Privacy policy

1. Data controller

The controller of your personal data is:

I am a self-employed person and not a VAT payer. Processing complies with Regulation (EU) 2016/679 (GDPR) and Czech Act No. 110/2019 Coll., on the processing of personal data.

2. Who this policy covers

• prospects who fill in a form on aiky.cz
• customers who order a paid package
• visitors to the aiky.cz website

3. What data I process

Prospects asking for a sample video (form on /moda and /en):

• first and last name
• email address
• phone number, if you provide it (optional)
• a link to a product in your online store
• answers to the qualifying questions (range, number of products, budget for product content, decision-making authority, planned launch date)

Customers: in addition, billing details (name or business name, registered address, company ID, VAT ID), order and payment details, and our correspondence.

Website visitors: the technical data described in section 8.

4. Purposes and legal bases

• Handling your request and producing the sample video
  Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
• Assessing whether I can offer you the service and preparing a quote
  This is what the qualifying questions are for. Legal basis: steps before entering into a contract (Art. 6(1)(b) GDPR). Quote decisions are not automated or based on profiling; a person reads them.
• Marketing emails (news, tips and offers)
  Legal basis: your consent (Art. 6(1)(a) GDPR and Section 7 of Czech Act No. 480/2004 Coll.), given with a separate checkbox in the form. You can withdraw it at any time free of charge and unsubscribe with one click in every email, without affecting any video you have already received. I may also email existing customers about similar services on the basis of legitimate interest under Section 7(3) of the same act.
• Performing the contract, invoicing and accounting
  Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and legal obligations (Art. 6(1)(c) GDPR).
• Traffic analysis and improving the service
  Legal basis: your consent (Art. 6(1)(a) GDPR and Section 89(3) of Czech Act No. 127/2005 Coll.). Without consent I only measure anonymous traffic without storing anything on your device. Details in section 8.

I do not sell your data or pass it to third parties for their own marketing.

5. Do you have to provide the data?

I need your name, email and product link to produce and send the video. The phone number is optional. Consent to marketing emails is required to send the form. You can withdraw it at any time free of charge.

6. How long I keep the data

• Requests that did not lead to a contract: 1 year from sending the form.
• Marketing contact: until you withdraw consent or unsubscribe, but no longer than 3 years from your last contact.
• Customers: for the duration of the contract and 10 years after it ends (limitation periods and mandatory archiving of tax documents).
• If the aiky.cz project ends earlier: I delete the data except what the law requires me to archive.

7. Processors and recipients

Only processors necessary to run the service have access to the data, under data processing agreements:

• Google LLC (Mountain View, CA, USA): Google Sheets for storing requests, Gmail for sending emails
• Vercel Inc. (Walnut, CA, USA): website hosting and technical visit data
• PostHog Inc.: analytics, data hosted in the EU (Frankfurt)

Transfers to recipients outside the EU rely on the European Commission's standard contractual clauses. I may also share data with an external accountant, tax or legal advisor to the extent necessary, or with public authorities where the law requires it.

The product link you send is processed by generative models run by computing infrastructure providers. I do not pass them your contact details, only the product photos and the brief.

8. Cookies and analytics

The site uses anonymised analytics from Vercel (Vercel Analytics), which stores no cookies and does not identify individual visitors. I do not use remarketing or advertising cookies.

Analytics and session recordings (PostHog)

To analyse visitor behaviour and improve the product I use PostHog (PostHog Inc.), with data hosted in the EU (Frankfurt).

Without your consent nothing is measured and nothing is stored on your device. If you consent, an identifier is stored in your browser's localStorage and the measurement below is switched on. I remember a refusal only so I do not ask again.

With consent, PostHog processes:

• an identifier stored in the browser's localStorage
• IP address
• technical browser data (User-Agent, screen resolution, language)
• URLs of visited pages and the referrer
• clicks, scrolling and form interactions; input fields are masked and their content is not recorded
• session recordings (screen recording without input field content)

After you send the form this data is linked to your email address to analyse conversion and follow up.

Legal basis: your consent under Art. 6(1)(a) GDPR and Section 89(3) of Czech Act No. 127/2005 Coll., on electronic communications. Consent is voluntary, the site works without it and you can withdraw it at any time by clearing the site data (localStorage) in your browser settings, or by emailing the address in section 1.

9. Your rights

You have the right to:

• access your personal data (Art. 15 GDPR)
• rectify inaccurate data (Art. 16 GDPR)
• erasure (“right to be forgotten”, Art. 17 GDPR)
• restrict processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing (Art. 21 GDPR)
• withdraw consent at any time (Art. 7(3) GDPR)

Exercise any of these rights by emailing jan.alexandr.kopriva@gmail.com. I reply within 30 days, usually the same day.

You may lodge a complaint with the supervisory authority, the Czech Office for Personal Data Protection (Pplk. Sochora 27, 170 00 Prague 7), or with the authority in your EU country of residence.

10. Changes to this policy

I may update this policy; the effective date is at the top. I will inform you of material changes by email.