1. Data Controller
The controller of your personal data is:
- AddAI.Life s.r.o.
- Registered office: Prague, Czech Republic
- Company ID (IČO): 08740666
- Contact us via our form
For any questions or requests regarding your personal data, please use our contact form.
2. What Data We Collect
Contact & enquiry data
When you complete our demo request form, we collect:
- First name and last name
- Work email address
- Company name
- Area of interest (selected from a dropdown)
- Optional message describing your use case
Analytics data
If you accept analytics cookies, we collect anonymised information about how you interact with our website via Google Analytics (GA4). This includes pages visited, session duration, referral source, and general device/browser type. No personally identifiable information is sent to Google Analytics.
Technical data
Our web server may automatically log your IP address, browser type, and referring URL as part of standard server operation. These logs are retained for a maximum of 30 days for security purposes only.
3. How We Use Your Data
- To respond to your enquiry — we use the contact form data to get in touch, arrange a demo, and provide you with information about our platform.
- To improve our website — analytics data (only if consented) helps us understand which content is useful and where we can improve.
- For security — server logs are used to detect and investigate potential security incidents.
- To comply with legal obligations — we may retain certain records to fulfil Czech and EU legal requirements.
We do not use your data for automated decision-making or profiling. We do not sell, rent, or share your personal data with third parties for their own marketing purposes.
4. Legal Basis for Processing
We rely on the following legal bases under GDPR Article 6:
- Article 6(1)(b) — Contract performance: Processing contact form data to respond to your enquiry and arrange a demo.
- Article 6(1)(a) — Consent: Setting analytics cookies, where you have actively accepted them via our cookie banner.
- Article 6(1)(f) — Legitimate interests: Server security logging, where our interest in protecting our infrastructure does not override your rights.
- Article 6(1)(c) — Legal obligation: Retaining records required by applicable Czech and EU law.
5. Data Retention
- Contact form data: Retained for up to 3 years from your last interaction with us, or until you request deletion.
- Analytics data: Retained in Google Analytics for 14 months (our configured data retention setting).
- Server logs: Retained for 30 days, then automatically deleted.
6. Third-Party Services
We use the following third-party services that may process your data:
- Google Analytics (GA4) — website analytics, subject to your cookie consent. Data is processed by Google LLC under the EU Standard Contractual Clauses. See Google's Privacy Policy.
- Google Fonts — we load fonts from Google's CDN. Google may process your IP address as part of this request; no personal data is stored on our behalf.
All third-party processors we engage are bound by data processing agreements (DPAs) in compliance with GDPR Article 28.
7. International Data Transfers
Some of our third-party providers are based outside the European Economic Area (EEA). Where this occurs, transfers take place under the EU Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring an adequate level of protection for your data.
8. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access — request a copy of the data we hold about you.
- Right to rectification — ask us to correct inaccurate or incomplete data.
- Right to erasure — request deletion of your data ("right to be forgotten"), subject to legal retention obligations.
- Right to restriction — ask us to limit how we process your data in certain circumstances.
- Right to data portability — receive your data in a structured, machine-readable format.
- Right to object — object to processing based on legitimate interests or for direct marketing.
- Right to withdraw consent — where processing is based on consent (e.g., analytics cookies), you may withdraw at any time via the cookie settings on our website without affecting the lawfulness of prior processing.
To exercise any of these rights, please use our contact form. We will respond within 30 days. You also have the right to lodge a complaint with the Czech supervisory authority: Úřad pro ochranu osobních údajů (UOOU), www.uoou.cz.
9. Cookies
We use two categories of cookies:
Essential cookies
These are strictly necessary for the website to function (e.g., remembering your cookie consent preference). They cannot be disabled.
Analytics cookies
These are optional. If accepted, Google Analytics cookies (such as _ga and _ga_*) are set to help us measure traffic and improve the site. You can accept or decline these via the cookie banner shown on your first visit, and change your preference at any time by clearing your browser's local storage or revisiting the banner via browser settings.
We do not use advertising or tracking cookies.
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These include encrypted data transmission (HTTPS/TLS), access controls, and regular security reviews.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page will be revised accordingly. We encourage you to review this page periodically.
12. Contact Us
For any questions about this Privacy Policy or your personal data, please contact us:
- Contact us via our form
- Website: addai.life
- Postal address: AddAI.Life s.r.o., Prague, Czech Republic