Privacy policy

Data controller

Explonio is operated by Ing. Ondřej Novotný, Ph.D., IČ: 19525567, Nové sady 988/2, 602 00 Brno, Czech Republic. Contact: 0ndr4N@proton.me.

This policy explains data processing when you use the Explonio gallery and its interactive demos.

What we process and why

The website is available without registration. It has no user accounts, checkout or visitor analytics. To deliver a page, our own VPS processes your IP address, requested URL, request time and technical information supplied by your browser. Access and error logs may contain these details.

The purposes are delivering content, troubleshooting and preventing abuse. The legal basis is the controller’s legitimate interest in secure, functional operation under Article 6(1)(f) GDPR. We do not use these details for advertising profiles.

Language and saved experiments

On your first visit the gallery reads your browser’s primary language: Czech is used for Czech browsers and English otherwise. Your manual language choice and some demo settings or experiments are stored in your browser’s localStorage so you can continue later.

The applications do not upload experiment data or files opened in a demo to our server. These remain in your browser; exported files are saved to your device. See the Cookie policy for storage details.

Contacting us

If you email us, we process your email address, any name you provide and the message contents to respond and handle follow-up correspondence. The basis is our legitimate interest in communicating with visitors or a legal obligation when handling data protection requests.

Please avoid sending unnecessary sensitive information or other people’s data. We keep correspondence while handling the enquiry and afterwards only as needed for follow-up, legal obligations or establishing, exercising or defending legal claims.

Recipients and retention

The operator administers the website on their own VPS. The infrastructure provider may access operational data as necessary to provide its service. Proton also processes email correspondence as the email provider. Fonts, libraries and images are served locally; opening a page does not require Google Fonts requests.

Operational logs are retained according to the VPS log rotation settings, only as needed for operation and security incidents. Records relating to a specific incident may be kept until resolution and as necessary for legal claims. Browser storage has no automatic expiry: it remains until deleted by you or your browser.

We do not sell data. Disclosures required by law are limited to what is necessary. You can contact us for details about processing and any provider outside the EEA; such transfers must comply with Chapter V GDPR.

Future Google advertising

Google AdSense and other advertising tracking are not currently active. Before introducing ads, we will update this policy and the details of participating providers.

If advertising is enabled, Google and its partners may process IP addresses, cookie identifiers, device information and ad interactions. Personalisation may be based on visits to this and other websites. Where consent is required, the relevant technologies will only start after you consent. Refusing or withdrawing consent will not prevent you from using the demos.

Before launch we will introduce consent management meeting Google’s applicable regional requirements, with details of purposes, partners, retention and any transfers outside the EEA, and a way to change or withdraw consent. Visiting the website or using a demo does not itself give consent.

Read how Google uses data, Google’s privacy policy and Google’s ad settings. Google account settings do not replace consent on this website.

Your rights

Subject to GDPR conditions, you may request access, correction, erasure, restriction and, where applicable, portability of your data. You may object to processing based on legitimate interests. Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of earlier processing.

Contact 0ndr4N@proton.me. We normally respond within one month and will explain any lawful extension. We may reasonably verify your identity. You may complain to the Czech Office for Personal Data Protection or your competent local supervisory authority.

The site does not carry out automated decision-making with legal or similarly significant effects. Demos do not require your name or email; basic network details are necessary to deliver the page.