Privacy Policy

Last updated: 28 August 2026

1. Who Is the Data Controller?

The data controller within the meaning of the General Data Protection Regulation (Regulation (EU) 2016/679, hereinafter GDPR) and applicable Slovak data protection laws (Act No. 18/2018 Coll. on Personal Data Protection) is:

Marian Stancik
Email: marianstancik@agentmail.to

This privacy policy applies to the personal data of visitors and subscribers of the website marianstancik.dev operated by Marian Stancik as a natural person.

2. What Personal Data We Process and Why

2.1 Newsletter Subscription (Consent)

When you subscribe to the newsletter via the lead capture form on this website, we process the following personal data:

• Email address — for the purpose of sending newsletter updates about AI agent systems, UAV builds, legal & tech content, and related topics.

Legal basis: Article 6(1)(a) GDPR — your consent. You provide your email address voluntarily and consent to its processing for newsletter purposes by checking the GDPR consent checkbox and submitting the form.

Retention period: Your email address is stored until you withdraw your consent (unsubscribe). You can unsubscribe at any time via the link in every newsletter email or by contacting us directly.

2.2 Server Logs (Legitimate Interest)

When you visit this website, the web server (hosted by Hetzner Cloud) automatically collects:

• IP address
• Date and time of access
• Pages visited
• Browser user-agent string
• Referring URL
• HTTP status code

Purpose: Ensuring the security, stability, and proper functioning of the website; detecting and preventing malicious activity; enabling system diagnostics and troubleshooting.

Legal basis: Article 6(1)(f) GDPR — legitimate interest of the controller in maintaining the operational security and integrity of the website infrastructure.

Retention period: Server logs are retained for a maximum of 90 days, after which they are automatically deleted.

2.3 Contact Inquiries

If you contact me via email (marianstancik@agentmail.to), the personal data you provide in your message (name, email address, and any other information you voluntarily include) will be processed solely for the purpose of responding to your inquiry.

Legal basis: Article 6(1)(f) GDPR — legitimate interest in communicating with visitors and responding to inquiries.

Retention period: Email correspondence is retained for the duration of the communication and up to 1 year after the last contact, unless a longer retention is required by applicable law.

3. Data Processors and Hosting

I use the following service providers who process personal data on my behalf as data processors:

• Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany) — Data centers in Nuremberg, Germany and Helsinki, Finland (EU only). Hosting and server infrastructure.
• AgentMail — Email delivery service for newsletter distribution and contact communication.
• Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA) — Static site hosting and CDN (edge network).
• Umami Software (open-source analytics, self-hosted on Hetzner VPS) — Privacy-friendly, cookie-less web analytics. No personal data is stored; only anonymized, aggregated visit statistics are collected. IP addresses are anonymized before storage.

All data processors are bound by Data Processing Agreements (DPAs) compliant with Article 28 GDPR and operate within the European Economic Area or with adequate safeguards under Chapter V GDPR.

4. CRM Lead Processing (Legitimate Interest)

When you submit a contact inquiry or lead form on this website, the autonomous AI agent (Hermes Agent) processes the following personal data for CRM purposes:

• Email address — for lead identification and communication
• Message content — for understanding your needs and qualifying the lead
• Name — for personal communication

Purpose: CRM lead management — classifying, prioritizing, and managing prospective client relationships. The AI agent may categorize leads (e.g., by topic, urgency, or fit) and decide on the appropriate follow-up action (e.g., schedule a meeting, send information, or escalate to the human operator).

Legal basis: Article 6(1)(f) GDPR — legitimate interest of the controller in managing business relationships and responding to inquiries. A Legitimate Interest Assessment (LIA) has been conducted, confirming that the processing is necessary, does not override the data subject's interests, and is limited to the minimum data required.

Retention period: Lead data is retained for the duration of the business relationship and up to 2 years after the last contact, unless a longer retention is required by applicable law or the data subject requests earlier deletion.

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR): You have the right to obtain confirmation of whether your data is being processed and to request a copy of that data.
• Right to rectification (Art. 16 GDPR): You have the right to request the correction of inaccurate or incomplete data.
• Right to erasure (Art. 17 GDPR): You have the right to request the deletion of your personal data ("right to be forgotten") where the data is no longer necessary for the purposes for which it was collected.
• Right to restriction of processing (Art. 18 GDPR): You have the right to restrict processing in certain circumstances.
• Right to data portability (Art. 20 GDPR): You have the right to receive your data in a structured, commonly used, machine-readable format.
• Right to object (Art. 21 GDPR): You have the right to object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
• Right to lodge a complaint: You have the right to lodge a complaint with the Slovak Data Protection Authority (Úrad na ochranu osobných údajov Slovenskej republiky) at dataprotection.gov.sk.

To exercise any of these rights, contact me at: marianstancik@agentmail.to

5. Newsletter Unsubscribe

If you wish to unsubscribe from the newsletter at any time, you can:

• Click the unsubscribe link included in every newsletter email; or
• Send an email to marianstancik@agentmail.to with the subject "Unsubscribe".

Your email address will be removed from our mailing list promptly upon request.

6. Cookies

This website does not use cookies for tracking, analytics, or advertising purposes. No third-party tracking scripts, social media pixels, or analytics cookies are loaded.

The website may use minimal technical storage that is strictly necessary for the functioning of the site (e.g., session handling) — these are exempt from consent requirements under Article 5(3) of the ePrivacy Directive (implemented by Slovak Act No. 452/2021 Coll. on Electronic Communications).

7. Automated Decision-Making and Profiling

This website uses autonomous AI agents (Hermes Agent) that make automated decisions in the following limited contexts:

• Content scheduling and publication — The AI agent decides which blog posts, social media content, and updates to publish and at what time, based on editorial guidelines set by the human operator.
• Lead prioritization and CRM management — The AI agent classifies incoming inquiries by topic, urgency, and fit, and determines the appropriate follow-up action.
• System health management — The AI agent monitors server infrastructure and automatically initiates recovery procedures when anomalies are detected.

These decisions do not produce legal effects on natural persons and are subject to human supervision. All AI-generated content is reviewed by the human operator before publication. The AI agent's decisions are logged and auditable.

Article 22 GDPR (automated individual decision-making) does not apply to these operations, as they do not produce legal effects or similarly significantly affect data subjects.

8. Data Security

I implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including:

• Encrypted HTTPS connections (TLS 1.3) for all data in transit
• Secure server infrastructure within the EU
• Limited access to personal data on a need-to-know basis
• Regular security updates and monitoring

9. International Data Transfers

Personal data is primarily processed within the European Economic Area (EEA). Where data is transferred to processors outside the EEA (e.g., Vercel Inc. in the USA), such transfers are governed by adequate safeguards under Chapter V GDPR, including:

• Standard Contractual Clauses (SCCs) adopted by the European Commission; or
• Applicable data privacy frameworks (e.g., EU-US Data Privacy Framework).

10. Changes to This Privacy Policy

This privacy policy may be updated from time to time to reflect changes in data processing practices or legal requirements. The "Last updated" date at the top of this page indicates the most recent revision.

In case of material changes, newsletter subscribers will be notified via email.

11. Contact and Supervisory Authority

Controller: Marian Stancik
Email: marianstancik@agentmail.to

Supervisory Authority:
Úrad na ochranu osobných údajov Slovenskej republiky
(Office for Personal Data Protection of the Slovak Republic)
Hraničná 12, 820 07 Bratislava, Slovak Republic
Website: https://dataprotection.gov.sk

Slovak version available at: marianstancik.dev/privacy-sk (slovenská verzia). The English version is for convenience; the legal framework is governed by Regulation (EU) 2016/679 and Act No. 18/2018 Coll. on Personal Data Protection.