KDM6B RESEARCH ALLIANCE
Personal data processing
How we handle data when you visit this website or contact the KDM6B Research Alliance project.
Updated 13 November 2026
1. Who is responsible
The controller for the current operation of this website and related project correspondence is Ing. Jan Wozniak, Radvanická 977/72d, 715 00 Ostrava, Czech Republic. Contact: hello@k6b.eu. The website shares Oliwer’s story and the initiative behind the proposed KDM6B Research Alliance, nadační fond. The project name does not mean that the endowment fund has already taken over processing. When the fund becomes the controller, we will add its verified registration details and explain that change.
2. Visiting the website
This is an information website. It has no visitor registration, newsletter subscription or website-owner advertising or analytics tracking. The payment gateway and donation collection are not active; the website does not collect payment card details. Amount, currency and frequency selections operate in your browser and do not initiate a payment.
3. Data and purposes
If you email us or use an email link to share your story, we process your address, name, message and any information you attach. We process telephone or organisational details if you provide them. We use these data to respond, handle enquiries and discuss support or cooperation. We obtain data directly from you; if someone else introduces your contact, we will explain the source. Providing information is voluntary, but we may be unable to reply without return contact details.
4. Legal bases and sensitive data
Routine correspondence and website security rely on legitimate interests in handling enquiries, cooperation and secure operation (Article 6(1)(f) GDPR). Steps towards a contract at your request rely on Article 6(1)(b); any legal obligations rely on Article 6(1)(c). Health or genetic data also require an appropriate Article 9 condition, such as explicit consent for a specific purpose. Neither this notice nor sending a story replaces explicit consent to publish sensitive data. Publication of a child’s story, photographs and personal details must be separately agreed in advance with their legal representative, with appropriate scope and regard for the child’s interests. Please do not send full medical records in an introductory email; we will first agree the necessary scope and a secure way to share them.
5. Technical operation and service providers
The website is hosted on OpenAI Sites using Cloudflare infrastructure. To deliver pages, providers may process IP addresses, request times, page addresses, browser information and security logs. The page loads Google Fonts, which also connects your browser to Google. Our code stores only your language choice (oliwer-language) in browser local storage; you can remove it by clearing website data. We do not deploy our own marketing cookies. Providers’ technical processing is also governed by their policies. We use Zoho Mail and, for continuing correspondence, Gmail. Access is limited to people who need it for the relevant purpose and the applicable service providers. We do not sell data. A published story is, however, accessible to any visitor.
6. International services and external links
Providers may process data outside the European Economic Area. Any transfer must meet Chapter V GDPR, for example through an adequacy decision or standard contractual clauses; please contact us for specific information and available safeguards. Links to LinkedIn, other social networks and research websites lead to services with their own privacy policies. A link does not sign you up to those services.
7. Retention
We retain routine enquiries while handling them and for no longer than three years after the last substantive contact. For ongoing cooperation, we retain correspondence throughout the relationship and for no longer than three years afterwards, unless a specific legal obligation or protection of rights requires longer retention. Published stories and photographs follow their separately agreed purpose and scope of consent; we review whether publication remains necessary. Providers retain technical logs under their operational and security rules; we have not verified a single uniform retention period for those logs. Your language choice remains in your browser until changed or deleted.
8. Your rights and contact
Subject to GDPR conditions, you may request access, rectification, erasure, restriction and, where applicable, portability. You may object to processing based on legitimate interests. You may withdraw consent at any time without affecting the lawfulness of earlier processing. Email hello@k6b.eu or write to the controller’s postal address. We normally respond within one month; if a justified extension is needed, we will explain why within that month. You may complain to the Czech Office for Personal Data Protection or your competent EU supervisory authority. We do not use automated decision-making producing legal or similarly significant effects, or profiling.
9. Scope of this notice
This notice covers the current information website and related contact. It is not research consent or a description of an active public collection. Relevant information will be updated before donation collection, a new form or research processing is launched.