Privacy Policy
Effective from: 22 October 2026
1. Who we are
The controller of personal data is Jitka Hořavová, ID No. 88201856, with its seat at Jiráskova 436/8, 789 85 Mohelnice, Czech Republic, trading as CodeCron (“we”). Contact: info@codecron.cz, tel. +420 725 825 856.
This policy applies to the website codecron.cz. We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Czech Act No. 110/2019 Coll. on Personal Data Processing.
2. What data we process, why and on what basis
| Situation | Data | Purpose and legal basis | Retention |
|---|---|---|---|
| Contact form and external development enquiry | name, e-mail, phone, company, message, attachment, IP address | handling your question or enquiry and communicating with you (Art. 6(1)(b) GDPR – steps prior to entering into a contract; otherwise (f) – legitimate interest) | for the duration of the communication and then up to 3 years (limitation period) |
| Newsletter | e-mail, subscription confirmation, measurement of e-mail opens and clicks | sending news and offers (Art. 6(1)(a) GDPR – consent; you confirm the subscription via a link in an e-mail) | until you unsubscribe |
| Blog comments | name, e-mail, comment text | publishing and moderating comments (Art. 6(1)(f) GDPR – legitimate interest) | until the comment is deleted or you ask for its removal |
| “Like” on articles | session identifier, IP address | preventing repeated voting (Art. 6(1)(f) GDPR – legitimate interest) | while the article is published |
| AI chat | text of your questions and answers, conversation identifier, page address, IP address, browser data | answering your question and improving answers, protection against abuse (Art. 6(1)(f) GDPR – legitimate interest) | up to 12 months |
| Traffic measurement | anonymous visitor and session identifier (cookies), visited page, referrer, device type, country, shortened IP hash; for Google Analytics the data collected by that tool | statistics and improving the website (Art. 6(1)(a) GDPR – consent to analytical cookies) | our own statistics up to 180 days; Google Analytics according to the tool’s settings |
| Website security | IP address, browser data, records of form submission and login attempts, blocked IP addresses | protection against spam, attacks and abuse (Art. 6(1)(f) GDPR – legitimate interest) | usually 30 days; an IP block lasts while the reason persists |
| Server logs | IP address, time and address of the request, browser data | operating and securing the website (Art. 6(1)(f) GDPR – legitimate interest) | usually up to 30 days |
Providing data is voluntary, but without the data marked as required in forms we cannot handle your enquiry. We do not use automated decision-making or profiling with legal effects.
3. Where we get the data from
We obtain data directly from you (forms, comments, newsletter sign-up, chat) and automatically from your browser when you visit the website (IP address, device data, cookies after your consent).
4. Who we share data with
We share data only with those who help us run the website, and only to the extent necessary for the given purpose. We have contracts with processors or follow their data processing terms.
| Recipient | Purpose | Transfer outside the EU |
|---|---|---|
| Server and hosting provider | running the website and storing data | no |
| Resend (Resend, Inc.) | sending e-mails (message confirmation, newsletter, notifications) | yes, USA – standard contractual clauses / EU–US Data Privacy Framework |
| OpenAI (OpenAI, L.L.C.) | generating AI chat answers (text of your question) | yes, USA – standard contractual clauses / EU–US Data Privacy Framework |
| Discord (Discord Inc.) | internal notification to the operator about a new form message (name, e-mail, message text) | yes, USA – standard contractual clauses |
| Google (Google Ireland Ltd.) | Google Analytics 4 – only with your consent; the map on the Contact page – only after you click | yes, USA – EU–US Data Privacy Framework / standard contractual clauses |
We may also disclose data to public authorities where the law requires us to.
5. Cookies
We always use necessary cookies; analytical and marketing cookies only with your consent. Details and the option to change your choice are on the Cookies page and in the Cookie settings link in the website footer.
6. AI chat
The chat answers are generated by a third-party service (OpenAI). Please do not enter sensitive or unnecessary personal data in the chat. Answers are informative only, are not binding, and the chat never makes decisions with legal effects.
7. How we protect data
The website runs over an encrypted connection (HTTPS). Access to the administration and data is protected by passwords and two-factor authentication, limited to authorised persons and logged. We do not store sensitive data in logs. We back up regularly and protect backups against unauthorised access.
8. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and the right to object to processing based on legitimate interest. You can withdraw consent at any time without affecting the lawfulness of processing before the withdrawal (for example by unsubscribing from the newsletter or in the Cookie settings).
Send your request to info@codecron.cz. If you believe we process data in breach of the law, you can lodge a complaint with the Czech Office for Personal Data Protection (www.uoou.gov.cz).
9. Children
The website is intended for businesses and companies, not for children. We do not knowingly process personal data of persons under 15. If you find that such a person has given us data, write to us and we will delete it.
10. Changes to this policy
We may update this policy, in particular when the services we use on the website change. The current version is always here; the effective date is at the top.