Legal
Privacy Policy
What we collect when you write to us, where it goes, how long we keep it and how to exercise your rights under the GDPR.
Last updated:
5 min read
Effective date: May 25, 2026. This version was revised on 7 October 2026, when malbardesign.com moved to a static website with no content management system, no comment system and no user accounts.
Who we are
MalbarDesign is a professional branding and web design studio based in the Czech Republic. For the purposes of the General Data Protection Regulation (GDPR), the data controller is:
- Website: https://malbardesign.com
- Company name: MalbarDesign
- Owner: Petr Barák
- Business ID (IČO): 44518714
- Address: Luční 174, 435 32 Mariánské Radčice, Czech Republic
- Email: malbar@gmail.com
- Phone: +420 722 006 833
What personal data we collect and why
Contact and inquiry forms
When you submit a contact or inquiry form on our website, we collect your name, email address, phone number, company name, any files you attach and the message content you provide. We use this information solely to respond to your inquiry and to provide information about our branding, logo and web design services. We do not share this information with third parties without your consent.
Our forms are provided and hosted by Jotform Inc. Jotform processes the data you enter on our behalf and delivers it to us by email and through its secure dashboard. Jotform's handling of your data is described in the Jotform privacy policy.
Email and phone
If you contact us directly by email, phone, WhatsApp or Messenger, we keep the correspondence for as long as it is needed to handle your request. Where a project follows, we keep it for the duration of the business relationship and for the retention period that Czech accounting and tax law requires for invoices and contracts.
Server logs
Our web server records standard access logs: the IP address of the request, the date and time, the page requested, the referring page and the browser user agent string. We use these logs only to keep the site secure and to diagnose technical problems. Logs are rotated automatically, are kept for no longer than 30 days and are not combined with any other data.
Cookies and local storage
This website does not set tracking cookies and does not load any analytics, advertising or social media script before you give consent. The only item we store on your device by default is a small consent record named md-consent-v1 in your browser's local storage. It remembers the choice you made in the cookie dialog (functional only, or with preferences and marketing) and the time you made it. It contains no personal data and is never sent to us or to anyone else.
Fonts, scripts and images are served from our own domain. We do not use third-party content delivery networks. Embedded Jotform forms may set their own cookies, which are described in our Cookies Policy.
Embedded content from other websites
Some articles may include embedded content from other websites, for example videos. Embedded content from other websites behaves in the exact same way as if you had visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking and monitor your interaction with that embedded content, including tracking your interaction if you have an account and are logged in to that website.
Comments and user accounts
This website has no comment system and no user registration. We do not collect data through comments, profile pages or logins, and we do not use the Gravatar service.
Who we share your data with
We do not sell your personal data. We share it only where necessary to provide our services or as required by law, with the following processors:
- Jotform Inc., which hosts our forms and delivers your inquiries to us (Jotform privacy policy)
- Google (Gmail), our email provider, through which we receive and answer your messages
- Our hosting provider, which operates the server where this website and its access logs are stored
How long we retain your data
- Contact and inquiry form submissions: we retain contact form data for up to 2 years for business records and communication purposes.
- Project correspondence, quotes and invoices: for the duration of the project and afterwards for the period required by Czech accounting and tax law.
- Server access logs: no longer than 30 days.
- Consent record: stays in your browser until you clear your browser data or reset it with the "Cookie settings" link in the footer.
What rights you have over your data
Under the GDPR you have the right to:
- access the personal data we hold about you and receive an exported copy of it, including any data you have provided to us,
- have inaccurate data corrected,
- have your personal data erased, except for data we are obliged to keep for administrative, legal or security purposes,
- restrict or object to processing,
- receive the data you provided in a portable format,
- withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
To exercise these rights, please contact us at:
- Email: malbar@gmail.com
- Phone: +420 722 006 833
- Address: Luční 174, 435 32 Mariánské Radčice, Czech Republic
We will respond to any data subject rights request within 30 days.
Where your data is sent
Your inquiry data is processed by Jotform and delivered to our email account. Jotform and Google may process data in the United States. Such transfers are covered by the EU-US Data Privacy Framework or by the Standard Contractual Clauses approved by the European Commission.
Except as described above, your personal data is not transferred outside the European Union.
GDPR compliance
MalbarDesign complies with the General Data Protection Regulation (GDPR) and Czech data protection law (Act No. 110/2019 Coll. on Personal Data Processing). You have the right to lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, www.uoou.cz) if you believe your rights have been violated.
Changes to this privacy policy
We may update this privacy policy from time to time to reflect changes in our practices or in applicable law. We will notify you of any material change by posting the updated policy on this page and updating the "Last updated" date at the top.
Contact us
If you have any questions about this privacy policy or about how we handle your personal data, please contact us:
- MalbarDesign, Petr Barák
- Luční 174, 435 32 Mariánské Radčice, Czech Republic
- Email: malbar@gmail.com
- Phone: +420 722 006 833