address, information about your needs/situation (including via questionnaires ), and details needed for invoicing (name, address, company details if applicable).
  • Service Provision: Information you provide while I'm delivering a service (e.g., content for your website, details discussed in Sounding Board sessions).
• Information Collected Automatically:
  • Website Usage Data: Like most websites, my server logs may automatically collect information such as your IP address, browser type, operating system, referring URLs, pages visited, and dates/times of visits.
  • Cookies & Similar Technologies: I may use cookies (small text files stored on your device) to help the website function, analyze usage, and improve your experience. This might include necessary cookies (for site function), analytics cookies (to understand traffic), and possibly preference cookies. (See Section 8 for more on Cookies). Analytics setup is mentioned as part of some service plans.
  • Analytics: If using analytics tools (e.g., Google Analytics, Plausible Analytics), anonymized or pseudonymized data about website traffic and user behavior might be collected.

I use your data for the following purposes:

• To Respond to You: To answer your inquiries submitted via the contact form or email.
• To Provide Services: To deliver the services you requested (Website Checkup, Development, Maintenance, Email Setup, Sounding Board), including communication, project management, and providing deliverables.
• To Manage Our Agreement: To create contracts, send invoices, and manage payments for paid services.
• To Improve My Website & Services: To understand how visitors use my site (using aggregated/anonymized data where possible) and identify areas for improvement.
• For Legal & Security Reasons: To comply with legal obligations (e.g., accounting, tax), enforce my Terms of Service, and protect the security of my website and clients.

I process your data based on the following legal grounds under GDPR:

• Consent: When you explicitly agree, for example, by ticking the consent box on the Website Checkup form or agreeing to cookie usage (via a consent banner - needs implementation). You can withdraw consent anytime.
• Contractual Necessity: When processing is necessary to fulfill a contract with you (e.g., providing the paid service you ordered) or to take steps before entering into a contract (e.g., discussing your project needs).
• Legitimate Interests: When I have a legitimate business interest that isn't overridden by your rights, such as improving my website based on anonymized analytics, responding to general inquiries, or maintaining basic server logs for security.
• Legal Obligation: When I need to process data to comply with the law (e.g., retaining invoicing data for tax purposes).

I don't sell your personal data. I only share it in limited circumstances:

• Service Providers: I may use trusted third-party companies to help me operate my business and website (e.g., web hosting provider, email service provider like Zoho Mail for my business email, potentially an analytics provider). These providers only get access to the data needed to perform their tasks and are obligated to keep it confidential and secure.
• Legal Requirements: If required by law, court order, or government request.
• Business Transfers: If I sell or transfer parts of my business, your data might be transferred as part of that transaction, under confidentiality agreements.

I take reasonable technical and organizational measures to protect your personal data from unauthorized access, loss, misuse, or alteration. This includes using secure connections (HTTPS), managing access controls, and choosing reputable service providers. However, no internet transmission is 100% secure, so I cannot guarantee absolute security.

I keep your personal data only for as long as necessary for the purposes it was collected, or as required by law:

• Contact Form Data: Retained long enough to respond and handle follow-up, then deleted unless it relates to an ongoing service or legal requirement.
• Service-Related Data: Retained for the duration of our service agreement and potentially longer as required for legal or accounting purposes (e.g., invoices typically need to be kept for several years under Czech law).
• Website Checkup Data: Retained long enough to perform the checkup and deliver the report, then deleted unless you proceed with a service.
• Analytics Data: Usually kept in aggregated or anonymized form for longer periods.

If GDPR applies to you, you have rights regarding your personal data:

• Right to Access: You can ask for a copy of the data I hold about you.
• Right to Rectification: You can ask me to correct inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): You can ask me to delete your data under certain conditions (e.g., it's no longer needed, you withdraw consent).
• Right to Restrict Processing: You can ask me to limit how I use your data under certain circumstances.
• Right to Data Portability: You can ask for your data in a structured, machine-readable format to transfer it elsewhere, under certain conditions.
• Right to Object: You can object to processing based on legitimate interests.
• Right to Withdraw Consent: If processing is based on consent, you can withdraw it anytime (this won't affect past processing).
• Right to Lodge a Complaint: You can file a complaint with your local data protection authority or the Czech Office for Personal Data Protection (ÚOOÚ - www.uoou.cz).

To exercise these rights, please contact me at hello@rehuel.cz. I may need to verify your identity first.

My website may use cookies. Cookies are small files placed on your computer that help the site work, remember your preferences, or analyze traffic.

• Types of Cookies: We might use necessary cookies (essential for function), analytics cookies (to understand usage), and preference cookies.
• Your Choices: When you first visit, you should be presented with a cookie banner asking for your consent for non-essential cookies. You can usually manage cookie preferences through your browser settings as well. You should have a dedicated page or tool (rehuel.cz/cookie-preferences) to manage your preferences.

If I use service providers located outside the European Economic Area (EEA), like Zoho Mail (potentially India/USA), I will ensure appropriate safeguards are in place for transferring your data, such as Standard Contractual Clauses approved by the European Commission or ensuring the provider is certified under a recognized framework (where applicable).

I may update this policy occasionally. The "Last Updated" date will show the latest version. Please review it periodically. For significant changes, I may provide additional notice (e.g., on the website).

If you have questions about this Privacy Policy or how I handle your data, please contact me:

Rehuel Lobato de Mesquita
Email: hello@rehuel.cz
Address: Nové sady 988/2, 602 00 Brno, Czech Republic