Privacy Policy
Updated: May 31, 2026
Welcome to the Lenna Stories blog. I value your trust, and I want to give you a clear and straightforward explanation of how I handle your personal data.
Data Controller
This website is operated by Radim Pešout (referred to as “I” or “the controller”). The site is available at lennastories.com. For any questions about data protection, please get in touch via the contact form.
What Data I Collect
Technical Logs (Automatic)
Cloudflare — the company that handles hosting and delivery of this website — automatically processes technical data with every visit:
- IP address (anonymised)
- Browser type and version
- Date and time of visit
- Page visited
This data is processed by Cloudflare as a processor under the GDPR, solely to ensure the security and availability of the site. I do not have direct access to it and do not store it separately.
Contact Form
If you reach out via the form on the Contact page, I will process your email address and the content of your message in order to reply. I use this data exclusively to communicate with you and do not share it with third parties.
Analytics — Google Analytics 4
This website uses Google Analytics 4 to track traffic and user behaviour (number of visits, pages viewed, session duration, traffic source). GA4 is active only after your consent — no analytics cookies are set without it.
- Controller: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
- Cookies:
_ga(2-year validity),_ga_0GTL2M6HG7(2-year validity) — used to distinguish unique visitors - Legal basis: your consent (GDPR Art. 6(1)(a))
- Transfer to the USA: under the EU–US Data Privacy Framework (in force since 10 July 2023)
- Consent can be withdrawn at any time via the Privacy Settings button in the page footer
Advertising — Google AdSense
This website displays ads through Google AdSense. Personalised ads (targeted based on your interests) are shown only with your consent; without consent, non-personalised ads may appear without tracking cookies.
- Controller: Google LLC (USA, see above)
- Legal basis: your consent (GDPR Art. 6(1)(a))
- Transfer to the USA: EU–US Data Privacy Framework
- Consent can be withdrawn at any time via the Privacy Settings button in the page footer
Consent Management — Google Privacy & Messaging
To obtain and manage your cookie consents I use Google Privacy & Messaging — a consent management platform (CMP) certified by Google and compliant with IAB TCF v2.3.
- On first visit, users from the EEA, UK and Switzerland see a banner with three options: I agree / I don’t agree / Manage options
- Your choice is stored for approximately 12 months
- You can change or withdraw consent at any time by clicking Privacy Settings in the footer of any page
Maps — OpenStreetMap
On trip-tip pages we display an interactive map from OpenStreetMap. When the map loads, your browser contacts the servers of the OpenStreetMap Foundation (UK), and your IP address is technically transmitted as a necessity. Maps do not load tracking cookies or third-party scripts.
- Legal basis: legitimate interest (GDPR Art. 6(1)(f)) — the map is a functional page element expected by readers; processing is kept to the minimum
Legal Basis for Processing
| Purpose | Legal Basis |
|---|---|
| Technical logs (Cloudflare) | Legitimate interest — ensuring security and availability |
| Contact form | Pre-contractual relationship / legitimate interest |
| Google Analytics 4 | Your consent (Art. 6(1)(a)) |
| Google AdSense (personalised ads) | Your consent (Art. 6(1)(a)) |
| OpenStreetMap maps | Legitimate interest (Art. 6(1)(f)) |
Your Rights
As a data subject you have the following rights under the GDPR:
- Access (Art. 15) — the right to know what data I hold about you
- Rectification (Art. 16) — the right to correct inaccurate data
- Erasure (Art. 17) — the right to be forgotten
- Restriction of processing (Art. 18)
- Portability (Art. 20) — the right to receive your data in a machine-readable format
- Objection (Art. 21) — the right to object to processing based on legitimate interest
- Withdrawal of consent — cookie consent can be withdrawn at any time by clicking Privacy Settings in the page footer
To exercise any of these rights, please contact me via the contact form. I will respond within 30 days.
You also have the right to lodge a complaint with the Office for Personal Data Protection (uoou.gov.cz).
Third-Party Data Sharing
This website uses the following third parties:
- Cloudflare, Inc. (USA) — hosting, CDN and security (Cloudflare Privacy Policy)
- GitHub, Inc. (USA) — source code management (GitHub Privacy Statement)
- Google LLC (USA) — analytics (GA4), advertising (AdSense), consent management (Privacy & Messaging); transfer under the EU–US Data Privacy Framework (Google Privacy Policy)
- OpenStreetMap Foundation (UK) — map tiles (OSM Privacy Policy)
I do not sell data or share it for marketing purposes beyond the above.
Changes to This Policy
I may update this policy from time to time. The date of the last update is always shown in the page header. For significant changes I will post a notice on the blog.