Privacy

Privacy policy

Who runs this website, what I learn about you, who I share it with, and what you can do about it.

Who the controller is

This website is run by my company, Honza Silar Solutions s.r.o., Company ID (IČO) 10699821, with its registered office at V Roháčích 61/39, Jinonice, 158 00 Prague 5, Czech Republic, registered in the Commercial Register kept by the Municipal Court in Prague, Section C, Insert 346863. The company is the controller of the data created when you read the website, book a consultation, or write to me.

Some projects I provide and invoice as a sole trader: Ing. Jan Šilar, Business ID (IČO) 88330079. For those, I’m the controller of the data from our work together, and the company passes on to me the details from your booking and from what we agreed. Your offer and invoice always state whether your supplier is the company or me.

I run the company myself as its managing director, so I handle everything related to your data personally. You can reach me at [email protected] or on WhatsApp at +420 721 604 286. Neither the company nor I is required to appoint a data protection officer, and we don’t have one.

This policy applies to the website honzasilar.ai. My breathing website, honzasilar.cz, has its own.

If you’re just reading the website

You don’t have to give me anything at all, and you’re welcome to keep reading. Even so, a few things happen while the website runs, and it’s only fair that you know about them.

Hosting logs

The website runs on Cloudflare. For it to deliver a page to you at all, your IP address passes through its servers, along with information about your browser and which page you opened. Cloudflare keeps these operational logs for a short time to keep the website running and to protect it from attacks. I don’t build any profiles from them, and I don’t link them to you as a person. I process them on the basis of legitimate interest: running a website that works and doesn’t go down under an attack.

The cookie that stores your choice

As soon as you click in the cookie bar, a cc_consent cookie is stored in your browser recording what you allowed and when. I need to be able to prove that you gave your consent (or didn’t), and that’s why I store it. The details are in the Cookie policy.

Google Analytics: only with your consent

If you allow analytics cookies in the bar, Google Analytics 4 (measurement ID G-YKWTGZXEN7) loads and starts collecting traffic statistics for me: how many people came, which pages they read, how they got here, and whether they’re on a phone or a computer. It doesn’t store your IP address; it only uses it to estimate your approximate location and then discards it. Without your consent, the measurement script doesn’t load at all. You can withdraw your consent at any time using the Cookie settings link in the footer.

Google Analytics keeps data about visitors and events for 14 months and then deletes it automatically. Aggregate reports (how many people, which pages) remain after that, but nobody can tell individual people apart in them anymore.

Microsoft Clarity: also only with your consent

Together with Analytics, Microsoft Clarity also loads once you consent to analytics cookies. It records how the page is used: where you click, how far you scroll, and where the website gets stuck. It doesn’t see your screen or anything you do outside this website, and Microsoft automatically masks any text you might type into a form field. I use it for one thing only: to spot which passages don’t make sense, so I can rewrite them. Clarity keeps the data for thirteen months at most.

Ad measurement: after marketing consent

If you allow marketing cookies, four tracking tags load: Google Ads for ads in Google Search, Meta Pixel for ads on Facebook and Instagram, Microsoft Advertising (UET) for ads on Bing, and Sklik from Seznam.cz for ads on Seznam, a Czech search engine. Google Ads learns which pages of the website you open and whether you open the booking calendar, book a consultation, or click my email or WhatsApp. Your name, email, and the content of your message are never sent to Google. The only purpose of all four is to let me see whether a paid ad brought in someone interested in the content and, if so, to reach that person again. Without marketing consent, none of them loads and no advertising cookie is stored in your browser.

When you search the blog

The blog search sends your query to my server on Cloudflare, where a text-understanding model (Cloudflare Workers AI) evaluates it and returns matching articles. I don’t save the query in any database, and I don’t link it to you as a person. The query is part of the URL, though, so it stays in Cloudflare’s operational logs, just like any other page you visit.

If you write to me

You won’t find a contact form here; you can reach me by email or with a message on WhatsApp. If you do, I work only with what you give me yourself: your name, your contact details, and what you wrote to me. My email inbox runs on Google Workspace.

I copy inquiries and our communication into my CRM (GoHighLevel), so I have everything we’ve discussed in one place and don’t have to ask you the same thing twice. While we’re discussing working together, this is based on steps taken prior to entering into a contract; otherwise, it’s based on my legitimate interest, which is taking care of someone who got in touch with me.

I don’t sell your data to anyone, and I don’t send it anywhere that would lead to third-party ads being sent your way.

If you book a consultation

You pick a time in the booking calendar at api.honzasilar.cz, which runs on the GoHighLevel platform. You fill in your first name, last name, email, and phone number and, if you like, your company name, a link to your website, and a few sentences about what you’re dealing with. I use the details to send you a confirmation with a Google Meet link, remind you of the meeting, and prepare for our call. This is based on steps taken prior to entering into a contract.

The booking is saved in my CRM and as an event in Google Calendar. If the consultation doesn’t lead to working together, I’ll delete the details within 12 months at the latest.

The consultation itself takes place on Google Meet. So that I can focus on you rather than on taking notes, I record it with tl;dv. It produces a recording, a transcript and a short summary, which I then use to prepare a proposal. This is based on my legitimate interest in having an accurate record of what we discussed. If you’d rather not be recorded, just tell me at the start of the call and I’ll switch it off. If the consultation doesn’t lead to working together, I’ll delete the recording along with your other details within 12 months at the latest.

If we end up working together

The contract with you is concluded and the invoice issued either by my company, Honza Silar Solutions s.r.o., or by me as a sole trader, as stated in the offer. I need your billing details for that, and I send invoices through FAPI, an invoicing tool. By law, I have to keep accounting and tax documents for 10 years, and consent doesn’t apply to that obligation; even if you asked me to erase your data, I couldn’t delete the invoices. Anything that was directly part of our agreement is governed by the contract itself.

Who I share your data with

I don’t just hand it over to anyone. The only companies that handle it are those whose services I need for my work, and they may process it solely on my behalf:

  • Cloudflare: hosting and delivery of the website; it also evaluates the queries you type into the blog search.
  • Google: Google Analytics 4 (only with analytics consent), ad measurement in Google Search through Google Ads (only with marketing consent), my email inbox on Google Workspace, and the calendar and Google Meet meetings.
  • tl;dv (Tldx Solutions GmbH, Germany): recording, transcription and summaries of consultations on Google Meet. Recordings are stored in Europe, including in Germany. The summaries are generated by AI, and part of the transcript may be processed in the US for that, based on standard contractual clauses approved by the European Commission.
  • Microsoft: Clarity (only with analytics consent) and ad measurement on Bing through UET (only with marketing consent).
  • Meta (Facebook and Instagram): Meta Pixel, ad measurement on Facebook and Instagram (only with marketing consent). I use the same pixel on my GoHighLevel pages too, because they reach the same businesses.
  • WhatsApp (Meta): the messages you send me on WhatsApp, including your phone number.
  • Seznam.cz: Sklik retargeting, ad measurement on Seznam (only with marketing consent). It’s the only one of them that’s a Czech company, so this data doesn’t leave Europe.
  • GoHighLevel (HighLevel LLC): the CRM and booking calendar where I keep inquiries, bookings, and communication with clients.
  • Hetzner: my server in Germany that runs the automations connected to my CRM. It turns your name into the form of address I use in emails, and an order into the details for an invoice. This data stays in Europe.
  • FAPI: invoicing, once we start working together.

Cloudflare, Google, Meta, and HighLevel are US companies, so some of the data ends up in the United States. All of them are certified under the EU-US Data Privacy Framework, which the European Commission has decided ensures an adequate level of protection. That decision is what I rely on when I transfer your data. (Meta’s ad tools load only if you give marketing consent.)

Microsoft, whose tools start only after you give your consent, is also a US company and processes some data outside the European Economic Area. That transfer relies on the safeguards that Microsoft declares in its privacy terms for transfers of data out of the European Union.

Apart from that, I may hand data over to, for example, the tax office or a court, but only when the law requires me to.

Your rights

You have the following rights regarding your data. If you want to exercise any of them, just write to me:

  • To know what data I have about you, and to get a copy.
  • To have it corrected if something is wrong or missing.
  • To have it erased: unless the law requires me to do otherwise (typically with invoices).
  • To restrict processing: for example, while we sort out whether I have something right.
  • To take your data with you in a machine-readable format.
  • To object to processing that’s based on my legitimate interest.
  • To withdraw consent: at any time, and as easily as you gave it. Whatever happened before you withdrew it remains lawful.

Email me at [email protected]. I’ll reply as soon as I can, within one month at the latest. If a request is complex and I need more time, I’ll let you know and explain why.

If you’re not happy with how I handled it, you can turn to the Czech data protection authority, the Office for Personal Data Protection (uoou.gov.cz), or to the supervisory authority in the EU country where you live or work. I’d appreciate it, though, if you tried to sort it out with me first. Usually it’s a misunderstanding that a few sentences can clear up.

Changes to this policy

If something is added to the website that handles your data differently, I’ll update this page first and only then switch it on. This version of the policy has been in effect since November 3, 2026.

This English text is a translation of the Czech policy. If the two versions ever differ, the Czech version prevails.

Cookie policy