Privacy Policy

Last updated: 2. 6. 2026

Protecting your personal data is our priority. This policy describes what personal data we collect, why we process it, how we protect it, and what rights you have. All processing is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Act No. 110/2019 Coll., on Personal Data Processing.

1. Data Controller

The controller is not required to appoint a Data Protection Officer. For all matters related to the processing of your personal data, you may contact us directly using the details provided above.

2. What Personal Data We Process

2.1 Data from the Contact Form

When you fill out the contact form on jergonlab.com, we process the following:

• Email address — to respond to your inquiry
• Phone number — for phone contact (optional)
• Website URL — to assess your inquiry (optional)

2.2 Automatically Collected Data

When you visit our website, the following data may be collected based on your consent:

• Cookies and analytics data — via Meta Pixel (Facebook) to measure the effectiveness of advertising campaigns
• Technical data — IP address, browser type, operating system, screen resolution, referring page

2.3 Data We Do Not Process

We do not collect or process special categories of personal data (sensitive data), data concerning children under the age of 16, or data from public registers without your knowledge.

3. Purposes and Legal Bases of Processing

Purpose	Legal Basis	Retention Period
Processing inquiries submitted via the contact form	Legitimate interest (Art. 6(1)(f) GDPR) — responding to your initiative	3 years from the last contact
Performance of a service agreement	Performance of a contract (Art. 6(1)(b) GDPR)	For the duration of the contract + statutory archival periods
Bookkeeping and tax documentation	Compliance with a legal obligation (Art. 6(1)(c) GDPR)	10 years under the applicable Accounting Act
Ad measurement (Meta Pixel)	Consent (Art. 6(1)(a) GDPR)	Until consent is withdrawn, max. 2 years
Website security and abuse prevention	Legitimate interest (Art. 6(1)(f) GDPR)	90 days (server logs)

4. Cookies

4.1 Strictly Necessary Cookies

These cookies are essential for the website to function (forms, security, remembering your cookie preferences). They do not require consent and cannot be disabled.

Cookie	Purpose	Expiration
jl_cookies	Storing your cookie preferences	1 year

4.2 Analytics and Advertising Cookies

These cookies are only set after your explicit consent via the cookie banner on our website.

Cookie	Provider	Purpose	Expiration
_fbp	Meta Platforms (Facebook)	Browser identification for ad targeting	3 months
_fbc	Meta Platforms (Facebook)	Measuring clicks from Facebook ads	3 months
fr	Meta Platforms (Facebook)	Ad targeting and measurement	3 months

You can withdraw your consent to analytics cookies at any time — simply delete the cookies in your browser or click reset cookie settings.

Your cookie settings have been reset. The cookie banner will appear again on your next visit.

4.3 Analytics without cookies (Daxlyze)

This website uses the Daxlyze analytics tool (operator: Petr Jergon, Reg. No. 02074079, Štíchova 581/23, Prague 11) to measure traffic and improve the site.

What Daxlyze processes:

• Pages (URL path without query string), time on page, scroll, clicks
• Traffic source (referrer domain only, UTM parameters — personal data is automatically stripped)
• Outbound links — only domain and path (no query parameters, no anchor)
• Device type, browser, operating system
• Approximate location (country, city) derived from IP

What Daxlyze does NOT store:

• Your IP address (used only for geolocation and immediately discarded)
• Cookies, localStorage, or any persistent identifiers
• Content of form fields you fill in
• Query parameters on outbound links (e.g. ?email=, ?token=, ?ref=)
• Email addresses, phone numbers, or card numbers in UTM parameters (automatically replaced with an anonymous placeholder)
• The specific email address or phone number on mailto: / tel: links (only the link type is recorded)

Do Not Track: If you have the Do Not Track signal (DNT=1) enabled in your browser, Daxlyze does not activate at all and sends no data.

• Legal basis: Art. 6(1)(f) GDPR — legitimate interest in operating and improving the website.
• Retention period: 30 days for raw data, aggregates for up to 25 months (CNIL exemption limit).
• Processor: Petr Jergon (operator of Daxlyze) under a Data Processing Agreement pursuant to Art. 28 GDPR. Server location: EU (Czech Republic).
• Your rights (GDPR Art. 15–22): access, rectification, erasure, restriction, portability, objection. Contact: petr@jergonlab.com.

4.4 A/B tests and personalization

If you grant consent for the “Statistics” or “Marketing” category in the cookie banner, we use Daxlyze A/B tests to improve content. The browser stores information about the assigned variant (localStorage, key _dax_abv_*, storage duration 30 days).

Without your consent, you always see the default variant and nothing is stored in the browser — neither localStorage nor cookie. If you have Do Not Track active in your browser, A/B tests do not run at all, regardless of cookie choice.

5. Recipients of Personal Data

Your personal data may be shared with the following categories of recipients:

• Meta Platforms Ireland Limited (Merrion Road, Dublin 4, Ireland) — operator of Meta Pixel, based on your consent. Meta processes data as a joint controller. Meta Privacy Policy
• Hosting provider (WEDOS Internet, a.s.) — technical operation of the website
• Professional advisors (accountants and tax consultants) — to the extent necessary for compliance with legal obligations

We do not sell personal data to third parties. Data is transferred outside the EU/EEA only in the case of Meta Pixel, and this is done on the basis of Standard Contractual Clauses approved by the European Commission.

6. Your Rights

As a data subject, you have the following rights under the GDPR:

• Right of access (Art. 15) — you have the right to obtain confirmation as to whether we process your personal data, and if so, to access that data and information about the processing
• Right to rectification (Art. 16) — you have the right to request the correction of inaccurate or the completion of incomplete personal data
• Right to erasure (right to be forgotten) (Art. 17) — you have the right to request the deletion of your personal data where the purpose of processing no longer applies or where you have withdrawn your consent
• Right to restriction of processing (Art. 18) — you have the right to request the restriction of processing under certain conditions
• Right to data portability (Art. 20) — you have the right to receive your personal data in a structured, machine-readable format
• Right to object (Art. 21) — you have the right to object at any time to processing based on legitimate interest
• Right to withdraw consent (Art. 7(3)) — you may withdraw any consent given (e.g. for cookies) at any time and without giving a reason. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

To exercise your rights, please contact us at petr@jergonlab.com. We will respond to your request without undue delay, and no later than within 30 days.

7. Right to Lodge a Complaint

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the supervisory authority:

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. In particular:

• Encrypted data transmission (HTTPS/TLS)
• Access to data restricted to authorised persons only
• Regular data backups
• Secure storage on servers within the EU

9. Changes to This Policy

We may update this policy from time to time. The current version is always available on this page, showing the date of the last update. We will inform you of any material changes.