Privacy Policy

Last updated 25 October 2026

Who is responsible

This website is run by:

the owner of the Instagram account @oliverdoestriathlon

Contact: a direct message to @oliverdoestriathlon on Instagram.

That person is the controller of your personal data under the EU General Data Protection Regulation (GDPR).

The short version

What is processed, why, and for how long

Visiting the site

The site is hosted by Cloudflare, Inc. When your browser loads a page, Cloudflare necessarily processes technical data such as your IP address, the page requested, the time and your browser’s user agent, in order to deliver the page and protect the site from abuse. Legal basis: my legitimate interest in running a secure website (Art. 6(1)(f) GDPR). Cloudflare keeps such logs only briefly, under its own privacy policy.

Visit statistics

I use Cloudflare Web Analytics to count page views, referrers and approximate countries. It sets no cookies, uses no fingerprinting and doesn’t identify individual visitors. Legal basis: my legitimate interest in knowing how the site is used (Art. 6(1)(f) GDPR).

Trying your logo on the suit

When you upload a logo, the file is read by your browser and drawn onto the 3D model on your device. It isn’t sent to any server, and it disappears when you close the page. The mockup you can download is also created on your device.

Your package and shared links

The spots you add to your package are stored in the part of the address after “#” (for example #pkg=P01.P05). Browsers don’t send that part to the server, so I can’t see it unless you send me the link.

Copying a message

When you tap a button that opens Instagram, the page copies a prepared message to your clipboard so you can paste it. This happens only on your device.

Contacting me

If you send me an Instagram message or an email, I process your name or username, your message and any details you give (for example your company and the spots you want) to answer you and to prepare and carry out a sponsorship agreement. Legal basis: steps before entering into a contract and performing it (Art. 6(1)(b) GDPR). I keep the correspondence as long as needed for that and, where there is a sponsorship, as long as the law requires me to keep accounting records. Instagram is operated by Meta Platforms Ireland Ltd.; once you are on Instagram, Instagram’s privacy policy applies.

The admin area

The page /admin is only for me, to edit prices and availability. Signing in sets one cookie (see the Cookie Policy). To stop password guessing, failed sign-in attempts are counted per IP address; the address is stored only as a one-way hash and deleted after 15 minutes.

Instagram statistics on this page

The “Reach” section shows aggregated numbers about my own Instagram account (followers, views, countries and age groups of followers). They contain no information about individual people.

Who else receives data

Cloudflare, Inc. (hosting, security and visit statistics) acts as my processor. Cloudflare may process data in the United States; transfers are covered by the EU–US Data Privacy Framework, under which Cloudflare is certified, and by the European Commission’s standard contractual clauses. I don’t sell or share personal data with anyone else, and I don’t use it for advertising.

Your rights

You have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to data portability. To use any of these rights, contact me as above. You also have the right to lodge a complaint with a supervisory authority; in the Czech Republic that is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.gov.cz).

No decisions about you are made automatically, and no profiles are created.

Changes

If the way the site works changes, I’ll update this policy and the date above.

Back to the rate card