Privacy notice

The data controller is Jan Štok (“Blik”), Prague, Czechia. For anything on this page, email stok@blik-studio.cz or call +420 737 178 463.

Contact form. When you send the form, I receive the name, email address, what you need, message and approximate budget you enter, and, if you fill them in, your phone number, company or current website and when you need the project. I use them to reply to your enquiry and to prepare a proposal for a possible project. The message also records where your visit came from: the campaign in the link you arrived by (its UTM parameters), the site that sent you there and the first page you opened. That tells me which of my ads actually work. The campaign and the first page are read from the page address, the referring site from what your browser itself passes on when you arrive (the referrer). It is sent only together with your message. Without advertising consent, none of it is stored on your device. If you allow advertising, the message also includes Google’s ad click identifier (gclid, or its iOS variants gbraid and wbraid), and the visit source is kept in your browser’s session storage as blik-attribution until the enquiry is sent or you close the tab, so it survives a reload. Withdrawing advertising consent deletes it. If an enquiry turns into a job, I may report that click identifier back to Google Ads to measure whether the campaign paid off.

Email and phone. If you email or call me instead, I receive what you send or tell me, including any attachment such as a quote spreadsheet. I use it the same way as a form enquiry and keep it for the same time.

Analytics. The site uses Vercel Web Analytics, which is privacy-friendly, does not use cookies, stores nothing on your device and does not track you across other sites. It receives the address of the page you visit with the campaign (UTM) parameters only: no ad click identifiers and nothing else from the address.

Browser storage. The site keeps two small notes in your browser’s local storage, each only to honour a choice: blik-motion, whether you switched animations off (“Animations off” in the footer), and blik-lang, the language you picked, or that the suggestion to read the Czech version has been shown, so it doesn’t come back. Both stay on your device until you clear your browser’s storage and are never sent to me. Together with your cookie choice, they are the only storage that works without your consent (see Cookies and measurement below).

Abuse prevention. When you submit the form, your IP address is held briefly in memory to rate-limit the endpoint. It is not stored, logged to a database, or used to identify you.

Purposes and legal bases.

• Replying to your enquiry, preparing a proposal and arranging a call: steps you ask for before a contract (Art. 6(1)(b) GDPR).
• If we work together: the contract itself (Art. 6(1)(b)), and keeping contracts and invoices because accounting and tax law requires it (Art. 6(1)(c)).
• Noting where an enquiry came from and counting visits with Vercel Web Analytics: my legitimate interest in knowing which pages and ads work (Art. 6(1)(f)).
• Rate-limiting the form: my legitimate interest in keeping the site from being abused (Art. 6(1)(f)).
• Analytics and advertising cookies: your consent (Art. 6(1)(a)), described below.

Giving your details is voluntary. Without a name, an email address, a message, what you need and a rough budget I can’t give a useful reply, which is why the form asks for them; phone, company or website and timing are optional. I make no decisions about you by automated means alone.

Until you choose, the site sets no cookies and loads no advertising or analytics script from Google. The only exception is Vercel Web Analytics, described above, which stores nothing. Without consent, only strictly necessary storage works: your cookie choice itself (kept in your browser as blik-consent so the site doesn’t ask on every page; it lasts 180 days, then the site asks again, as it also does when the purposes or recipients change) and the two preferences described above. Everything else waits for your consent, which you give separately for each purpose. Closing the banner is not consent, and nothing is ticked in advance.

Advertising. Conversion measurement and remarketing with Google Ads. They tell me whether an ad led to an enquiry or a booked call, and let me show my ads again to people who have already visited the site. Google Ads (provider: Google Ireland Limited) stores the _gcl_au cookie under this site’s domain (after an ad click also _gcl_aw) and a _gcl_ls entry with the click identifier in your browser’s storage, all for 90 days.

Booked calls. When you book a call and measurement is allowed, the site notes in session storage, as blik-booking-conversion, that the booking has been counted, so a reload doesn’t count it again. It is deleted when you close the tab or withdraw consent.

Consent Mode. The site uses Google Consent Mode v2 in its strictest form: until you allow a purpose, the scripts from Google are not loaded at all, so nothing is sent to them. Once you allow one, only the scripts for that purpose load. If you later withdraw consent, or don’t renew it after it expires, measurement stops and the site deletes the cookies and storage entries these tools left under its own domain, the click identifier included. Data that Google keeps under its own domain is out of this site’s reach and governed by its own terms.

Google may process data outside the EU, including in the USA; Google LLC is certified under the EU-US Data Privacy Framework. The providers’ own terms: Google Privacy Policy (opens in a new tab), how Google uses data from partner sites (opens in a new tab) and the cookies Google uses (opens in a new tab).

The legal basis is your consent (Art. 6(1)(a) GDPR and Section 89(3) of the Czech Electronic Communications Act, No. 127/2005 Coll.). Withdrawing it does not affect measurement that happened before.

You can change your choice or withdraw consent at any time with the “Cookie settings” link in the site footer, or right here:

To run the site and answer you, I rely on these companies:

• Vercel Inc. (USA) hosts the site, runs the contact form that passes your message on to my mailbox, and counts visits (Vercel Web Analytics).
• Zoner a.s. (Czechia) hosts my mailbox, stok@blik-studio.cz, where your enquiry arrives and is kept.
• Cal.com, Inc. (USA) handles booking a call through the “Book a 30-min call” button: your name, email address, the time you pick and, if you add them, a note and other guests’ email addresses.
• Google provides the Google Meet link in the call invitation, so your name and email address, and those of any guests you add, also reach Google as meeting guests.

Vercel, Cal.com and Google may process data in the USA. Vercel Inc., Cal.com, Inc. and Google LLC are certified under the EU-US Data Privacy Framework, which the European Commission recognises as giving adequate protection (Art. 45 GDPR). Zoner a.s. is a Czech company, inside the EU.

I do not sell your data. Google receives measurement data only if you allow it, as described under Cookies and measurement.

• Enquiries and booked calls that don’t lead to a project are deleted 12 months after our last contact, together with everything sent with them (where the visit came from and the ad click identifier).
• If we work together, I keep what the project needs while it runs. Contracts and invoices are then kept for as long as Czech accounting and tax law requires (up to 10 years).
• Abuse prevention: the IP address lives only in the server’s memory, to count attempts over the last hour, and is never saved.

You can ask me to delete your details sooner at any time, unless the law requires me to keep them.

You can ask me:

• what personal data I hold about you, and for a copy of it (Art. 15 GDPR);
• to correct it (Art. 16) or delete it (Art. 17);
• to restrict its use while a request or an objection is being resolved (Art. 18);
• for the data you gave me in a common machine-readable format, or to send it to someone else (Art. 20).

You can also object to any use based on my legitimate interest (Art. 21), for example noting where your visit came from. Where I rely on your consent, you can withdraw it at any time, as described under Cookies and measurement.

Email stok@blik-studio.cz or call +420 737 178 463. I’ll answer within one month, as the GDPR requires.

If you believe I handle your data unlawfully, you can complain to the Czech data protection authority, the Úřad pro ochranu osobních údajů (uoou.gov.cz (opens in a new tab)).

The terms that apply to using this site are on the Terms page.

21 October 2026: added advertising measurement (Google Ads) that runs only with your consent, storage of the ad-click identifier, and the consent bar. Details under Cookies and measurement.

10 October 2026: the booking section now says that Cal.com and Google also receive the note and any guests’ email addresses you add.

8 October 2026: emails, calls and attachments sent outside the form are now covered.

7 October 2026: each company that receives data is now named, with its country and the basis for transfers to the USA; each kind of data has a retention period; the rights to restriction and portability are listed; the browser storage list matches what the site stores today; the phone number was added.