Legal document

Cookie Policy

A cookie is a small text file that a website stores in your browser. Its purpose is to let the site “remember” a piece of information between page loads or visits — for example, which language version you have chosen.

Which cookies we use

If you only browse the website without signing in, do not select or fill in anything and do not allow anything in the banner, we store a single cookie:

  • NEXT_LOCALE — holds your choice of language so that the next time the page loads, it is shown in the same language version you selected. It applies to the whole site (Path=/) and your browser sends it only during ordinary navigation on our pages (SameSite=Lax). It is stored only for the duration of your visit — closing the browser discards it and the language is determined afresh on your next visit.

If you sign in to your customer account, the site stores three technical cookies to keep you signed in: the sign-in token itself, which your browser does not expose to scripts on the page, a record of your role, and a helper cookie holding the basic details of your account, from which the page can tell who is signed in once it loads. By default they are valid for seven days, so they do not end when you close the browser; signing out deletes them.

When an enquiry form is submitted — and likewise when an attachment to an enquiry is uploaded — the site stores a technical cookie containing a random signed identifier. It serves solely to limit the number of enquiries sent from one browser and to protect the form against being flooded with automatically completed messages. It carries no information about you personally, your browser does not expose it to scripts on the page, and it is valid for seven days.

If you start filling in the form on the enquiry page, the site stores a technical cookie named sw_inquiry_draft containing a random identifier a short while after your last change — or when you leave the page. Its purpose is so that a visitor who leaves the page with an unfinished enquiry does not lose that text; the cookie itself carries only this random identifier, by which our server looks up the fields filled in so far, stored on our server — details about the vehicle, the message text, the optional answers, your name, e-mail and phone number, but not photographs or attachments — and without the cookie from your browser they cannot be attributed to anyone. Simply visiting the page does not create the cookie, and an empty form saves nothing. Your browser does not expose it to scripts on the page, it is sent only during ordinary navigation on our pages, and it is valid for at most seven days from the last time it was saved. Submitting the enquiry deletes it immediately, as does the Start over button; once it expires, the saved draft is deleted automatically.

If you open the assistant on the website, the site stores a cookie named sw_chat_anon containing a random identifier under which your conversation is kept for as long as you are not signed in. It is valid for 24 hours, your browser does not expose it to scripts on the page, and it is sent over a secure connection only.

If you select a car on the website so that prices are recalculated for it, the site stores a cookie named core_vybrane_auto. It holds only two identifiers from our car catalogue: the car model and, where applicable, its version. It holds no text, registration number or VIN; the site looks up the car's name from the identifier on its own. It is created only when you choose a car in the car selector yourself, or by the one-time transfer of an earlier selection (see below); entering a car in the enquiry form or having a car saved in your customer-account garage does not create it. It is written by the page itself, so scripts on the page can see it. It applies to this website only, not to its subdomains, and it is sent over a secure connection only. The site receives it with every request and uses it to show you prices for the selected car and to pre-fill your enquiry with it. We do not pass the cookie itself to traffic measurement or advertising tools. Without further consent it lasts only until you close your browser. If you allow the functional category in the cookie banner, your browser keeps it for 90 days, counted from when you select or change the car, or from when you give consent; if you withdraw consent to functional cookies, the selected car again lasts only until you close your browser. You can delete the selection at any time with the clear car selection button. If you selected a car earlier and it was stored in your browser with your consent, the site moves it into this cookie once and deletes the old record. Before you send your first message to our assistant Iris, you see the selected car in the chat window and can remove it for the chat. If you leave it, its name and catalogue identifiers go to the artificial intelligence provider with every message in that conversation; if you change the car selection on the website in the meantime, no car is sent any more (details on the Processing of personal data page).

We measure traffic with Google Analytics 4 and use a Google Ads conversion tag. Both only after you have decided in the banner: until you decide, not a single request leaves the page to anywhere but our own website.

Once you consent, a single Google script loads, googletagmanager.com/gtag/js. Consent to analytics turns on Google Analytics; consent to marketing turns on the Ads conversion tag. One category does not switch on the other — consent to analytics alone grants no advertising storage, and the other way round. Before the script is even fetched, Google is told that both advertising and analytics storage are denied; only then does the permission follow, and only by name for what we have consent to.

Only one Google script loads, but that is not the same as one connection: depending on the consent you gave, the script then exchanges data with further Google domains — with Google Analytics for traffic measurement, and with Google's advertising domains for the conversion tag. These are addresses of the same service, not additional tools and not other companies.

Google Analytics 4. Google Analytics loads only if you allow analytics cookies in the banner; allowing marketing alone isn't enough. It is there mainly for us – so we know how many people visit the site and which pages and services interest them. With every page load Google then learns your IP address (it derives your approximate location from it and, according to Google, does not store the IP address), details of your browser and device, the address and title of the page you opened (including its parameters), and the address of the page you came from. For this it stores the cookies _ga and _ga_EDWQQJP2GZ in your browser; both are valid for 400 days. Besides the page view (also when the address changes without a new page load) and how long you are active on the page, it records that you scrolled to the end of the page, clicked a link to another site, searched the site (the search term, if the address carries it), downloaded a file or played a video, and that you started filling in a form or sent it (only that fact, not what you typed in the fields; for a sent enquiry also the services selected). On the pages with a price calculation it also learns that you started or finished the calculation (for which service), tapped a tile with a service option (which service and level), started or sent an enquiry (with the service, if just one is selected) and tapped the studio's phone number; for some of these steps it also learns whether you have a car selected (only yes or no, without its name). The phone-number tap itself carries no further details about your car or about you, only what Google receives with every page. Google processes this data for us as a processor under its data processing terms. Google Analytics is, however, linked to our Google Ads account (including ad personalisation): data from the measurement that reaches Google Ads this way (for example visitor lists and conversions) is governed there by the Google Ads terms, and for that data Google is, as with the Google Ads tag, an independent controller. If you allow only analytics cookies, we tell Google that we do not permit advertising storage, the use of data about you for advertising or ad personalisation; according to Google, your measurement data is then not used to personalise ads, but it may still reach Google Ads for evaluating advertising. Without analytics cookies allowed, Google Analytics doesn't load and nothing goes to it (what happens after you withdraw consent is described under Consent to cookies below).

Google Ads. The Google Ads conversion tag loads only if you allow marketing in the banner; allowing analytics cookies alone isn't enough. By allowing marketing we also tell Google, by name, that it may store advertising data, use data about you for advertising and personalise advertising. With every page load Google then learns your IP address, details of your browser and device, the address and title of the page you opened (including its parameters), the address of the page you came from, and that you used a form on the site (only the use, not what you typed in the fields). For this it stores the cookie _gcl_au (valid for 90 days) in your browser and, if you came from a Google advert (with the gclid parameter in the address), also _gcl_aw (90 days); in your browser's storage (localStorage) it writes a record _gcl_ls, which is not a cookie. From this Google builds lists of visitors so that it can show our advert again to people who have already visited our site (remarketing). When you send an enquiry or the contact form, we report it to Google as a conversion, for an enquiry together with a random reference under which we keep it. When you tap the studio's phone number on the pages with a price calculation, we report that to Google as a conversion too. If you are signed in to a Google account in your browser, Google may link your visit to that account under its own policies. Under Google's terms for Google Ads, Google is an independent controller of this data and also processes it for its own purposes under its privacy policy. In addition, automatic enhanced conversions are switched on in our Google Ads account: when you send any form on the site (for example an enquiry, the contact form, the form in the footer, signing in to a customer account or creating one), the tag takes the e-mail you typed into the form right in your browser, turns it into a fingerprint (SHA-256) and sends it to Google together with the identifier from the _gcl_au cookie, browser details and a technical description of the field it took the e-mail from. It does not send your name, phone number or address, even if you fill them in. The fingerprint is not anonymous: according to Google, it uses it to link the sending of the form to the Google account in which you saw or clicked our advert, and so to measure whether the advert led to the form being sent. For enhanced conversions, Google is our processor under its terms (data processing terms). Google may also use its own cookies in its own domains, under its own policies. Without marketing allowed, the Google Ads tag doesn't load and nothing goes to it (what happens after you withdraw consent is described under Consent to cookies below).

Meta Pixel. The Meta Pixel is on our site mainly for us – so we know which of our campaigns on Facebook and Instagram work and which don't. The other side of the same thing: the script is Meta's and data about your visit go to Meta Platforms Ireland Limited. It loads only if you allow marketing in the banner; allowing analytics cookies alone isn't enough. With every page load Meta then learns your IP address, the address of the page you opened (including its parameters), the address of the page you came from, details of your browser and device, and the description the page itself carries. For this it stores its cookies _fbp and, if you came from an advert, _fbc in your browser; how long they stay there is set by Meta. The Pixel also stores in your browser's storage (localStorage) the domain of the site you came from, and the time; it deletes them after 90 days. If you are signed in to Facebook or Instagram in your browser, Meta may also link the visit to your account through its own cookies. It may also record a click on a button and the button's label. When you send an enquiry or the contact form, it also learns that you sent the form and, for an enquiry, which services it concerns. When you tap the studio's phone number on the pages with a price calculation, it learns that too. The Pixel also has automatic matching switched on: when you fill in any form on our site (such as an enquiry, the contact form, an order, signing in to a customer account or creating one), it may take the details it recognises in it, right in your browser – your e-mail, first name, surname, phone number, gender, date of birth, town, region, postcode and country, if the form contains them – turn them into a fingerprint (SHA-256) and send that to Meta, possibly together with an identifier the Pixel adds itself. The fingerprint is not anonymous: Meta can use it to link your visit to your Facebook or Instagram account, if you have one. From all this Meta measures whether our adverts led to an enquiry and picks who to show them to on Facebook and Instagram, including people who have already visited our site. It's one tool for both networks, not two. All of it leaves only from your browser; our server sends nothing to Meta. We are jointly responsible with Meta for collecting this data on our site and passing it to Meta (joint controller addendum); what Meta does with it afterwards is governed by its own privacy policy. You can take your marketing permission back at any time with the Cookie settings button in the footer. Unlike Google, Meta gets no instruction from us – withdrawing only means the Pixel won't load on the next page load. We don't remove it from the page you have open right now, and we cannot reach the data Meta has received by then. Without marketing allowed, the Meta Pixel doesn't load and nothing goes to Meta.

Where an enquiry came from. If you allow marketing in the banner, your browser stores in sessionStorage the page you entered the site on (without parameters) and, if you came from another site, its domain (not the full address); if the link carried utm_* parameters (for example our advert or post), also their source, medium, campaign, content and term. This lasts until you close the tab at the latest. When you then send an enquiry or a contact form message, we store the same information with it, so that we know where it came from (which site, campaign or post). We do not store the fbclid parameter, your IP address, a cookie or any other identifier of your device with the enquiry. Without marketing allowed, none of this is stored in your browser or with an enquiry or message; as with every request, however, the web server writes the requested address including its parameters into its access record, which we delete after 30 days (see Personal Data Processing). If you take the permission back, your browser deletes this information straight away.

No other measurement or advertising scripts are on the website: no Google Tag Manager, no Hotjar and no Matomo. Should we introduce further such cookies, they would load only after you have given your consent to them.

The cookies listed above, apart from Google's _ga, _ga_EDWQQJP2GZ, _gcl_au and _gcl_aw, as well as Meta's _fbp and _fbc, are technical (the information on where you came to the site from is not a cookie and is stored only with marketing consent), that is, necessary for the site to run: without them the page could not remember the language you chose, could not keep you signed in, could not watch the number of enquiries sent, could not remember an unfinished enquiry or, until the end of your visit, the car selected for calculating prices, and could not carry a conversation with the assistant. Under the applicable rules, cookies of this kind are not subject to the obligation to ask the visitor for consent, and we therefore store them always.

For the remaining categories — Assistant, functional, analytics and marketing — we ask for your consent in advance. On your first visit to the website you will therefore see a cookie banner in which you can give consent with the Accept all button, refuse it with the Reject all button, or switch on only some categories with the Settings button.

Until you decide on the Assistant category in the banner, the browser keeps the pages you view only in memory, until you reload the page or close the tab. With consent in the Assistant category, the browser stores them (sessionStorage) until you close the tab, including across reloads, so that Iris, our AI assistant, can follow on from them. If you switch the category off or choose necessary only, the browser remembers nothing, Iris offers nothing, and anything remembered is deleted immediately. None of this is sent until you write to the assistant yourself; then a visit summary (entry page, pages viewed and services added to your enquiry) goes with your first message to the artificial-intelligence provider named in the chat consent. You see the summary beforehand and can remove it. We don't use this for advertising or analytics and don't pass it to anyone for advertising.

You can change or withdraw your consent at any time — either with the Cookie settings button in the website footer, which opens the same window again, or in the cookie settings of your internet browser. When you withdraw your consent, we tell Google immediately that it may no longer store or read cookies. A script already running on the open page, though, we do not remove: until you reload or close the page, the Google tag may keep sending Google information about what you do on the site (including your IP address and browser details), only without cookies. After a fresh page load the Google tag whose consent you withdrew no longer starts. Withdrawing consent does not delete cookies that Google and Meta have already stored in your browser; you can delete them in your browser (see below). Your choice is stored in your browser. The banner will appear again when you delete the stored data of this website — and also when what the consent covers changes; then we ask again, even if you have already decided once.

This page mainly concerns cookies and other data stored in your browser; what the Meta Pixel sends to Meta from forms is described in the paragraph about it above. The same applies to the e-mail fingerprint that Google Ads receives from forms (see the paragraph on Google Ads above). If you provide us with personal data yourself — for example in an enquiry form or when setting up a customer account — its processing is governed by the separate Personal Data Processing page under Regulation (EU) 2016/679 (GDPR).

How to delete or block cookies

You can delete stored cookies, including your choice of language, at any time directly in your browser settings, usually in the privacy and site data section:

  • Chrome / Edge: Settings → Privacy and security → Cookies and other site data → See all site data and permissions, where you can look up a particular cookie and delete it.
  • Firefox: Settings → Privacy & Security → Cookies and Site Data → Manage Data.
  • Safari: in the browser settings under Privacy → Manage Website Data.

In the same browser settings you can also block the storing of cookies in advance — either for all websites, or for this website only. Please note that restricting cookies will affect how the site works: without the language cookie the page will not remember the language version you chose, without the technical cookie that keeps you signed in you will not stay signed in to your customer account and would have to sign in again, without the selected-car cookie the site will not remember your selected car, and deleting the website's stored data also removes the record of your choice in the cookie banner, so we will ask you for consent again.

Contact

The website is operated by SEVEN Works s.r.o., with its registered office at Na Vantrokách 42/8, 400 01 Ústí nad Labem, Company ID 23148217, VAT ID CZ23148217, registered under file number C 53848/KSUL, Krajský soud v Ústí nad Labem. If you have any questions about cookies, contact us by e-mail at info@sevenworks.cz or by telephone at +420 739 374 074.