The first part of this document explains how we handle your data on the website virtunova-digital.cz. The second part explains how we use artificial intelligence.
The controller of personal data (and the operator of this website) is: Company: Zodpo s.r.o. Company ID (IČO): 196 04 408 Registered office: Chudenická 1059/30, Hostivař, 102 00 Praha 10 Contact: info@virtunova-digital.cz (hereinafter the „Controller“).
We do not use any marketing or tracking cookies on our website. We measure visitor statistics only using our own tool in an anonymised form. We create a non-reversible fingerprint from your IP address and browser details that rotates daily. Therefore, your site visits can't be connected across different days. We use your IP address to derive your approximate location at country, region, and city level. This data is used only for aggregate statistics and is kept for no longer than 24 months. We never store the IP address itself alongside statistics.
We process the personal data you provide to us only when you fill in the contact form. If you send us a message through it, we process the data you enter into it.
Purpose and legal basis: We process this data solely for the purpose of handling your enquiry and preparing a price quote, on the basis of Art. 6(1)(b) of Regulation (EU) 2016/679 (hereinafter the „GDPR“).
On the page containing the contact form, we use Cloudflare Turnstile to verify that the form is being submitted by a real person rather than an automated script. The check runs as soon as the page loads. That is, even if you never submit the form. While it runs, Cloudflare processes your IP address and information about your browser.
Purpose and legal basis: protecting the website against spam and abuse, based on our legitimate interest under Art. 6(1)(f) GDPR.
We keep your data in a secure database only for the time necessary for communication and the possible conclusion of a business relationship, but no longer than 6 months. After that, it is permanently deleted from our database, unless cooperation is concluded (in which case we continue to retain the data in order to comply with other legal obligations).
Only authorised employees of our company, who are bound by confidentiality, have access to personal data. We never sell your data or pass it on to third parties for their own purposes. To operate the website, we use suppliers who process the data as processors under Art. 28 GDPR, exclusively on our instructions and on the basis of data processing agreements:
Transfers of data to companies based in the United States of America are safeguarded by their certification under the EU-U.S. Data Privacy Framework.
Under the GDPR, you have the right to:
This part is governed by Regulation (EU) 2024/1689 (hereinafter the „Regulation“). We act exclusively as a deployer of general-purpose artificial intelligence („AI“) tools and do not operate any AI system under our own name.
All staff members are regularly trained in the responsible use of artificial intelligence and its weaknesses. Training takes place whenever a new AI tool is introduced or its use changes.
We have never engaged in any of the practices prohibited by Article 5 of the Regulation, with or without the use of artificial intelligence, and we commit to refraining from such practices in the future. Examples of prohibited practices are: manipulative techniques, subliminal messaging, and social scoring.
Content that we publish in any form (e.g. on the website or on social media) may be a product of artificial intelligence. We do not create deepfakes or any other materials intended to make users believe something that is not real. All materials generated with the help of AI are purely illustrative and duly labelled.
Every image, audio recording, or video created or edited using AI that could be mistaken for authentic material carries a clear visible label (for example a caption, a mark, or a note in the footer). Obviously stylised or generic illustrative visuals and routine assistive edits of real photographs (retouching, colour grading) do not require labelling. We never remove machine-readable provenance markings embedded by AI tool providers.
All content created by artificial intelligence must undergo human review at the content level before being used or published. This applies to text, visual content, and program code alike. The review addresses the substance of the output: accuracy, appropriateness, safety, and quality.
All direct communication with clients and the public is conducted by real people. AI may assist in preparing texts, but it never communicates externally on its own: no artificial intelligence system sends messages, emails, replies, or comments on our behalf.
Our use of AI tools stays within the bounds of our existing obligations under the GDPR. Personal data is entered into AI tools only where a legal basis and appropriate safeguards exist, and never into tools that would use it to train models without our consent.