Privacy Policy.

This policy explains how we handle personal data on the chefeye.ai website, the data you send us through the contact form and the data we collect when measuring traffic. Processing of data generated by a chefeye.ai station running at a customer site is governed by a separate data processing agreement with that customer and is not covered here.

Who processes your data

The data controller is:

• 601 s.r.o.
• Povltavská 5/74, Troja, 171 00 Prague 7, Czech Republic
• Company ID: 28503554, VAT ID: CZ28503554
• Registered in the Commercial Register kept by the Municipal Court in Prague, file no. C 146364
• E-mail: hello@chefeye.ai

We have not appointed a data protection officer; the obligation under Article 37 GDPR does not apply to us. For anything related to data protection, write to the address above.

What we process and why

Contact form

We process the data you enter into the form: your e-mail, name and company, and optionally your phone number, number of locations and message. Together with them we store the page language, the address of the page you submitted the form from, and the time of submission.

• Purpose: to answer your enquiry, arrange a consultation and prepare an offer.
• Legal basis: steps taken at your request prior to entering into a contract, Article 6(1)(b) GDPR.
• You are under no obligation to provide the data. Without your e-mail, name and company, however, we cannot reply.

By ticking the box in the form you confirm that you have read this policy. Consent is not the legal basis for handling your enquiry; that follows from the pre-contractual steps.

Protecting the form from abuse

To keep the form free of automated spam, we briefly process the sender’s IP address, the time the form was loaded and the content of a hidden check field. The legal basis is our legitimate interest in running a working contact channel, Article 6(1)(f) GDPR. We use no CAPTCHA and no service that would collect further data about you.

Traffic measurement (Google Analytics 4)

We want to know which parts of the site work and where visitors leave. For that we use Google Analytics 4: a pseudonymous browser identifier, pages visited, approximate city-level location, device type and traffic source.

• Legal basis: your consent, Article 6(1)(a) GDPR and Section 89(3) of Czech Act No. 127/2005 Coll., on Electronic Communications.
• Until you give consent, no Google script is loaded into your browser. The site runs Google Consent Mode v2 with the default state set to “denied” and switches analytics cookies on only after your choice.
• The IP address is truncated before storage and no advertising identifiers are sent.
• You can change or withdraw consent at any time via the Cookie Settings link in the footer. Withdrawal does not affect the lawfulness of processing carried out beforehand.

Site operation and security

Our hosting provider logs technical operational data, IP address, browser type, request time and page address. It serves to detect attacks and errors. The legal basis is our legitimate interest in the security and availability of the site, Article 6(1)(f) GDPR.

How long we keep the data

• Enquiries from the form and related correspondence: 24 months from the last contact. If a contract is concluded, the retention period follows the contract and accounting and tax legislation.
• Record of your cookie consent: 12 months.
• Data in Google Analytics 4: 14 months from the last visit.
• Hosting operational logs: 30 days at most.

Once the period ends we delete the data, or anonymise it so that you can no longer be identified.

Who we share the data with

We do not sell your data and we do not pass it to anyone who would use it for their own purposes. The processors involved in running the site are:

• Resend, Inc., delivery of e-mails from the contact form and of the confirmation message.
• Google Ireland Limited, Google Analytics 4, only after consent has been given.
• Vercel Inc., website hosting and the contact form function.

We have data processing agreements under Article 28 GDPR in place with all of them. We may also disclose data to public authorities where the law requires it.

Transfers outside the European Union

Resend and Vercel are US companies, and part of the processing may take place outside the European Economic Area. Transfers rely on the European Commission’s adequacy decision (EU–US Data Privacy Framework) or on standard contractual clauses under Article 46(2)(c) GDPR. We will provide a copy of the clauses on request.

Cookies and similar technologies

Cookies are small files the site stores in your browser. Necessary cookies keep the site working and cannot be switched off; analytics cookies are set only with your consent.

Besides cookies we use browser storage (localStorage) for two items: chefeye_lang with your language choice and chefeye_consent with a copy of your cookie settings. They do not expire and stay in the browser until you delete them or change your cookie settings.

You can delete cookies at any time in your browser settings. Blocking necessary cookies may limit how the site works.

Your rights

In relation to your personal data you have the right:

• of access to the data and to a copy of it (Article 15 GDPR),
• to rectification of inaccurate data (Article 16),
• to erasure, where we no longer have grounds for processing (Article 17),
• to restriction of processing (Article 18),
• to data portability to another controller (Article 20),
• to object to processing based on legitimate interest (Article 21),
• to withdraw consent to analytics cookies at any time (Article 7(3)).

An e-mail to hello@chefeye.ai is enough. We reply within one month at the latest; in complex cases we extend the deadline and tell you why.

You also have the right to lodge a complaint with a supervisory authority, the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz, or with the authority in your country of residence.

Automated decision-making and profiling

We make no automated decisions based on data from this site that would produce legal effects concerning you or similarly significantly affect you, and we build no profiles.

Data security

The site runs over HTTPS only. Access to enquiries is limited to the people on our team who need them for their work. Access to the data is protected by two-factor authentication and reviewed regularly.

Changes to this policy

We may update this policy if the way we process data or the services we use change. The current version is always at this address and carries the date of the last update. We will announce material changes on the website.

If you have any question about data protection, write to us at hello@chefeye.ai.

Condiciones de uso