Privacy policy

The data controller is KODO PRAHA, spol. s r.o., Company ID 26764971, VAT ID CZ26764971, with its registered office at Braunerova 563/7, 180 00 Prague 8, Czech Republic, registered in the Commercial Register maintained by the Municipal Court in Prague under file no. C 92190.

For privacy matters, contact us at [email protected] or write to our registered office.

We process only the information needed for a specific purpose. This will typically include:

• your name, company, email address, telephone number and the content of your message or enquiry,
• information about your project, website, market and requested service,
• messages submitted through the AI chat and a technical identifier for the current conversation,
• contract, invoicing and payment details of clients,
• limited technical information about a website visit, such as the page visited, approximate time and anonymised device information.

Please do not send passwords, health information, identification document numbers or other sensitive information through forms or the AI chat unless we have expressly agreed a secure transfer method in advance.

The Kodo assistant helps visitors navigate our services and make initial contact. Your message, the context of the page visited and the current conversation history are processed through our Dify interface. Depending on the model used, the content of a query may also be technically transferred to the AI model provider acting as our processor.

We do not use the chat for automated decision-making that produces legal or similarly significant effects. If you leave contact details in the chat, we will handle them like a normal enquiry and usually respond within 24 hours on business days.

We use essential technical storage to remember your privacy choice and to provide functions you request, such as maintaining an open chat session. This does not require consent. We normally keep your cookie choice in the browser for six months and then ask again.

We run our own Matomo installation for basic website analytics from the moment the page loads, independently of the advertising-measurement choice. Matomo is configured without analytics cookies. It records pages visited, the source of the visit, approximate time and limited technical data; distinguishing repeat visits may be less accurate without cookies. We respect the Do Not Track setting. We use this information to improve the website and understand its traffic; we do not sell it or share it with advertising networks.

If you allow marketing cookies, we activate the OpenAI Ads Pixel. It measures visits referred by advertising and successfully submitted enquiries. On English pages, the same choice also enables the Google Ads tag for conversion measurement and possible remarketing. We pass your choice to Google through Consent Mode v2. These providers may process technical information such as a browser identifier, visited URL, time and information needed for advertising attribution. Our enquiry conversion event does not include the form content, name, email address or telephone number.

Advertising measurement scripts do not start before your consent. You can change this choice at any time using Cookie settings in the website footer. Withdrawing consent does not affect the lawfulness of earlier processing.

We do not sell personal data. Access may be provided only to people and suppliers who need it for a specific service, particularly:

• website hosting and application operation providers,
• our business email provider,
• accountants and other professional advisers,
• infrastructure and AI model providers involved in the Kodo assistant,
• the infrastructure provider for our own Matomo analytics and advertising measurement providers; advertising measurement is used only with your consent,
• public authorities where disclosure is required by law.

The public website and email also use global technology providers. We therefore cannot state that every technical copy of website data remains exclusively in the Czech Republic. Where data may be transferred outside the European Economic Area, we require an appropriate legal safeguard, particularly standard contractual clauses or an adequacy decision.

For private AI solutions delivered to clients, the storage location, access rules and involvement of external models are governed by the specific design and contract. A fully local setup without transferring content to an external AI provider can be agreed.

Depending on the circumstances, you may have the right to access your personal data, have it corrected or erased, restrict its processing, object to processing based on legitimate interests and receive data in a portable format. You may withdraw consent at any time.

Send your request to [email protected]. To avoid disclosing data to the wrong person, we may reasonably verify your identity. You also have the right to lodge a complaint with the Czech Office for Personal Data Protection.

We limit access to data on a need-to-know basis, use secure transfer and apply reasonable organisational and technical measures. No transfer or storage system can be described as absolutely secure, so we agree a specific transfer method for more sensitive projects.

We may update this policy when our services, suppliers or legal requirements change. The current version is always published on this page.