Privacy without legal fog
Privacy policy
When you contact us, we use your information to respond and deliver the agreed work — not to sell it or create unsolicited advertising profiles.
This policy applies to kodo.cz, contact forms, the Kodo assistant and subsequent communication. Our commercial rules are set out in the terms and conditions.
This English text is provided for convenience. If it differs from the Czech version, the Czech version prevails.
Last updated: 28 August 2026
Who controls your data
The data controller is KODO PRAHA, spol. s r.o., Company ID 26764971, VAT ID CZ26764971, with its registered office at Braunerova 563/7, 180 00 Prague 8, Czech Republic, registered in the Commercial Register maintained by the Municipal Court in Prague under file no. C 92190.
For privacy matters, contact us at [email protected] or write to our registered office.
What data we process
We process only the information needed for a specific purpose. This will typically include:
- your name, company, email address, telephone number and the content of your message or enquiry,
- information about your project, website, market and requested service,
- messages submitted through the AI chat and a technical identifier for the current conversation,
- contract, invoicing and payment details of clients,
- limited technical information about a website visit, such as the page visited, approximate time and anonymised device information.
Please do not send passwords, health information, identification document numbers or other sensitive information through forms or the AI chat unless we have expressly agreed a secure transfer method in advance.
Why we use data and our legal basis
| Purpose | Legal basis | Usual retention period |
|---|---|---|
| Responding to an enquiry and preparing a proposal | Steps taken before entering into a contract | Usually no more than 12 months after the last contact |
| Providing an ordered service | Performance of a contract | During the engagement and afterwards as required by law |
| Accounting, tax and legal records | Compliance with a legal obligation | For the period required by law, usually 10 years |
| Protecting legal claims, security and preventing misuse | Legitimate interests | For as long as necessary, no longer than the applicable claim period |
| Marketing communications where you subscribe | Consent or the statutory exception for existing clients | Until consent is withdrawn or you unsubscribe |
AI chat on the website
The Kodo assistant helps visitors navigate our services and make initial contact. Your message, the context of the page visited and the current conversation history are processed through our Dify interface. Depending on the model used, the content of a query may also be technically transferred to the AI model provider acting as our processor.
We do not use the chat for automated decision-making that produces legal or similarly significant effects. If you leave contact details in the chat, we will handle them like a normal enquiry and usually respond within 24 hours on business days.
Matomo and analytics cookies
We measure website traffic using our own Matomo installation. Matomo may store analytics cookies in your browser to distinguish visits and help us understand how people use the website. We use this information solely for our own statistics and to improve the website.
We do not use analytics data for advertising profiles and do not sell it. Matomo runs in our own installation and its statistics are not shared with advertising networks. The website may also use essential technical storage for a function requested by the visitor, such as maintaining an open chat session.
Who supports us technically
We do not sell personal data. Access may be provided only to people and suppliers who need it for a specific service, particularly:
- website hosting and application operation providers,
- our business email provider,
- accountants and other professional advisers,
- infrastructure and AI model providers involved in the Kodo assistant,
- public authorities where disclosure is required by law.
The public website and email also use global technology providers. We therefore cannot state that every technical copy of website data remains exclusively in the Czech Republic. Where data may be transferred outside the European Economic Area, we require an appropriate legal safeguard, particularly standard contractual clauses or an adequacy decision.
For private AI solutions delivered to clients, the storage location, access rules and involvement of external models are governed by the specific design and contract. A fully local setup without transferring content to an external AI provider can be agreed.
Your rights
Depending on the circumstances, you may have the right to access your personal data, have it corrected or erased, restrict its processing, object to processing based on legitimate interests and receive data in a portable format. You may withdraw consent at any time.
Send your request to [email protected]. To avoid disclosing data to the wrong person, we may reasonably verify your identity. You also have the right to lodge a complaint with the Czech Office for Personal Data Protection.
Security and changes to this policy
We limit access to data on a need-to-know basis, use secure transfer and apply reasonable organisational and technical measures. No transfer or storage system can be described as absolutely secure, so we agree a specific transfer method for more sensitive projects.
We may update this policy when our services, suppliers or legal requirements change. The current version is always published on this page.
Need clarification?
Write to us. We will explain the legal information as clearly as our services.
Contact Kodo