Legal
Privacy policy
How I process your personal data and what rights you have under the GDPR.
1. Controller
The operator is Nydrok LLC, EIN 36-5152970, registered at 1209 Mountain Rd PL NE 5888, Albuquerque, NM 87110, USA, operating the Matúš Mikčo brand and the matusmikco.com website. Represented by Matúš Mikčo. Contact: hello@matusmikco.com, +1 505 348 6365.
Processing complies with Regulation (EU) 2016/679 (GDPR) and with the other applicable rules in the countries where I operate.
2. What data I process
When you contact me: name, email, phone, company name and the content of your message.
When you book a consultation: additionally the slot you chose and your time zone.
When you create an account: email and password. The password is not stored in readable form, only its cryptographic hash. The account also remembers which recordings you have listened to, so it matches across your devices.
When you subscribe to the newsletter: email and language.
When you run a demo: the text or file you put into it. I do not store it; it is processed and discarded. I store only the fact that the demo ran, and a one-way hash of the IP address so the daily limit can be enforced.
Automatically: technical data such as IP address, device type and cookies, to the extent you consented to in the cookie bar.
I neither process nor store payment card details; payments are handled by Stripe.
3. Purposes and legal basis
Performance of a contract and pre-contractual steps (Art. 6(1)(b) GDPR): booking consultations, preparing proposals, providing services and running your account.
Legal obligation (Art. 6(1)(c) GDPR): accounting and tax records.
Legitimate interest (Art. 6(1)(f) GDPR): site security, protection against sign-in abuse, and improving the services.
Consent (Art. 6(1)(a) GDPR): the newsletter, marketing communication, and analytics and marketing cookies. You can withdraw consent at any time, as easily as you gave it.
4. Recipients and processors
I share data only with providers who process it on my behalf, and I have a data processing agreement with each of them:
- Hosting and database: Vercel, Supabase
- Sending email: Resend
- Payments: Stripe
- Content and voice generation: Anthropic, ElevenLabs. I do not send your personal data to these services; they process public news sources only.
- Measurement and advertising, with your consent only: Google, Meta. Details in the cookie policy.
5. Transfers outside the EU
The operator is based in the USA and some providers operate outside the EU, so transfers to third countries do occur. They take place under standard contractual clauses (SCCs) approved by the European Commission, or under an adequacy decision where the provider has one.
6. How long I keep data
- Enquiries and proposals that did not proceed: 2 years from the last contact
- Contract documentation: for the duration of the engagement and 4 years after it ends
- Accounting records: 10 years, as the rules require
- User account: until you close it
- Newsletter: until you withdraw consent
- Cookies: for the periods listed in the cookie policy
7. Your rights
Under the GDPR you have the right to:
- access the data I hold about you
- have inaccurate data corrected
- erasure, where the data is no longer needed or you withdrew consent
- restriction of processing
- portability, in a machine-readable format
- object to processing, in particular for direct marketing
- withdraw consent at any time, without affecting processing already carried out
Write to hello@matusmikco.com and I will reply within 30 days at the latest. I do not carry out automated decision-making or profiling with legal effect on you.
If you are not satisfied, you may lodge a complaint with the Slovak Data Protection Authority or with the supervisory authority in your country of residence.
8. Cookies
The site uses cookies and measurement pixels. The full list, including providers, is in the cookie policy. You can change your settings at any time via the "Cookie settings" link in the footer.
9. Changes to this policy
I may update this policy. The current version is always at this address with its effective date. Last updated: júl 2026.