Privacy notice

This is a static personal portfolio. It uses privacy-first, aggregate analytics but no advertising trackers, cookies, accounts, or contact form.

Last updated 20 August 2026

How information is handled

Only the information needed to operate the site securely and respond when you choose to get in touch.

Who is responsible

  • Pavel Kureza is responsible for this website and for personal information sent directly to him.
  • Privacy questions can be sent to [email protected].

Information processed

  • If you email Pavel, your address, message, and any information you include are received and used to reply.
  • The hosting server may record limited technical data such as IP address, date and time, requested page, response status, referrer, and browser user agent. These logs are normally retained for no more than 14 days.
  • Cloudflare Web Analytics reports aggregate visits, page views, referrers, general device and browser categories, page-load performance, and Core Web Vitals. It does not use cookies, local storage, query strings, or a persistent visitor identifier.
  • When you download the CV, choose an email, Telegram, or LinkedIn contact link, or open the interactive demo, the site records only the type of action and its page location. It does not include the destination URL, query string, referrer, IP address, browser details, contact content, or a visitor identifier in this event dataset.

Why it is processed

  • Email is processed to respond to your enquiry or to take steps connected with a possible professional engagement.
  • Technical logs are processed to deliver, secure, troubleshoot, and protect the website. These are legitimate operational and security interests.
  • Aggregate visit and action analytics are used to understand whether the portfolio is being reached, which portfolio actions are useful, and how to improve its performance and usability. This limited processing is based on the legitimate interest in evaluating and improving this personal portfolio.

Service providers

  • The website runs on privately administered server infrastructure.
  • Cloudflare provides DNS, proxy, tunnel, security, Web Analytics, Workers, and Workers Analytics Engine services. Its Web Analytics beacon discards the source IP address at the nearest data centre and does not store it in analytics databases or logs. The action collector stores only the fixed event fields described above.
  • When you follow a link to LinkedIn or Telegram, that service’s privacy terms apply.

Retention and sharing

  • Email correspondence is kept only for as long as it is relevant to the enquiry, professional relationship, or applicable legal obligations.
  • Technical logs are rotated daily and normally removed after 14 days. Records connected with a confirmed security incident may be retained longer when necessary.
  • Cloudflare makes Web Analytics data available in its dashboard for up to six months. Unsampled beacon data is retained for seven days and then aggregated for longer-term reporting.
  • Anonymous action events in Workers Analytics Engine are retained by Cloudflare for three months and then removed under the service retention policy.
  • Personal information is not sold. It is shared only with the service providers needed to operate the site or when required by law.

Your choices and rights

  • You may ask to access, correct, erase, restrict, or object to the processing of your personal information where applicable.
  • The analytics described here do not use cookies or similar browser storage, so the site does not display a cookie-consent banner.
  • You may also raise a concern with the Spanish Data Protection Agency or another competent supervisory authority.

Changes

  • This notice will be updated if cookies, additional analytics fields or events, contact forms, or other data-processing features are added.

Questions about your information?

Email Pavel directly and include “Privacy question” in the subject.