Privacy Policy
Effective October 5, 2026. Česká verze.
1. Controller
The controller is AI Automation & Scaling s.r.o., company ID 30100755, Mozartova 1558/4, 430 01 Chomutov, e-mail [email protected]. No data protection officer has been appointed.
2. What we process and why
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| E-mail, name, billing address, country, VAT ID (entered at checkout), order number, purchased products, price | Concluding and performing the contract, delivery, invoicing, access to your purchases | Art. 6(1)(b) GDPR (contract) | For as long as the licence and purchase access last |
| Invoices and accounting records | Legal obligations (accounting, tax) | Art. 6(1)(c) GDPR | 10 years from the end of the accounting period |
| IP address, browser identification, order and download timestamps, failed login records | Security, protecting download links from abuse, fraud prevention, dispute handling | Art. 6(1)(f) GDPR (legitimate interest) | Up to 12 months; security logs 90 days |
| Correspondence (e-mails, complaints) | Customer support, handling complaints | Art. 6(1)(b) and (f) GDPR | 3 years after resolution |
Card data is entered directly with Stripe; we never receive or store it. We do not process special categories of data and do not carry out automated decision-making or profiling. Providing the data is necessary to conclude the contract.
3. Recipients
- Stripe Payments Europe, Ltd., Ireland (payment processing, fraud prevention; independent controller for payment data, see stripe.com/privacy). Stripe may transfer data to the USA under the EU-U.S. Data Privacy Framework adequacy decision and standard contractual clauses.
- Our web hosting and e-mail provider in the Czech Republic (data storage, sending e-mails) as a processor.
- Cloudflare, Inc. (network and security layer in front of the site; may process IP addresses and technical request data; participant in the EU-U.S. Data Privacy Framework).
- Our external accountant and tax adviser (invoices), and public authorities where required by law.
4. Cookies and browser storage
The site uses only strictly necessary cookies and browser storage: a session identifier (cart, admin login), your language and currency choice, and your theme preference. These do not require consent. We use no analytics, marketing or advertising cookies and no third-party tracking pixels. Stripe's checkout page uses its own cookies under Stripe's policies.
5. Your rights
You have the right of access, rectification, erasure (unless processing is required by law), restriction, data portability and the right to object to processing based on legitimate interest. We answer requests within 30 days at [email protected]. You may lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz) or the supervisory authority of your country of residence.
6. Security
Data is transmitted encrypted (HTTPS), administrator access is protected by two-factor authentication, download links are signed and limited, and product files are stored outside the public part of the site. Only people who need the data to perform the contract have access to it.