Privacy Policy
Last updated: November 14, 2026
In short: we have no accounts, forms or newsletter, so we collect very little. Visiting a website always involves some technical data, such as your IP address. We count visits without cookies, and we use Google Analytics cookies only if you accept them. This page explains what data is processed, who receives it and why.
1. Who runs this website
This website is responsible for the personal data described on this page (the "controller" under the GDPR). For any question about your data, or to use your rights, contact us by email.
- Website: Tech Picnic
- Domain: tech-picnic.com
- Email: hladovina@proton.me
2. What information we collect
We only process the data below. You cannot give us personal data through the site itself, because it has no forms or accounts.
- Technical request data: your IP address, browser and device type, the page you requested and the time of the request. Our hosting provider, Cloudflare, receives this whenever you load a page.
- Cookieless visitor statistics: pages viewed, the site you came from, your country, and your browser, operating system and device type. These are collected without cookies and without identifying or fingerprinting you.
- Google Analytics, only if you accept cookies: the pages you view, how long you stay, how you arrived (for example from a search engine or a link), your approximate location, and your browser and device type. This is linked to a random identifier stored in a cookie, so that repeat visits from the same browser can be recognised. Google uses your IP address to estimate your location and does not store it. If you decline, Google Analytics is not loaded at all.
- Image requests: when an article photo loads, Unsplash receives your IP address and browser details.
- Emails you send us: your email address and whatever you write, if you contact us.
We do not collect names, accounts or payment details, we do not sell data, and we do not use your data for advertising.
3. Why we collect it
- To deliver the website and make it work correctly
- To keep the website secure and prevent abuse
- To understand which articles are read and how readers find and use the site, so we can improve our content
- To answer you when you contact us
4. Legal basis for processing
The GDPR requires a legal basis for each use of personal data. Ours are:
| Activity | Legal basis |
|---|---|
| Delivering the website (hosting) | Legitimate interests (Art. 6(1)(f) GDPR) |
| Security and server logs | Legitimate interests (Art. 6(1)(f) GDPR) |
| Cookieless visitor statistics (Cloudflare) | Legitimate interests (Art. 6(1)(f) GDPR) |
| Google Analytics cookies and measurement | Consent (Art. 6(1)(a) GDPR) |
| Showing article images (Unsplash) | Legitimate interests (Art. 6(1)(f) GDPR) |
| Answering your emails | Legitimate interests (Art. 6(1)(f) GDPR) |
| Advertising cookies (only if ads are introduced) | Consent (Art. 6(1)(a) GDPR) |
Our legitimate interests are running a working, secure website, understanding its use in aggregate, and answering messages. You can object to processing based on legitimate interests at any time (see section 8).
5. Who receives your data
We do not sell personal data. It is processed by these services, which help us run the site:
- Cloudflare, Inc. (USA): hosting, content delivery, security and cookieless visitor statistics (Cloudflare Web Analytics). (privacy policy)
- Google Ireland Limited (Ireland), with Google LLC (USA): Google Analytics, only if you accept cookies. (privacy policy)
- Unsplash Inc. (USA): serves the photographs in our articles. (privacy policy)
- Proton AG (Switzerland): our email provider, if you write to us. (privacy policy)
We show no advertising at the moment. If we introduce it, we will name the advertising partners here before any ads appear, and their cookies will be set only with your consent.
6. How long we keep it
- Technical request data and server logs: kept by Cloudflare for a short period under its own retention rules, then deleted.
- Cookieless visitor statistics: stored only as aggregate counts that do not identify you.
- Google Analytics data: kept for up to 14 months, then deleted automatically. Its cookies expire 2 years after your last visit, or immediately if you withdraw consent.
- Emails: kept as long as needed to deal with your message, and deleted within 12 months after the conversation ends.
7. Transfers outside the EU
Cloudflare, Unsplash and Google LLC are based in the United States, so your data may be processed there. These providers protect such transfers with recognised safeguards, such as the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses. Proton AG is in Switzerland, which the EU recognises as providing adequate data protection.
8. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you
- Have inaccurate data corrected
- Have your data deleted
- Restrict how we use your data
- Object to processing based on our legitimate interests
- Receive your data in a portable format
- Withdraw consent at any time, where processing is based on consent. For Google Analytics, use "Cookie settings" at the bottom of every page
To use any of these rights, email us at the address in section 1. You also have the right to complain to a data protection authority, in particular in the EU country where you live or work.
9. Cookies
We set Google Analytics cookies only if you accept them, and no advertising cookies. Everything we store in your browser, and how to change your choice, is explained in our Cookie Policy.
10. Children
This website is not directed at children, and we do not knowingly collect data about them.
11. Changes to this policy
If the way we handle data changes, we update this page and the date at the top.