Privacy Policy

Last updated: 26 October 2026 · Česká verze

We protect your privacy and do our utmost to keep your personal data safe. This page describes which data we process on the SCITEG AI website, why, who we share it with and what rights you have under the GDPR. In case of any discrepancy, the Czech version of this policy prevails.

I. Who is the data controller

The controller of your personal data is SCITEG, a.s., Company ID 04668359, registered office at Hlinky 487/35, 603 00 Brno, Czech Republic, registered in the Commercial Register kept by the Regional Court in Brno, Section B, Insert 7461 (“we”). For any questions about data processing you can contact us at any time: [email protected] or by post to the registered office.

II. What data we process, why and on what legal basis

• Contact form: name and email, optionally phone, company, number of employees and a description of your needs. Purpose: handling your request and arranging a free audit. Legal basis: steps prior to entering into a contract (Art. 6(1)(b) GDPR).
• EU AI Act checklist: you can download it without entering an email and without consent. The English version of the website does not ask for an email there. On the Czech version you can enter an email to subscribe to AI literacy tips (in Czech), see the paragraph on the tips subscription below.
• Email entered earlier when downloading the EU AI Act checklist (the original form with a consent checkbox, these emails are in our mailbox): email address. Purpose: sending the material and related information about AI literacy. Legal basis: your consent (Art. 6(1)(a) GDPR), given by ticking the box on the form. You can withdraw consent at any time by writing to [email protected]; withdrawal does not affect processing before it.
• Meeting booking: you enter your name, email and chosen time directly in Calendly; we receive the details of the booked meeting. Purpose: arranging and holding the meeting. Legal basis: steps prior to entering into a contract.
• AI assistant on the website: the text of the conversation you have with the assistant. Purpose: generating an answer to your question. Legal basis: legitimate interest (answering the question you asked). Please do not enter sensitive data into the conversation. If you decide to leave your contact details in the conversation, we also process the name, email and description of your need that you fill in the assistant’s form and submit only after ticking the consent box. Purpose: handling your request. Legal basis: steps prior to entering into a contract.
• Compliance with legal obligations: data on invoices and accounting documents if you become our customer. Legal basis: legal obligation.

Providing your data is voluntary. Without contact details, however, we cannot respond to your request or arrange a meeting.

Waiting list for your own AI assistant. When you fill in the form in the "Your own assistant" section, we store your name, e-⁠mail, company name, your answer to what the assistant should do first, the website language, a fingerprint of your IP address (a hash with a daily salt that cannot be reversed) and the times of creation, confirmation and unsubscription. We send a confirmation e-⁠mail; only after you click the link in it do we record your interest and send a welcome message. After that we only send you information about the assistant and replies to your request. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the link in every e-⁠mail.

AI literacy tips subscription (Czech version of the website only). The tips are in Czech, so you can subscribe only on the Czech version of the website. When you enter your e-⁠mail in the "Checklist EU AI Act" section there and tick that you want the tips, we store the e-⁠mail address, the website language, a fingerprint of your IP address (a hash with a daily salt that cannot be reversed) and the times of sign-up, confirmation and unsubscription. We do not collect your name or anything else. We send a confirmation e-⁠mail; only after you click the link in it do we add you to the subscribers and send you the checklist. After that we send you an AI literacy tip once every two weeks. Purpose: sending AI literacy tips. Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time with the Unsubscribe link in every e-⁠mail (or with the unsubscribe button in your e-⁠mail app, or by writing to [email protected]). Withdrawal does not affect processing before it.

III. Who we share data with and transfers to third countries

We treat your data confidentially. Within the company, only staff who need it to handle your request have access to it. We do not sell it or pass it on to third parties for their marketing. To operate the website we use the following categories of processors, who process data only on our instructions:

• Webglobe: web hosting of this website (EU).
• Microsoft 365: delivery of form emails to our mailbox and sending emails to AI literacy tips subscribers (subscription confirmation and tips) (EU/EEA according to Microsoft’s settings).
• Calendly LLC (USA): meeting bookings. You enter your data directly into their service and Calendly also processes it under its own policy.
• Google: after you consent, the Google Analytics 4 measurement script is downloaded from Google’s servers and Google technically sees your IP address. Without consent the script is not downloaded and nothing is sent to Google (see Section V). The website fonts are hosted on our own server, we do not use Google Fonts.
• Cloudflare, Inc. (USA, with a network in the EU too): the whole sciteg.ai website runs behind the Cloudflare network. Every visit, i.e. loading pages and submitting forms, passes through Cloudflare, which sees your IP address and the content of the requests. Cloudflare protects the website against attacks and speeds up loading. It acts as our processor under its data processing terms. The audit form, the waiting list form and the sign-up for the AI literacy tips are also protected against bots by Cloudflare Turnstile: on submission the browser loads a script from challenges.cloudflare.com and Cloudflare evaluates technical browser data and your IP address to detect automated submissions (legitimate interest in protecting the form against abuse). Turnstile does not evaluate the content of the form. For the AI assistant, see also the Cloudflare tunnel item below.
• SCITEG’s own server: conversations with the AI assistant and contact details from its form are processed by our own system (LARA) running on our infrastructure; answers are not generated by any external chat provider. Notifications to our staff about a new contact do not contain your personal data.
• Cloudflare, Inc. (USA, with a network in the EU too): the connection between your browser and our AI assistant server (address lara.sciteg.sk) runs through an encrypted Cloudflare tunnel. Cloudflare technically transfers the content of the requests and sees your IP address; it acts as our processor under its data processing terms.

Transfers outside the EU. For services that may process data in the United States (in particular Calendly, Google and Cloudflare), the transfer is safeguarded by the European Commission’s standard contractual clauses or by an adequacy decision (EU-U.S. Data Privacy Framework). We are happy to provide details at [email protected].

We pass confirmed interest in your own assistant to SCITEG’s internal application (LARA) running on the company’s own server in the Czech Republic, so that the colleague responsible can get back to you. The data does not leave SCITEG.

IV. How long we keep data

• Data from requests: for the duration of the negotiations and then for no longer than 3 years.
• Email for the AI literacy tips subscription: until you unsubscribe (see below).
• Email entered earlier when downloading the EU AI Act checklist (the original form, these emails are in our mailbox): until you withdraw consent, at most 3 years. You can withdraw consent at any time by writing to [email protected]; withdrawal does not affect processing before it.
• Conversations with the AI assistant: usually 90 days, at most 1 year. Contact details left via the assistant’s form are kept as request data (see above).
• Data in accounting documents: for the statutory archiving period under the Czech Accounting Act and VAT Act.

We keep data longer only where necessary to comply with a legal obligation or to protect our or your rights.

Waiting list for your own assistant: until you withdraw consent, at most 24 months after your last reaction. After you unsubscribe we delete your name, company and use case and keep the e-⁠mail only as a record of the unsubscription; the copy in our internal application is deleted on request. Unconfirmed sign-ups are deleted after 30 days.

AI literacy tips subscription: until you unsubscribe. After you unsubscribe we send you nothing more and keep the e-⁠mail only as a record of the unsubscription. If you never confirmed the subscription, we also delete the e-⁠mail when you unsubscribe. Unconfirmed sign-ups are deleted after 30 days.

V. Cookies and browser storage

The website uses cookies and similar browser storage in two categories. You manage them via the bar shown on your first visit and at any later time via the Cookie settings link in the footer.

• Necessary: a record of your consent choice and the date you made it (localStorage, keys scitegai-consent and scitegai-consent-at) so the bar does not ask repeatedly. The choice is valid for 12 months, after which the bar asks again. You can change it at any time via the Cookie settings link. We also store your language choice (localStorage, key scitegai-lang) and a pseudonymous conversation identifier for the AI assistant (a persistent random UUID in localStorage, key lara-assistant-session) that lets the conversation continue where it left off, and a flag that the short prompt next to the assistant button has already been shown (sessionStorage, until you close the tab). Our server stores the conversation under that identifier; if you enter your name and email in the assistant’s form, they can be linked to it, so we treat it as personal data. None of these is used for tracking and none leaves your browser other than as part of your conversation with the assistant.
• Analytics (cookies only with your consent): Google Analytics 4 (measurement ID G-12G62CPB7Z, the same as on the main website sciteg.com). Google stores first-party cookies (_ga, _ga_*) and measures pseudonymous, aggregated traffic data (a random identifier in the cookie, not your name). Advertising personalisation is permanently switched off. The Google measurement script loads only after you consent. Until you give consent, or if you decline, no Google script is downloaded, Google learns nothing about your visit and no analytics cookies are stored (Google Consent Mode v2 defaults to denied). Advertising storage is always denied.

The AI assistant (chat bubble) available on the website sends the text of the conversation to our server so that it can generate an answer (see Sections II and III). It is unrelated to traffic measurement and does not use analytics cookies.

VI. Your rights

• the right of access to your data and to a copy of it,
• the right to rectification of inaccurate or incomplete data,
• the right to erasure,
• the right to object to processing (where processing is based on legitimate interest, including direct marketing),
• the right to restriction of processing,
• the right to data portability,
• the right to withdraw consent at any time where processing is based on consent.

You can exercise your rights by email at [email protected] or by post to the registered office. We will respond without undue delay and within one month at the latest.

We have not appointed a Data Protection Officer, as the law does not require us to. Please send any questions to [email protected].

Automated decision-making: our forms and the AI assistant do not make any automated decisions about you.

VII. Who the website is for

The website and our services are intended for companies and entrepreneurs, not children. We do not knowingly collect data of children under 16; if you believe a child has provided us with data, let us know and we will delete it.

VIII. Right to lodge a complaint

If you believe we process your data in breach of the law, you may lodge a complaint with the supervisory authority: the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, uoou.gov.cz. We would appreciate it, though, if you contacted us first; we deal with things openly and quickly.

← Back to the home page