Privacy
Privacy is a design input, not an afterthought. This notice explains how the first public version of ormaven.com handles personal data and which functions are deliberately not enabled yet.
Controller and contact
The controller is Miloš Trégl, a natural person established in the Czech Republic, operating ormaven.com until the project is transferred to a company. Privacy requests can be sent to hello@ormaven.com. Ormaven currently has no designated data-protection officer.
Contact by email and contact form
If you email Ormaven or use the contact form, Ormaven processes your name, email address, optional company/project name, message content and related correspondence. The purpose is to answer your request, evaluate whether Ormaven can help, and manage reasonable follow-up. Where your request concerns a possible service or contract, processing is based on steps taken at your request before entering into a contract (GDPR Article 6(1)(b)). For general enquiries and ordinary correspondence, processing is based on Ormaven’s legitimate interest in responding to people who contact the website and maintaining business communications (Article 6(1)(f)). No marketing subscription is created from the contact form.
Contact-form anti-abuse checks
The form is protected by Cloudflare Turnstile and a hidden anti-bot field. The Turnstile token is validated server-side before a message is delivered. Ormaven does not use the form to make automated decisions about you beyond deciding whether a submission appears to be a valid human request or abuse.
Website delivery, security and technical data
Ormaven uses Cloudflare for DNS, content delivery, TLS, Workers, security and related technical services. When you access the site, Cloudflare may process request and security data such as IP address, request metadata, timestamps and technical identifiers as needed to deliver and protect the service. Ormaven relies on its legitimate interest in operating a secure, reliable website (Article 6(1)(f)).
Traffic and performance measurement
Ormaven uses Cloudflare Web Analytics for aggregate traffic and performance measurement. Cloudflare states that Web Analytics does not collect or use visitors’ personal data and does not use cookies or similar browser storage for this service. Ormaven uses the resulting aggregate information to improve usefulness, quality, performance and navigation.
Recipients and processors
Personal data may be processed by Cloudflare, Inc. and its group companies/sub-processors where necessary to host, protect and operate ormaven.com, validate Turnstile and deliver contact-form notifications. Contact messages are delivered to the operator’s destination mailbox, so the provider of that mailbox may also process the correspondence as an infrastructure provider. Ormaven does not sell personal data.
International transfers
Cloudflare operates globally and some processing may take place outside the European Economic Area. Cloudflare’s current Data Processing Addendum provides transfer safeguards including the EU Standard Contractual Clauses where required and describes additional transfer mechanisms. The destination mailbox provider may also process data outside the EEA depending on its infrastructure and applicable safeguards.
Retention
Contact messages and related correspondence are normally retained for up to 12 months after the enquiry is resolved. They may be kept longer where an ongoing business relationship, legal obligation, dispute or establishment, exercise or defence of legal claims makes this necessary. Ormaven does not maintain a separate website database of contact-form submissions. Technical and security data is retained only according to the shortest practical service settings and for as long as reasonably necessary for security, troubleshooting and service operation.
Your rights
Where the GDPR applies, you may have rights to information, access, rectification, erasure, restriction, objection and, where applicable, data portability. Where processing is based on legitimate interests, you may object on grounds relating to your particular situation. Requests can be sent to hello@ormaven.com. You also have the right to lodge a complaint with the competent supervisory authority; in the Czech Republic this is the Office for Personal Data Protection (ÚOOÚ).
Advertising, optional analytics and cookies
Google AdSense, personalized advertising and other non-essential tracking are not active at launch. They will not be enabled until the required consent-management and privacy information are implemented. See the Cookie Policy for the current state.
Data minimisation
Please do not send confidential employer information, credentials, special-category personal data or personal data about third parties unless it is genuinely necessary and lawful to do so. Ormaven intentionally asks for only the minimum information needed to understand and respond to an enquiry.
Changes to this notice
This notice may be updated when the website adds new functions, providers or commercial services. Material changes will be reflected on this page. Last substantive update: 2 October 2026.