What happens to your data.

Who is responsible for your data

Joshua Sascha Miguel van den Toorn, trading as Reboot Prague, a registered Czech sole trader (OSVČ). Full business identification, including IČO and registered address, is on the legal details page. For anything about your data, email rebootprague@gmail.com.

What I collect, and why

• What you send me: your name, contact details and a description of the problem, submitted through the contact form, email, phone or WhatsApp. This exists so I can reply and do the work. Legal basis: taking steps at your request before and during a contract.
• Invoicing records: what was done, when, and what was charged. Czech tax and VAT law requires these to be kept for a number of years (up to ten for invoices). Legal basis: legal obligation.
• Nothing else. No analytics, no advertising trackers, no profiling, no mailing list. Fonts are served from this site itself, so visiting it doesn't send your IP address to Google or anyone else.

Files on a device left with me

This is the part that actually matters when you hand over a laptop, so it's worth being specific.

• I open what the job requires and nothing else. Your photos, messages, documents and browser history are not browsed.
• Nothing is copied off your device except as part of a backup or recovery job you asked for.
• Any working copy made during a backup, reinstall or recovery is deleted once you confirm you have your files.
• No monitoring or remote-access software is left behind. If a remote session tool was used, you'll be shown how to remove it.
• Nothing about your device, your files or your business is discussed with anyone else.
• If I need a password to do the work, change it afterwards. That's sensible practice with any technician, including me.

One limit worth stating plainly: if I ever came across clear evidence of a serious crime on a device, I could not ignore it, and Czech law may require me to report it. That doesn't come up in ordinary repair work, but you should know the boundary exists rather than assume otherwise.

Who else sees your data

Only the services needed to run the business, and each sees only what its job requires:

• the email provider (Gmail), where messages you send end up;
• Cloudflare, which hosts this site, manages its domain, and keeps standard server logs (such as IP addresses) for security;
• Resend, which relays contact-form submissions to that inbox on the site's behalf;
• WhatsApp (Meta), if you choose to message me there;
• the remote-support tool, during an online session;
• an accountant, for invoicing records.

Some of these providers are based outside the EU, mainly in the US. Where that's the case, data is transferred under the safeguards GDPR requires, such as the EU–US Data Privacy Framework or the European Commission's standard contractual clauses. Your data is never sold, rented, or handed to advertisers.

How long it's kept

• Enquiries that don't turn into work: deleted within around 12 months.
• Job and invoicing records: kept as long as Czech tax law requires.
• Copies of your files: deleted as soon as the job is confirmed complete.

Your rights

Under GDPR you can ask what data is held about you, have it corrected, have it deleted where no legal obligation requires keeping it, limit or object to how it's used, or get a copy in a portable format. Email rebootprague@gmail.com and you'll get a reply within one month at the latest, usually much sooner.

If you're unhappy with how a request was handled, you can complain to the Czech data protection authority, the Úřad pro ochranu osobních údajů (uoou.gov.cz).

Cookies

This site sets no cookies at all, so there's no cookie banner.

Changes

If this page changes materially, the date below changes with it.

Last updated: September 2026