PRIVACY POLICY
Effective from March 14, 2026
1. Data Controller
Jakub Kuděla, ID No.: 08592594, registered address: Závada 127, 747 19 Závada, Czech Republic (hereinafter the "Controller").
Contact for data protection matters: [email protected]
2. What personal data we process
When using the avessa.ai website, we may process the following categories of personal data:
a) Contact form data
First name, last name, email address, phone number, company name, business segment, and an optional note. You provide these voluntarily for the purpose of booking a consultation.
b) Analytical and technical data
Information collected through analytics tools, such as IP address (anonymized), browser type, operating system, screen resolution, traffic source, website behavior (pages visited, visit duration, clicks) and similar technical data.
c) Cookie and marketing tool data
Data collected through cookies and third-party tracking technologies for the purposes of traffic analysis and advertising targeting.
3. Purposes of processing and legal basis
| Purpose | Legal basis | Retention period |
|---|---|---|
| Handling contact form inquiries | Legitimate interest (Art. 6(1)(f) GDPR) and pre-contractual measures (Art. 6(1)(b) GDPR) | 2 years from last contact |
| Website analytics and traffic measurement | Consent (Art. 6(1)(a) GDPR) | Per tool settings, max 26 months |
| Marketing targeting and remarketing | Consent (Art. 6(1)(a) GDPR) | Until consent withdrawal |
| Compliance with legal obligations | Legal obligation (Art. 6(1)(c) GDPR) | Per applicable legislation |
4. Analytics and marketing tools
The avessa.ai website uses the following third-party tools. These tools are activated only based on your consent through the cookie banner.
Google Analytics 4, operated by Google Ireland Limited, is used to analyze website traffic and user behavior. IP addresses are anonymized. Data is stored on Google servers within the EU.
Google Tag Manager, operated by Google Ireland Limited, is used to manage measurement and marketing scripts on the website. It does not collect personal data by itself.
Microsoft Clarity, operated by Microsoft Corporation, is used to analyze user behavior through heatmaps and session recordings. Data is processed in compliance with GDPR.
Meta Pixel (Facebook), operated by Meta Platforms Ireland Limited, is used to measure advertising campaign effectiveness and remarketing on Facebook and Instagram platforms.
Google Ads Remarketing, operated by Google Ireland Limited, is used to display targeted ads to users who have visited avessa.ai.
LinkedIn Insight Tag, operated by LinkedIn Ireland Unlimited Company, is used for conversion measurement and remarketing on the LinkedIn platform.
5. Recipients of personal data
We may share your personal data with the following categories of recipients:
Analytics service providers (Google, Microsoft) and advertising platforms (Meta, Google, LinkedIn) based on your consent. Hosting and IT service providers necessary for website operation. Accountants and tax advisors to the extent required by law. Public authorities in cases stipulated by law.
Personal data is not transferred outside the European Economic Area (EEA). If such a transfer were to occur (for example, in connection with services from US-based providers), an adequate level of protection is ensured in accordance with the European Commission's adequacy decision (Data Privacy Framework).
6. Your rights
As a data subject, you have the following rights under GDPR:
Right of access to your personal data and information about its processing.
Right to rectification of inaccurate or incomplete personal data.
Right to erasure of personal data when the processing purpose has expired or when you object to processing.
Right to restriction of processing in cases specified by GDPR.
Right to data portability in a structured, commonly used, and machine-readable format.
Right to object to processing based on the Controller's legitimate interest.
Right to withdraw consent to the processing of personal data at any time without affecting the lawfulness of processing prior to withdrawal.
Right to lodge a complaint with the Office for Personal Data Protection (www.uoou.cz) if you believe that the processing of your personal data violates GDPR.
To exercise your rights, contact us at [email protected]. We will respond to your request without undue delay, within 30 days at the latest.
7. Data security
We protect personal data using appropriate technical and organizational measures. All communication on avessa.ai is conducted via the encrypted HTTPS protocol. Access to personal data is limited to authorized persons to the extent necessary for the performance of their duties.
8. Changes to this policy
We may update this policy from time to time. We will inform you of material changes via the avessa.ai website. We recommend reviewing this policy regularly.
9. Contact
For any questions regarding the processing of personal data, please contact us:
Email: [email protected]
Jakub Kuděla, ID No.: 08592594, Závada 127, 747 19 Závada, Czech Republic