Privacy and Cookies

On this page, I explain how I handle visitor data when operating the personal website kristianhulala.sk. Last updated: October 27, 2026.

Operator and Contact

The operator is Kristián Hulala, a private individual. Questions and requests regarding personal data can be sent to kr******@************la.sk.

Contact Form and Email

When you write to me, I process your name, email address, subject, and message content so that I can reply to you and continue the related communication. The legal basis for ordinary correspondence is legitimate interest in handling inquiries and maintaining contact according to Article 6(1)(f) GDPR. If it concerns pre-contractual steps you request, or the performance of a contract, the basis is Article 6(1)(b) GDPR.

Providing data is voluntary; however, without a contact address, I cannot reply to you. Please send only the data necessary to address your inquiry. Do not send medical records, identity documents, or passwords via the form.

I store messages for the duration of resolving the inquiry and the communication or cooperation, and then for a maximum of three years. Longer only if necessary to fulfill a specific legal obligation or to assert or defend legal claims, for the duration of that reason. I continuously delete spam.

The mailbox is secured by Websupport. A copy of received mail is forwarded to Gmail, so Google also participates in processing correspondence.

Website Operation and Protection

Hosting is provided by Websupport, and Cloudflare participates in delivering and protecting the website. The IP address, request time, requested address, browser data, and technical error or security logs may be processed. The purpose and legitimate interest are the secure and reliable operation of the website, prevention of attacks, and troubleshooting (Article 6(1)(f) GDPR).

The retention period for technical records depends on the type of service and record, the need to investigate a fault or security incident, and any legal obligation. Operational backups serve to restore the website and are gradually replaced by newer ones. Details about data related to a specific request can be obtained at the contact provided.

The form is protected by CleanTalk. When checking for spam, primarily the IP address, email, form content, and technical data about the browser and interaction with the form, such as time data during typing or mouse movement, are sent. The check may automatically reject a suspicious message; if you are mistakenly rejected, please email me directly. According to the provider’s rules, control records are stored for 7 or 45 days depending on the plan, up to a maximum of 45 days. The purpose is protection against spam and abuse, based on the stated legitimate interest.

Cookies and Your Choices

Technical cookies and similar storage support website functionality, security, and remembering your settings. Optional analytical measurement and embedded external services can be allowed or rejected. You can change your choice later via the Privacy Settings control. Rejecting analytics does not prevent reading articles.

  • privacy_embeds: remembers the selection of allowed services for 30 days.
  • _ga and _ga_*: Google Analytics analytical cookies to distinguish visits and sessions, only after analytical consent. Google’s default period is two years; the browser may shorten it.
  • Technical anti-spam data: CleanTalk may use cookies and local storage to distinguish humans from automated spam.
  • Website management login: WordPress uses login and settings cookies for authorized logged-in users; these are not analytical cookies for a regular reader.

Google Analytics

On the live website, I use Google Analytics for traffic statistics and content improvement, only after analytical consent has been granted (Article 6(1)(a) GDPR). Measurement may include visited pages, interactions, visit time, and device and browser information. Analytics are disabled on the testing staging environment.

Event data retention is set to two months and user data to 14 months, with the period renewed upon new activity. These periods do not apply equally to aggregated standard reports. You can withdraw consent at any time in the privacy settings; withdrawal does not affect the lawfulness of processing prior to its withdrawal.

Videos, Audio, and External Links

Embedded services, such as YouTube, are made available according to your consent choice. Once allowed, the browser connects to their provider, who may process the IP address and technical data and use their own cookies according to their rules. Audio files stored directly on this website are played only after you initiate them. A regular link to another page, such as Ko-fi, is not an automatically loaded external widget; upon opening it, the rules of the target page apply.

Recipients and Data Transfers

Depending on the function used, data may be processed by providers Websupport, Cloudflare, CleanTalk, and Google (Gmail, Analytics, and allowed YouTube content). Data may also be processed outside the European Economic Area, particularly in the USA. The protection mechanism depends on the provider and service, for example, an adequacy decision for involved entities or standard contractual clauses. Information and available terms can be found with the providers or requested from me.

Your Rights

Under legal conditions, you may request access to data, rectification, erasure, or restriction of processing, and exercise the right to data portability. You may object to processing based on legitimate interest. For processing based on consent, you may withdraw it. Please send requests to the email provided; if in doubt, I may reasonably verify your identity. You have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic.