Legal document

Privacy Policy

This is an informative translation; the Czech version is legally binding.

Who is the data controller

The controller of the personal data you entrust to us in an enquiry, in your customer account or in a chat with our AI assistant is SEVEN Works s.r.o., registered office Na Vantrokách 42/8, 400 01 Ústí nad Labem, Company ID 23148217, VAT ID CZ23148217, registered in the Commercial Register under file number C 53848/KSUL, Krajský soud v Ústí nad Labem. You can reach us by e-mail at info@sevenworks.cz, by phone on +420 739 374 074 or via WhatsApp. The processing is governed by EU Regulation 2016/679 (the General Data Protection Regulation, GDPR) and by the related Czech legislation.

What data we process and where we get it

We obtain the data directly from you: from the enquiry form, from the customer account you may set up with us, from messages you send us via WhatsApp, and from your chat with our AI assistant, if you use it.

From the enquiry form:

  • your first name and surname,
  • your e-mail address or phone number — at least one of these is required, the other is optional,
  • the make, model and year of manufacture of your vehicle,
  • a description of what you need,
  • if you give them: where you drive the vehicle (city, motorway, gravel and unpaved roads — you may select more than one) and how long you plan to keep it (up to 1 year / 1–3 years / 3–5 years / more than 5 years / not sure yet),
  • photographs or other attachments relating to your vehicle, if you attach them to the enquiry,
  • where applicable, information about the service page you came to the form from.

If you do not finish the form, the site may temporarily save it as a draft so that you do not lose the unfinished text when you return to the page; the data saved is the same as above, except for photographs and attachments.

The form also contains a hidden field that serves as protection against automated spam enquiries; when a person fills in the form in the ordinary way, it stays empty and carries no personal data.

From the customer account: the details you enter when registering and managing the account, and the status of the account (for example, whether it is active or suspended).

When you write to us via WhatsApp: your phone number, the name from your WhatsApp profile (if you have one set), the content of your messages and any attachments (such as photographs) you send us.

When you write to Iris, our AI assistant: your questions in the chat are answered by artificial intelligence, not by a person. We process:

  • the content of your messages and of her replies, that is, the conversation history,
  • a record that you consented to the chat, when you did so and to which version of the consent,
  • if you are signed in, the link between the conversation and your customer account. The she may then read the details from your account that you ask about, for example the vehicles in your garage and their care plan,
  • technical data about the conversation (time, length, whether the reply went through) and a fingerprint of your IP address and browser. We do not store your IP address or browser details in readable form. We store only a one-way fingerprint that helps protect the chat against misuse,
  • a summary of the pages you viewed during your visit, unless you remove it before sending: it is created in your browser, is sent to us only together with your first message to the assistant, you see it beforehand and can remove it, and it is not stored in the conversation history.

So that Iris can really help you, the browser remembers which pages of the site you view and for how long, that you selected text on them (not which text), whether you clicked through to the enquiry, contact or phone, which services you added to your enquiry and whether you came from a search engine or another website; the assistant offers help accordingly. Until you decide on the Assistant category, the browser keeps this only until the page is reloaded; with your consent, until you close the tab (details on the cookies page). We don't use this for advertising or analytics, and nothing is sent until you write to the assistant yourself. With your first message, a visit summary (entry page, pages viewed and services added to your enquiry) then goes to the artificial-intelligence provider that writes the reply (see Artificial-intelligence providers below); you see the summary beforehand and can remove it. We don't pass it to anyone for advertising. If you switch off the Assistant category in the cookie settings, choose necessary only, or answer No to the question in the assistant window, the browser remembers nothing, immediately forgets what it had remembered, Iris offers nothing and no summary is sent.

Please do not enter payment details, passwords or sensitive personal data (such as health information or national ID numbers) in the chat. Iris does not ask for them, but whatever you type in the chat is stored as you wrote it.

Improving the assistant: once a day, artificial intelligence (with the same providers as the chat) reviews questions the assistant could not find an answer to in our materials, and drafts a general question and answer from them for the assistant's materials. Only the text of the question goes to the AI, without your name or account.

Rephrasing the text of an enquiry: when you ask the enquiry form to rephrase text, the AI processes the passage you selected yourself. The feature is available only with your chat consent, and the text goes to the same providers as your chat questions.

Technically: when you visit our site it stores a cookie that remembers the language you have chosen, and, if you sign in to a customer account, a cookie necessary to keep you signed in. When an enquiry form is submitted, a third, technically necessary cookie is added: a random number signed with our key, valid for seven days, whose sole purpose is to count how many enquiries are sent from one browser, so that the form cannot be misused for bulk mailing. It carries no information about you and is not read for any other purpose. When you open the AI assistant, the site also stores a cookie with a random chat-session identifier, valid for 24 hours. While you are not signed in, it keeps your conversation and consent linked to your browser for that time; once it expires, the assistant will ask for your consent again and earlier conversations are no longer linked to your browser. The full list of cookies, including the one for a draft enquiry, is on the cookies page. We measure traffic with Google Analytics 4 and use a Google Ads conversion tag. Both start only after you give consent in the cookie bar; without consent neither runs. Which pages you have viewed is remembered by the site only for the assistant and is not sent anywhere until you write to the assistant yourself; we do not use it for advertising or analytics.

Why we process the data

  • To deal with your enquiry and agree the job with you, whether you send it through the form or via WhatsApp — without your contact details, information about your vehicle and a description of what you need, we cannot reply to you or plan the work. Details about your vehicle, your answers to the optional questions and photographs of the vehicle help us assess the enquiry and recommend a suitable solution, and we handle them in the same way as the other data from the enquiry — see the sections on recipients and retention below.
  • To hold your unfinished enquiry for you — if you do not finish the form, the saved draft serves only so that you do not lose the text; we do not use it for anything else.
  • So that our AI assistant can answer you, and only with your consent. Before you first write to the assistant, we ask for your consent. Without it, neither the chat nor text rephrasing works. The same consent is also the basis for transferring your chat questions and the text for rephrasing outside the EU (see below). Consent is voluntary: you can send an enquiry without the assistant, through the form, by e-mail or by phone.
  • To perform the contract we have entered into — to carry out the service you ordered, arrange an appointment and deal with any complaint. When taking in your vehicle, working on it, preparing a quote and handing the vehicle back, we may use artificial-intelligence tools, for example to read the details from the vehicle registration certificate, to mark visible defects in photographs of the vehicle, to check photographs of the finished work, to suggest quote items, to draw up a care plan for the vehicle or to summarise a conversation with our workshop's voice assistant. Our workshop is also helped by an assistant that may read details from our job records to answer a question. Such a tool receives only the data needed for the task in question (photographs of the vehicle, details from the registration certificate including the holder's name and address, details of the job and, for the workshop assistant, also your name, contact details and other details from our records, such as your vehicles, jobs, invoices, complaints and the messages you have exchanged with our workshop). These tools may also run with a provider that processes data outside the EU (see Transfers outside the EU). The result serves as input for our work and makes no decision about you.
  • To assess photographs of your vehicle that you send us from the garage in your customer account. When you ask for an assessment, artificial intelligence prepares a draft assessment from the photographs and your note on them. You will see it in your account straight away, marked as an AI draft. Here too, the AI result makes no decision about you; if something in it doesn't look right, write to us.
  • To deal with the questions and requests you bring to us. Our staff may have artificial intelligence suggest a reply; the suggestion serves them as input, and it is they who send you the reply.
  • To remind you about caring for your vehicle, and only if you agreed to it. If you agreed to receive marketing communications when your vehicle was taken in, and more than a year has passed since a service with us, we will send you a reminder e-mail about that vehicle at most once per calendar year. The text of the e-mail is drafted by artificial intelligence; for this it receives only the vehicle description (make, model, year of manufacture and registration number), the name of the service and how many months have passed since it, not your name or e-mail address. You can withdraw this consent at any time by e-mailing info@sevenworks.cz.
  • So that we can run the website and look after your customer records. When running the website, our staff may use an artificial-intelligence assistant that may read basic details from your customer account to answer their question. The result serves them as input and makes no decision about you.
  • To meet our legal obligations — typically in relation to accounting and tax documents, which we are required by law to issue and keep.
  • On the basis of legitimate interest — to keep a record of the communication and the job in case a legal claim needs to be defended or pursued, to protect the enquiry form and the chat against misuse, and to improve the assistant's materials as described above. For the same reason, artificial intelligence reviews the messages our workshop writes to its assistant (including by voice) and to you through the garage in your customer account, and picks out general working knowledge for the workshop assistant's materials. These messages may also contain details about you and your vehicle; the AI is instructed to take from them only general knowledge, without names, companies, phone numbers, e-mail addresses, registration numbers or addresses.

We do not use the data from the form, from your account, from your messages or from the chat for any purpose other than the one for which you gave it to us, except for improving the assistants' materials and the vehicle-care reminders described above.

Who we pass the data on to

We pass personal data on only to the extent necessary for us to operate and to deal with your enquiry or job:

  • to an external supplier, where one runs our website, our e-mail communication or our accounting for us,
  • to a contractual partner, where part of the job you ordered is carried out by them rather than by us,
  • to artificial-intelligence providers, for the artificial-intelligence tasks listed below,
  • to Google, if you have given consent to traffic measurement or to marketing (Google Analytics 4, the Google Ads conversion tag); without consent nothing is passed on.

These parties process the data only to the extent required for the service in question. Otherwise we do not pass the data on or sell it to anyone else, except where the law requires us to do so (for example, to public authorities).

Artificial-intelligence providers. For processing data in artificial-intelligence tasks, we use the following providers:

  • Anthropic (the Claude model; the contracting party is Anthropic Ireland, Limited, registered in Ireland, though processing may also take place outside the European Economic Area, including in the USA). It may handle the tasks listed below.
  • Google (the Vertex AI service), with processing in a data centre in the EU. It searches our studio's materials for information relevant to your question; for this it receives only a short search phrase that the assistant builds from your question, not the whole conversation or the visit summary. It may also handle any of the tasks listed below, and receives the same data for it as Anthropic. Only Google runs our workshop's voice assistant: it receives the voice of our staff member and the details from our records that the assistant reads during the conversation (for example jobs, enquiries, complaints and the calendar), including your name and contact details.

Whichever of them handles a task receives only the data needed for the task in question:

  • AI assistant and text rephrasing: your question with the earlier conversation, the visit summary unless you removed it before sending, any details from your account that the assistant read to answer, or the text you selected for rephrasing.
  • Improving the assistant's materials: the text of a question the assistant could not find an answer to in our materials, without your name or account.
  • AI tools that help us with your job (for example reading the vehicle registration certificate, marking defects in photographs of the vehicle, checking photographs of the finished work, suggesting quote items and prices, a care plan for the vehicle, a summary of a conversation with the workshop's voice assistant, and the assistant that helps our workshop): photographs of the vehicle, details from the registration certificate including the holder's name and address and the VIN, details of the job and the vehicle (for example quote items and prices, services carried out, the registration number), the text of your enquiry, our notes about you and the job, for the workshop's voice assistant a transcript of the conversation with it and, for the assistant that helps our workshop, also your name, contact details, your vehicles, jobs, invoices, complaints and the messages you have exchanged with our workshop, from our records.
  • Assessing photographs from your garage: the photographs of the vehicle you sent for assessment and your note on them.
  • Vehicle-care reminders: the vehicle description including the registration number, the name of the service and how many months have passed since it, without your name or e-mail address.
  • Replies to your questions and requests: the text of the request and the communication about it so far, your name and e-mail address and, where relevant, the number, status and amount of the order the request concerns.
  • Knowledge from our workshop's work: messages our workshop wrote to its assistant (including by voice) and to you through the garage in your account; these may also contain details about you and your vehicle.
  • Running the website: data that our staff enter into an AI tool while running the website, and details from your customer account that the tool reads to answer their question: name, e-mail address, phone number, company name, language, the dates of registration, last sign-in and any account deletion, and the number of draft orders.

Which of them handles a task is decided by our settings and by service availability, not by you. If neither can handle it, the task is not carried out and your data goes nowhere.

If you ask, the assistant can hand the conversation over to a person on our team: it sends us an e-mail with your name, e-mail address and a brief reason. If you describe a technical issue with the website to it, it creates a record of it (description, page, and a screenshot if you upload one) and e-mails it to us. We handle such a record the same way as any other communication with us.

If you write to us via WhatsApp, data about that communication is also processed by WhatsApp Ireland Limited (part of the Meta group), which provides the service to users in the EU, under its own terms and privacy policy. The WhatsApp button on our site is an ordinary link to WhatsApp. Our site loads no WhatsApp script and passes nothing about your visit to it, not even the address of the page you came from. WhatsApp receives data from you only once you use the link. If you would rather not use WhatsApp, e-mail or call us.

Transfers outside the EU

The contracting party for the Anthropic service is Anthropic Ireland, Limited (Ireland, EU); processing within the Anthropic group may nonetheless take place outside the European Economic Area, including in the USA.

Chat and text rephrasing. If it processes your chat question or the text you ask us to rephrase, your data may be transferred outside the European Economic Area, including to the USA. Before you first use the assistant or text rephrasing, we ask for your explicit consent to this processing and transfer. Please be aware of the risks involved: your data there may not have the same protection as in the EU, it may be accessed by the authorities there, and your options for challenging that may be more limited than in the EU. If you do not agree to this, please do not use the assistant or text rephrasing. We will deal with your enquiry just as well through the form, by e-mail or by phone.

Other AI tasks. If Anthropic handles another artificial-intelligence task described in the sections Why we process the data and Who we pass the data on to — an AI tool for your job, improving the assistant's materials, assessing photographs from your garage, a vehicle-care reminder, a reply to your question or request, knowledge from our workshop's work or running the website — your data may in this case too be transferred outside the European Economic Area, including to the USA. We do not ask for your consent to the transfer for these tasks, and this transfer is not based on consent. We use the Anthropic service under its commercial terms, which include the data processing addendum, into which the standard contractual clauses adopted by the European Commission are incorporated. We will send you a copy of these safeguards if you ask for it by e-mail at info@sevenworks.cz.

How long we keep the data

We keep personal data only for as long as is necessary for the purpose for which we obtained it — for the time it takes to deal with the enquiry, and for the duration of the job or of the customer account. For accounting and tax documents we follow the retention periods laid down by law. We keep the draft of an unfinished enquiry for at most seven days from the last time it was saved; it is deleted when the enquiry is submitted or via the Start over button.

Conversations with the AI assistant are deleted automatically 180 days after the last message. Technical records of them and of searches in our materials, including the text of the question, no later than 180 days after they were created. After 180 days we strip records of individual AI calls in the chat of the question fingerprint, of any error text and of any link to you; only operational data remain: the task, the provider, the model, the prompt version, the time, the response time, the status, the token counts and the price. Records for the daily chat limit (your account identifier or, for chat without signing in, a fingerprint of the IP address or, when we do not know the IP address, the random identifier of the browser session, the time and the price of the reply, without any conversation content) are deleted after 2 days. We keep the record of your chat consent for as long as we need to be able to show that we had it; it is deleted when you withdraw consent or your account is erased.

Your rights

As a data subject you have the right:

  • to access the personal data we process about you,
  • to have inaccurate or incomplete data corrected,
  • to have data erased where there is no reason for further processing,
  • to have processing restricted,
  • to data portability to another controller, in respect of data we process by automated means on the basis of a contract,
  • to object to processing based on legitimate interest,
  • to withdraw your chat consent at any time, using the button in the assistant window (see below).

Withdrawing your chat consent: use the Withdraw consent button in the assistant window. After you withdraw consent, we delete your conversations with the assistant and the consent record: if you are signed in, all conversations on your account and also the conversations you had in this browser without signing in during the current chat session; if not, the conversations from the current chat session in this browser (a session lasts 24 hours from when you first opened the assistant). Other conversations, including those from earlier sessions, delete themselves 180 days after the last message. An enquiry or a technical-issue report you sent through the assistant remains and is governed by what we say about enquiries and jobs above. If you write to the assistant again, it will first ask for your consent. Withdrawal does not affect processing carried out before it. If you have a customer account with us, you can also ask by e-mail at info@sevenworks.cz for it to be erased; together with it, we delete the conversations with the assistant held on that account. Records for the daily chat limit (without any conversation content) are not deleted by withdrawing consent or by erasing your account, so that the limit cannot be bypassed; they delete themselves after 2 days. Withdrawing your chat consent does not turn off the remembering of the pages you view; you switch that off in the cookie settings (Assistant category).

You can exercise the other rights by e-mailing info@sevenworks.cz. If you believe we are not handling your data in accordance with the law, you have the right to lodge a complaint with the Czech Data Protection Authority (Úřad pro ochranu osobních údajů).

For any other questions or requests, please contact us directly — see the contact section of the website.