Privacy Policy

1. Data Controller Identification

This Privacy Policy explains how Jozef Kočiš ("we," "us," or "our"), operating through the domain matthhws.space, collects, processes, and protects personal information obtained through our online travel magazine, advisory request forms, and related digital communications. For inquiries regarding data practices, contact us directly via email at [email protected].

2. Scope of this Policy

This policy applies to all visitors, readers, clients, and subscribers interacting with matthhws.space. It governs information collected directly via online inquiry forms, newsletter subscriptions, email exchanges, as well as diagnostic technical data collected automatically through standard web protocols and authorized cookies.

3. Categories of Data Collected

We classify information into three primary categories:

• Information Provided Voluntarily: Full name, email address, optional contact telephone numbers, intended destination choices, and notes submitted via contact forms.
• Automatically Generated Technical Data: Masked IP addresses, browser specifications, operating system versions, referring URLs, pages visited, and session duration.
• Cookie & Signal Preferences: User consent choices maintained through local browser storage and Google Consent Mode v2 signals.

4. Purposes and Legal Basis for Processing

The following table outlines our operational rationale and legal basis under applicable United States federal and state data privacy regulations (including the California Consumer Privacy Act as amended by the CPRA):

5. Google Consent Mode v2 and Analytics

We implement Google Consent Mode v2 in an advanced deployment. By default, marketing and analytics storage signals remain denied until explicit visitor selection is registered via our consent interface. Essential security and strictly necessary site functionality cookies remain active to maintain safe browsing.

6. Third-Party Sharing and Sale Prohibition

Jozef Kočiš does not sell, rent, or trade your personal information. We do not engage in unauthorized cross-context behavioral marketing. Data is shared exclusively with vetted infrastructure contractors (such as secure web hosting and transactional email deliverability partners) bound by strict non-disclosure obligations.

7. Data Retention Cycles

Inquiry and travel brief data are retained only as long as necessary to fulfill your advisory engagement or up to 24 months from your last interaction. You may request permanent deletion of your profile at any point.

8. User Privacy Rights

Under United States privacy legislation (including CCPA/CPRA, Virginia VCDPA, and Colorado CPA), users have the right to:

• Request disclosure of the specific pieces of personal information collected.
• Request prompt correction of inaccurate records.
• Request permanent deletion of their personal information.
• Opt out of the sale or sharing of personal data (which we do not engage in by default).
• Non-discrimination for the exercise of any lawful privacy rights.

To exercise your rights, submit a written verified request to [email protected]. In California, regulatory oversight is administered by the California Privacy Protection Agency (CPPA).

9. Children's Privacy

Our publication and travel advisory services are directed exclusively to adult travelers aged 18 and older. We do not knowingly gather information from minors under 16 years of age.

10. Changes to This Privacy Policy

We may periodically update this policy to mirror technological adjustments or legal changes. Updates will be posted on this page with an updated effective date timestamp.