We use cookies, optional ones only after consent. Without functional cookies the site remembers your selected car only until the end of your visit. See the cookie policy.

EnquiryPLATFORM

Legal document

Privacy Policy

This is an informative translation; the Czech version is legally binding.

Who is the data controller

The controller of the personal data you entrust to us in an enquiry, in your customer account or in a chat with our AI assistant is SEVEN Works s.r.o., registered office Na Vantrokách 42/8, 400 01 Ústí nad Labem, Company ID 23148217, VAT ID CZ23148217, registered in the Commercial Register under file number C 53848/KSUL, Krajský soud v Ústí nad Labem. You can reach us by e-mail at info@sevenworks.cz, by phone on +420 739 374 074 or via WhatsApp. If you have allowed marketing, we are jointly responsible with Meta Platforms Ireland Limited for the Meta Pixel collecting data on our site and passing it to Meta (see Who we pass the data on to); the essence of the arrangement is in the joint controller addendum; Meta alone is responsible for what it does with the data afterwards. The processing is governed by EU Regulation 2016/679 (the General Data Protection Regulation, GDPR) and by the related Czech legislation.

What data we process and where we get it

We obtain the data directly from you: from the enquiry and contact forms, from the customer account you may set up with us, from messages and video calls over WhatsApp, and from your chat with our AI assistant, if you use it. Every visit to the website also creates access records on the web server (see below).

From the enquiry form:

  • your first name and surname, e-mail address and phone number — these three are required,
  • if you give them: the make, model and year of manufacture of your vehicle,
  • if you give it: a description of what you need,
  • if you give them: where you drive the vehicle (city, motorway, gravel and unpaved roads — you may select more than one) and how long you plan to keep it (up to 1 year / 1–3 years / 3–5 years / more than 5 years / not sure yet),
  • photographs or other attachments relating to your vehicle, if you attach them to the enquiry,
  • where applicable, information about the service page you came to the form from,
  • if you allowed marketing in the banner, information on where you came to the site from: the page you entered the site on (without parameters) and, if you came from another site, its domain (not the full address); if the link carried utm_* parameters (for example our advert or post), also their source, medium, campaign, content and term. We do not store the fbclid parameter, your IP address, a cookie or any other identifier of your device with the enquiry. Without marketing consent, none of this is stored with the enquiry. With marketing consent we store the same information on where you came to the site from with a message you send through the contact form as well.

If you do not finish the form, the site may temporarily save it as a draft so that you do not lose the unfinished text when you return to the page; the data saved is the same as above, except for photographs, attachments and the information on where you came to the site from.

The form also contains a hidden field that serves as protection against automated spam enquiries; when a person fills in the form in the ordinary way, it stays empty and carries no personal data.

From the contact form: your name, e-mail, phone number, the subject and text of your message, the page you sent the form from (without the parameters after the question mark), the IP address the message came from and, if you are signed in, the link to your customer account; if you allowed marketing in the banner, also the information on where you came to the site from (the same as for an enquiry above). We receive the message by e-mail and you receive a confirmation. If the system judges the form to have been sent automatically (for example too quickly), we do not pass it on; we only keep it briefly, together with the reason it was rejected, so that we can recognise misuse.

From the customer account: the details you enter when registering and managing the account, and the status of the account (for example, whether it is active or suspended). When we verify your phone number: when you register an account and for certain other actions, we send you a six-digit code to confirm that the number is yours. The code arrives by SMS; when you register an account, we may send it by e-mail instead if the SMS cannot be delivered. For the verification we store the phone number (or the e-mail address, where the code goes by e-mail), the verification code, which we do not store in readable form, the IP address the request came from, the number of attempts at entering the code, and the time. Unlike in the chat records, we keep the IP address here in readable form: we need it to limit how many messages are sent from one place.

When you join a WhatsApp video call with us: your phone number, your WhatsApp profile name (if you have one set), the date and length of the call, and the live video and audio for its duration — that is, whatever you show and tell us: the car, its registration plate, where you are parked, and anyone who walks into the frame. You hold the camera. We do not record the call and we take no screenshots or photographs of it; anything we need to make a note of, we add to your enquiry as written text and handle it exactly as we handle an enquiry sent through the form.

When you write to us via WhatsApp: your phone number, the name from your WhatsApp profile (if you have one set), the content of your messages and any attachments (such as photographs) you send us.

When you write to Iris, our AI assistant: your questions in the chat are answered by artificial intelligence, not by a person. We process:

  • the content of your messages and of her replies, that is, the conversation history,
  • a record that you consented to the chat, when you did so and to which version of the consent,
  • if you are signed in, the link between the conversation and your customer account. The assistant may then read the details from your account that you ask about, for example the vehicles in your garage and their care plan,
  • technical data about the conversation (time, length, whether the reply went through and whether a car selected on the website was attached to the message: only yes or no, without its name or identifiers) and a fingerprint of your IP address and browser. We do not store your IP address or browser details in readable form in the chat records; we store only a one-way fingerprint that helps protect the chat against misuse. In the web server's access records (see below) they are kept in readable form, as for every request to the website,
  • if you selected a car on the website for calculating prices and did not remove it in the assistant window, its name and identifiers from our car catalogue. When the assistant uses it to calculate prices, the data from which it put the price list together (the car's identifiers, its name and the prices) is stored with the conversation; if the assistant names the car in its reply, that name is stored as well,
  • a summary of the pages you viewed during your visit, unless you remove it before sending: it is created in your browser, is sent to us only together with your first message to the assistant, you see it beforehand and can remove it, and it is not stored in the conversation history.

So that Iris can really help you, the browser remembers which pages of the site you view and for how long, that you selected text on them (not which text), whether you clicked through to the enquiry, contact or phone, which services you added to your enquiry and whether you came from a search engine or another website; the assistant offers help accordingly. Until you decide on the Assistant category, the browser keeps this only until the page is reloaded; with your consent, until you close the tab (details on the cookies page). We don't use this for advertising or analytics, and nothing is sent until you write to the assistant yourself. With your first message, a visit summary (entry page, pages viewed and services added to your enquiry) then goes to the artificial-intelligence provider that writes the reply (see Artificial-intelligence providers below); you see the summary beforehand and can remove it. We don't pass it to anyone for advertising. If you switch off the Assistant category in the cookie settings, choose necessary only, or answer No to the question in the assistant window, the browser remembers nothing, immediately forgets what it had remembered, Iris offers nothing and no summary is sent.

Please do not enter payment details, passwords or sensitive personal data (such as health information or national ID numbers) in the chat. Iris does not ask for them, but whatever you type in the chat is stored as you wrote it.

Improving the assistant: once a day, artificial intelligence (with the same providers as the chat) reviews questions the assistant could not find an answer to in our materials, and drafts a general question and answer from them for the assistant's materials. Only the text of the question goes to the AI, without your name or account.

Rephrasing the text of an enquiry: when you ask the enquiry form to rephrase text, the AI processes the passage you selected yourself. The feature is available only with your chat consent, and the text goes to the same providers as your chat questions.

Technically: when you visit our site it stores a cookie that remembers the language you have chosen, and, if you sign in to a customer account, a cookie necessary to keep you signed in. When an enquiry form is submitted, a third, technically necessary cookie is added: a random number signed with our key, valid for seven days, whose sole purpose is to count how many enquiries are sent from one browser, so that the form cannot be misused for bulk mailing. It carries no information about you and is not read for any other purpose. When you open the AI assistant, the site also stores a cookie with a random chat-session identifier, valid for 24 hours. While you are not signed in, it keeps your conversation and consent linked to your browser for that time; once it expires, the assistant will ask for your consent again and earlier conversations are no longer linked to your browser. If you select a car for calculating prices, the site stores a cookie with its identifiers from our catalogue: without further consent until you close your browser, with consent to functional cookies for 90 days. The full list of cookies, including the one for a draft enquiry, is on the cookies page. We measure traffic with Google Analytics 4 and use a Google Ads conversion tag. Both start only after you give consent in the cookie bar (Google Analytics with your consent to analytics cookies, Google Ads with your consent to marketing); without consent neither runs. What goes to them is described in Who we pass the data on to and on the cookies page. With marketing consent, Google Ads also receives a fingerprint of your e-mail from forms on the site. The summary of pages you have viewed for the assistant is kept only by your browser and is not sent anywhere until you write to the assistant yourself; we do not use it for advertising or analytics. With marketing consent, your browser also remembers where you came to the site from until you close the tab (see above and the cookies page). The Meta Pixel also writes the domain of the site you came from, and the time, into your browser's storage and deletes them after 90 days; the Google Ads tag stores a _gcl_ls record there (see the cookies page). Separately, the web server writes every request into its access record (see below).

Web server access records. With every request to our website, including loading a page, the web server writes into its access record the IP address the request came from, the time, the requested address including its parameters, the result of the request, the address of the page you came from (if your browser sends it) and details of your browser. It does this for every visitor, signed in or not. This is a normal part of running a web server, not a cookie, so no consent is asked for it. The records serve to keep the website running and secure and to trace errors.

Why we process the data

  • To deal with your enquiry and agree the job with you, whether you send it through the form or via WhatsApp — without your name, e-mail address and phone number, we cannot reply to you or plan the work. Details about your vehicle, a description of what you need, your answers to the optional questions and photographs of the vehicle help us assess the enquiry and recommend a suitable solution, and we handle them in the same way as the other data from the enquiry — see the sections on recipients and retention below.
  • To hold your unfinished enquiry for you — if you do not finish the form, the saved draft serves only so that you do not lose the text; we do not use it for anything else.
  • So that our AI assistant can answer you, and only with your consent. Before you first write to the assistant, we ask for your consent. Without it, neither the chat nor text rephrasing works. The same consent is also the basis for transferring your chat questions and the text for rephrasing outside the EU (see below). Consent is voluntary: you can send an enquiry without the assistant, through the form, by e-mail or by phone.
  • To perform the contract we have entered into — to carry out the service you ordered, arrange an appointment and deal with any complaint. When taking in your vehicle, working on it, preparing a quote and handing the vehicle back, we may use artificial-intelligence tools, for example to read the details from the vehicle registration certificate, to mark visible defects in photographs of the vehicle, to check photographs of the finished work, to suggest quote items, to draw up a care plan for the vehicle or to summarise a conversation with our workshop's voice assistant. Our workshop is also helped by an assistant that may read details from our job records to answer a question. Such a tool receives only the data needed for the task in question (photographs of the vehicle, details from the registration certificate including the holder's name and address, details of the job and, for the workshop assistant, also your name, contact details and other details from our records, such as your vehicles, jobs, invoices, complaints and the messages you have exchanged with our workshop). These tools may also run with a provider that processes data outside the EU (see Transfers outside the EU). The result serves as input for our work and makes no decision about you.
  • To assess photographs of your vehicle that you send us from the garage in your customer account. When you ask for an assessment, artificial intelligence prepares a draft assessment from the photographs and your note on them. You will see it in your account straight away, marked as an AI draft. Here too, the AI result makes no decision about you; if something in it doesn't look right, write to us.
  • To deal with the questions and requests you bring to us. Our staff may have artificial intelligence suggest a reply; the suggestion serves them as input, and it is they who send you the reply.
  • To remind you about caring for your vehicle, and only if you agreed to it. If you agreed to receive marketing communications when your vehicle was taken in, and more than a year has passed since a service with us, we will send you a reminder e-mail about that vehicle at most once per calendar year. The text of the e-mail is drafted by artificial intelligence; for this it receives only the vehicle description (make, model, year of manufacture and registration number), the name of the service and how many months have passed since it, not your name or e-mail address. You can withdraw this consent at any time by e-mailing info@sevenworks.cz.
  • So that we can run the website and look after your customer records. When running the website, our staff may use an artificial-intelligence assistant that may read basic details from your customer account to answer their question. The result serves them as input and makes no decision about you.
  • To measure and target our advertising on Facebook and Instagram, only with your consent (the marketing category in the cookie banner). What Meta receives for this is described under Who we pass the data on to; you can withdraw consent at any time with the Cookie settings button in the footer.
  • To measure traffic on our website, only with your consent (the analytics cookies category in the cookie banner). Google Analytics 4 shows us how many people visit the site, which pages and services interest them and how many go on to send an enquiry. What Google receives for this is described under Who we pass the data on to; you can withdraw consent at any time with the Cookie settings button in the footer.
  • To measure and target our advertising in Google, including showing our adverts again to people who have already visited our site (remarketing), only with your consent (the marketing category in the cookie banner). What Google Ads receives for this is described under Who we pass the data on to; you can withdraw consent at any time with the Cookie settings button in the footer. When you send an enquiry or the contact form, the site reports it to Google Ads as a conversion, so that we can see which adverts lead to enquiries. On the pages with a price calculation, the site also reports to Google Ads as a conversion the fact that you tapped the studio's phone number. To measure whether an advert led to a form being sent, Google Ads also uses a fingerprint of the e-mail from the form.
  • To know where an enquiry or a contact form message came from (which site, campaign or post), only with your consent (the marketing category in the cookie banner). From the information on where you came to the site from, we work out what enquiries cost us for each service and what contact form messages cost us. We read advertising spend from our advertising account with Meta; that is not personal data. Consent is voluntary, the enquiry and the contact form work the same without it, and you can withdraw it at any time with the Cookie settings button in the footer.
  • To meet our legal obligations — typically in relation to accounting and tax documents, which we are required by law to issue and keep.
  • On the basis of legitimate interest — to keep a record of the communication and the job in case a legal claim needs to be defended or pursued, to protect the enquiry and contact forms and the chat against misuse (for the contact form this is what the IP address and the record of rejected attempts are for), to keep the website running and secure and to trace errors (web server access records), and to improve the assistant's materials as described above. For the same reason, artificial intelligence reviews the messages our workshop writes to its assistant (including by voice) and to you through the garage in your customer account, and picks out general working knowledge for the workshop assistant's materials. These messages may also contain details about you and your vehicle; the AI is instructed to take from them only general knowledge, without names, companies, phone numbers, e-mail addresses, registration numbers or addresses.

We do not use the data from the form, from your account, from your messages or from the chat for any purpose other than the one for which you gave it to us, except for improving the assistants' materials and the vehicle-care reminders described above. With marketing consent we also use the information on where you came to the site from to work out what an enquiry or a message cost us. If you have allowed marketing, the Meta Pixel also sends Meta, straight from your browser, a fingerprint of the details from forms on the site, the fact that an enquiry or the contact form was sent, for an enquiry the services selected and, on the pages with a price calculation, the fact that you tapped the studio's phone number; these are used to measure and target advertising (see Who we pass the data on to). With marketing consent, Google Ads also learns that an enquiry or the contact form was sent and, on the pages with a price calculation, that you tapped the studio's phone number. If you have allowed marketing, a fingerprint of the e-mail from forms on the site also goes, straight from your browser, to Google (Google Ads); it is used to measure advertising (see Who we pass the data on to).

Who we pass the data on to

We pass personal data on only to the extent necessary for us to operate and to deal with your enquiry or job, and also where you have given your consent to it:

  • to an external supplier, where one runs our website, our e-mail communication or our accounting for us,
  • to the provider of the SMS delivery service, when we send you a verification code; they receive your phone number and the text of the message,
  • to a contractual partner, where part of the job you ordered is carried out by them rather than by us,
  • to artificial-intelligence providers, for the artificial-intelligence tasks listed below,
  • to Google Ireland Limited, if you have allowed analytics cookies (Google Analytics 4): your IP address (Google derives your approximate location from it and, according to Google, does not store the IP address), details of your browser and device, the address and title of the page you opened (including its parameters), the address of the page you came from, identifiers from the _ga and _ga_EDWQQJP2GZ cookies, and what you do on the site: that you opened a page (also when the address changes without a new page load) and how long you were active on it, that you scrolled to its end, clicked a link to another site, searched the site (the search term, if the address carries it), downloaded a file or played a video, and that you started filling in a form or sent it (only that fact, not what you typed in the fields; for a sent enquiry also the services selected); on the pages with a price calculation also that you started or finished the calculation (for which service), tapped a tile with a service option (which service and level), started or sent an enquiry (with the service, if just one is selected) and tapped the studio's phone number, and for some of these steps also whether you have a car selected (only yes or no, without its name). This shows us how many people visit the site and which pages and services interest them. Google processes this data for us as a processor under its data processing terms. Google Analytics is, however, linked to our Google Ads account (including ad personalisation): data from the measurement that reaches Google Ads this way (for example visitor lists and conversions) is governed there by the Google Ads terms, and for that data Google is, as with the Google Ads tag, an independent controller. If you allow only analytics cookies, we tell Google that we do not permit advertising storage, the use of data about you for advertising or ad personalisation; according to Google, your measurement data is then not used to personalise ads, but it may still reach Google Ads for evaluating advertising. Details are on the cookies page. Without analytics cookies allowed, Google Analytics doesn't load and nothing goes to it; you can take that permission back at any time (what then happens to a page you have open is described on the cookies page).
  • to Google Ireland Limited, if you have allowed marketing (the Google Ads conversion tag): your IP address, details of your browser and device, the address and title of the page you opened (including its parameters), the address of the page you came from, identifiers from the _gcl_au cookie and, if you came from a Google advert, _gcl_aw, that you used a form on the site (only the use, not what you typed in the fields), and also that you sent an enquiry or the contact form (for an enquiry, together with a random reference under which we keep it) and that you tapped the studio's phone number on the pages with a price calculation. This shows us which of our adverts in Google work, and Google can use it to show our advert again to people who have already visited our site (remarketing). If you are signed in to a Google account in your browser, Google may link your visit to that account under its own policies. Under Google's terms for Google Ads, Google is an independent controller of this data: it also processes it for its own purposes under its privacy policy. In addition, automatic enhanced conversions are switched on in our Google Ads account: when you send any form on the site (for example an enquiry, the contact form, the form in the footer, signing in to a customer account or creating one), a fingerprint (SHA-256) of the e-mail you typed into the form goes from your browser to Google, together with the identifier from the _gcl_au cookie, browser details and a technical description of the field it was taken from. Your name, phone number and address do not go, even if you fill them in. The fingerprint is not anonymous: according to Google, it uses it to link the sending of the form to the Google account in which you saw or clicked our advert. For enhanced conversions, Google is our processor under its terms (data processing terms). Details are on the cookies page. Without marketing allowed, the Google Ads tag doesn't load and nothing goes to it; you can take that permission back at any time (what then happens to a page you have open is described on the cookies page).
  • to Meta Platforms Ireland Limited, if you have allowed marketing (the Meta Pixel): your IP address, the address of the page you opened (including its parameters), the address of the page you came from, details of your browser and device, the description of the page, identifiers from the _fbp and _fbc cookies, possibly clicks on buttons, the fact that you sent an enquiry or the contact form (for an enquiry, also which services it concerns), the fact that you tapped the studio's phone number on the pages with a price calculation, and a fingerprint (SHA-256) of the details the Pixel recognises in any form on the site (this may include signing in to a customer account or creating one): e-mail, name, surname, phone number, gender, date of birth, town, region, postcode and country, if the form contains them, possibly with an identifier the Pixel adds itself. Meta can use the fingerprint, or its own cookies if you are signed in to Facebook or Instagram in your browser, to link your visit to your account. This shows us which of our campaigns work, and Meta uses it to pick who to show our adverts to, including people who have already visited our site. Details are on the cookies page. Without marketing allowed the Pixel doesn't load and nothing goes to Meta; you can take that permission back at any time.

These parties process the data only to the extent required for the service in question. The exceptions are Meta, which also processes the data from the Pixel for its own purposes under its own policy, and Google for the Google Ads tag and for the Google Analytics data that reaches Google Ads through the link; Google also processes that data for its own purposes under its privacy policy. Otherwise we do not pass the data on or sell it to anyone else, except where the law requires us to do so (for example, to public authorities).

Artificial-intelligence providers. For processing data in artificial-intelligence tasks, we use the following providers:

  • Anthropic (the Claude model; the contracting party is Anthropic Ireland, Limited, registered in Ireland, though processing may also take place outside the European Economic Area, including in the USA). It may handle the tasks listed below.
  • Google (the Vertex AI service), with processing in a data centre in the EU. It searches our studio's materials for information relevant to your question; for this it receives only a short search phrase that the assistant builds from your question, not the whole conversation or the visit summary. It may also handle any of the tasks listed below, and receives the same data for it as Anthropic. Only Google runs our workshop's voice assistant: it receives the voice of our staff member and the details from our records that the assistant reads during the conversation (for example jobs, enquiries, complaints and the calendar), including your name and contact details.

Whichever of them handles a task receives only the data needed for the task in question:

  • AI assistant and text rephrasing: your question with the earlier conversation, the visit summary unless you removed it before sending, for the assistant also the car selected on the website unless you removed it (its name and identifiers from our car catalogue), any details from your account that the assistant read to answer, or the text you selected for rephrasing.
  • Improving the assistant's materials: the text of a question the assistant could not find an answer to in our materials, without your name or account.
  • AI tools that help us with your job (for example reading the vehicle registration certificate, marking defects in photographs of the vehicle, checking photographs of the finished work, suggesting quote items and prices, a care plan for the vehicle, a summary of a conversation with the workshop's voice assistant, and the assistant that helps our workshop): photographs of the vehicle, details from the registration certificate including the holder's name and address and the VIN, details of the job and the vehicle (for example quote items and prices, services carried out, the registration number), the text of your enquiry, our notes about you and the job, for the workshop's voice assistant a transcript of the conversation with it and, for the assistant that helps our workshop, also your name, contact details, your vehicles, jobs, invoices, complaints and the messages you have exchanged with our workshop, from our records.
  • Assessing photographs from your garage: the photographs of the vehicle you sent for assessment and your note on them.
  • Vehicle-care reminders: the vehicle description including the registration number, the name of the service and how many months have passed since it, without your name or e-mail address.
  • Replies to your questions and requests: the text of the request and the communication about it so far, your name and e-mail address and, where relevant, the number, status and amount of the order the request concerns.
  • Knowledge from our workshop's work: messages our workshop wrote to its assistant (including by voice) and to you through the garage in your account; these may also contain details about you and your vehicle.
  • Running the website: data that our staff enter into an AI tool while running the website, and details from your customer account that the tool reads to answer their question: name, e-mail address, phone number, company name, language, the dates of registration, last sign-in and any account deletion, and the number of draft orders.

Which of them handles a task is decided by our settings and by service availability, not by you. If neither can handle it, the task is not carried out and your data goes nowhere.

If you ask, the assistant can hand the conversation over to a person on our team: it sends us an e-mail with your name, e-mail address and a brief reason. If you describe a technical issue with the website to it, it creates a record of it (description, page, and a screenshot if you upload one) and e-mails it to us. We handle such a record the same way as any other communication with us.

If you write to us, call us or video-call us via WhatsApp, data about that communication is also processed by WhatsApp Ireland Limited (part of the Meta group), which provides the service to users in the EU, under its own terms and privacy policy. The WhatsApp button on our site is an ordinary link to WhatsApp. Our site loads no WhatsApp script and passes nothing about your visit to it, not even the address of the page you came from. (The Meta Pixel, which loads only if you allow marketing, is a different matter; see Who we pass the data on to.) WhatsApp receives data from you only once you use the link. If you would rather not use WhatsApp, e-mail or call us.

Transfers outside the EU

The contracting party for the Anthropic service is Anthropic Ireland, Limited (Ireland, EU); processing within the Anthropic group may nonetheless take place outside the European Economic Area, including in the USA.

Chat and text rephrasing. If it processes your chat question or the text you ask us to rephrase, your data may be transferred outside the European Economic Area, including to the USA. Before you first use the assistant or text rephrasing, we ask for your explicit consent to this processing and transfer. Please be aware of the risks involved: your data there may not have the same protection as in the EU, it may be accessed by the authorities there, and your options for challenging that may be more limited than in the EU. If you do not agree to this, please do not use the assistant or text rephrasing. We will deal with your enquiry just as well through the form, by e-mail or by phone.

Other AI tasks. If Anthropic handles another artificial-intelligence task described in the sections Why we process the data and Who we pass the data on to — an AI tool for your job, improving the assistant's materials, assessing photographs from your garage, a vehicle-care reminder, a reply to your question or request, knowledge from our workshop's work or running the website — your data may in this case too be transferred outside the European Economic Area, including to the USA. We do not ask for your consent to the transfer for these tasks, and this transfer is not based on consent. We use the Anthropic service under its commercial terms, which include the data processing addendum, into which the standard contractual clauses adopted by the European Commission are incorporated. We will send you a copy of these safeguards if you ask for it by e-mail at info@sevenworks.cz.

Meta Pixel. If you allow marketing, Meta may also process the data that the Pixel sends to it in places outside the European Economic Area, including in the USA; on what basis and how it protects them there is set out in its own privacy policy.

Google. If you allow analytics cookies or marketing, Google may also process the data that the tags send to it outside the European Economic Area, including in the USA. Google states that its company Google LLC adheres to the EU–U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision; where the framework does not apply, Google relies on standard contractual clauses. Details are in its privacy policy and its data processing terms.

How long we keep the data

We keep personal data only for as long as is necessary for the purpose for which we obtained it — for the time it takes to deal with the enquiry, and for the duration of the job or of the customer account. For accounting and tax documents we follow the retention periods laid down by law. We keep the draft of an unfinished enquiry for at most seven days from the last time it was saved; it is deleted when the enquiry is submitted or via the Start over button. We keep messages from the contact form for 24 months from sending and then delete them automatically; we delete the IP address stored with them after 30 days. Attempts the system rejected as automatic are deleted entirely after 30 days. We archive the web server's access records once a day and delete archives older than 30 days. Records from before 6 October 2026, when we set this period, are being deleted in this way step by step; by mid-November 2026 none older than 30 days will remain on the server.

Conversations with the AI assistant are deleted automatically 180 days after the last message. Technical records of them and of searches in our materials, including the text of the question, no later than 180 days after they were created. After 180 days we strip records of individual AI calls in the chat of the question fingerprint, of any error text and of any link to you; only operational data remain: the task, the provider, the model, the prompt version, the time, the response time, the status, the token counts and the price. Records for the daily chat limit (your account identifier or, for chat without signing in, a fingerprint of the IP address or, when we do not know the IP address, the random identifier of the browser session, the time and the price of the reply, without any conversation content) are deleted after 2 days. We keep the record of your chat consent for as long as we need to be able to show that we had it; it is deleted when you withdraw consent or your account is erased.

We keep the information on where you came to the site from only together with the enquiry or contact form message it belongs to and delete it when that enquiry or message is deleted.

How long Meta keeps the data from the Meta Pixel is set by its own privacy policy; we do not control it.

Google keeps the data from Google Analytics 4 for the period set in our account: both detailed data on individual events and user-level data (tied to cookies and identifiers) for 14 months; the period for user-level data starts counting again on your next visit. Once the period ends, Google deletes the data in its next monthly deletion; aggregated reports built from it, which are no longer tied to you or your cookies, are not limited by this period. If you have allowed marketing, you stay in the visitor lists for remarketing for 30 to 540 days, as set in our account, counted from the last visit or conversion that put you on the list. How long Google keeps other data from Google Ads, including Google Analytics data that reaches Google Ads through the link, is set by its terms and policies; we have no influence over it. The same applies to the e-mail fingerprint from enhanced conversions. Google's cookies stay in your browser for the periods stated on the cookies page.

Your rights

As a data subject you have the right:

  • to access the personal data we process about you,
  • to have inaccurate or incomplete data corrected,
  • to have data erased where there is no reason for further processing,
  • to have processing restricted,
  • to data portability to another controller, in respect of data we process by automated means on the basis of a contract,
  • to object to processing based on legitimate interest,
  • to withdraw your consent to cookies at any time, including marketing (the Meta Pixel and the information on where you came to the site from), with the Cookie settings button in the footer. Your browser then deletes straight away the record of where you came to the site from that we store, and stores no new one; information already stored with an enquiry or message you sent is kept for as long as that enquiry or message. Cookies and records that the Meta Pixel and Google's tags have stored in your browser you can delete in your browser settings (see the cookies page),
  • to withdraw your consent to analytics cookies (Google Analytics 4) and to marketing in Google (Google Ads) at any time with the Cookie settings button in the footer; we then tell Google immediately that it may no longer store or read cookies. A script already running on the open page we do not remove, though: until you reload or close the page, it may keep sending Google information about what you do on the site, only without cookies; after a fresh page load the Google tag whose consent you withdrew no longer starts (details on the cookies page),
  • to withdraw your chat consent at any time, using the button in the assistant window (see below).

Withdrawing your chat consent: use the Withdraw consent button in the assistant window. After you withdraw consent, we delete your conversations with the assistant and the consent record: if you are signed in, all conversations on your account and also the conversations you had in this browser without signing in during the current chat session; if not, the conversations from the current chat session in this browser (a session lasts 24 hours from when you first opened the assistant). Other conversations, including those from earlier sessions, delete themselves 180 days after the last message. An enquiry or a technical-issue report you sent through the assistant remains and is governed by what we say about enquiries and jobs above. If you write to the assistant again, it will first ask for your consent. Withdrawal does not affect processing carried out before it. If you have a customer account with us, you can also ask by e-mail at info@sevenworks.cz for it to be erased; together with it, we delete the conversations with the assistant held on that account. Records for the daily chat limit (without any conversation content) are not deleted by withdrawing consent or by erasing your account, so that the limit cannot be bypassed; they delete themselves after 2 days. Withdrawing your chat consent does not turn off the remembering of the pages you view; you switch that off in the cookie settings (Assistant category).

You can exercise the other rights by e-mailing info@sevenworks.cz. If you believe we are not handling your data in accordance with the law, you have the right to lodge a complaint with the Czech Data Protection Authority (Úřad pro ochranu osobních údajů).

For any other questions or requests, please contact us directly — see the contact section of the website.