Privacy Policy

Appmine, s.r.o.

Company ID: 03080137

Tax ID: CZ03080137

Registered office: Legerova 1820/39, 120 00 Prague, Nové Město

Registered at the Municipal Court in Prague, C 226411/MSPH

Email: info@transformuj.ai

The controller processes personal data in accordance with GDPR and Act No. 110/2019 Coll.

We have not appointed a data protection officer because Art. 37(1) GDPR does not require us to. For any data protection question, contact us at info@transformuj.ai.

Contact and Communication Data

• Name/person
• E-mail
• Company name
• Message or note text
• Phone number, if the user provides it

Service-Related Data

• Consultation information
• Data created when ordering a subscription
• Partnership (B2B) data: identification, billing details
• Call booking data from the Cal.com calendar (name, e-mail, chosen time, optional note)

Payment Data

• Billing details needed to issue an invoice (name/company, address, company ID/VAT ID)
• Payment information for ordered services (amount, date, payment status)
• Payments are made by bank transfer based on an invoice; we do not store payment card details

Analytics Data (only with your consent, separately for measurement and for recording)

• With consent to traffic measurement: pages visited, visit source, language and currency of the site
• With consent to traffic measurement: clicks on links and buttons, form submissions and calculator steps, without the content of filled-in fields
• With consent to traffic measurement: browser and device technical data, approximate location derived from the IP address (the IP address is not stored), website errors and page loading speed
• With consent to traffic measurement: a random browser identifier that we do not link to a name or e-mail
• With consent to traffic measurement: a record of your cookie choice (which categories you allowed, policy version and time of the choice), so that we can demonstrate your consent
• Only with separate consent to session recording: session recording (session replay) for some visits, with form fields, the goal field and the calculator masked

Technical Data

• Server logs needed to run the website
• Strictly necessary browser data: cookie choice, site language and currency

Communication and Responding to Inquiries

• Responding to inquiries via Contact
• Referral form Recommend us
• Legal basis: steps prior to a contract at your request (Art. 6(1)(b) GDPR), for general questions our legitimate interest in replying (Art. 6(1)(f) GDPR)

Service Provision

• Consultations
• Workshops
• Subscription (AI team as a service)
• Partnerships and B2B contractual cooperation
• Legal basis: contract performance and pre-contractual steps

Payment Processing

• Invoicing and recording payments for ordered services (bank transfer)
• Processing refunds
• Legal basis: contract performance and statutory accounting and tax obligations

Website Operation

• Ensuring technical operation
• Security and logs
• Legal basis: legitimate interest in a secure and functioning website (Art. 6(1)(f) GDPR)

Traffic Measurement (separate consent)

• Measuring traffic, paths through the website and conversions (for example clicks on the 15-minute intro call or form submissions) with PostHog, capturing website errors and loading speed
• Demonstrating your consent: we record which categories you allowed, the policy version and the time of your choice
• Legal basis: consent (Art. 6(1)(a) GDPR and Section 89(3) of Czech Act No. 127/2005 Coll.), which you can withdraw at any time with the Cookie settings button in the website footer

Session Recording (separate consent)

• Session recording (session replay) for roughly every second visit with masked fields, to find where the website confuses people or breaks
• Recording runs only together with traffic measurement because it technically depends on it. You can allow measurement without recording
• Legal basis: separate consent (Art. 6(1)(a) GDPR and Section 89(3) of Czech Act No. 127/2005 Coll.), which you can withdraw at any time with the Cookie settings button in the website footer, independently of your consent to measurement

Both consents are voluntary, they are off by default and the website works the same without them. We remember your choice (consent or refusal) for 6 months, then we ask again.

Marketing (if consent is given)

No marketing activity takes place without consent.

Obligation to Provide Data and Automated Decision-Making

Providing your data is voluntary. Without contact details, however, we cannot reply to you or conclude a contract, and billing details are required by accounting and tax law. We do not carry out automated decision-making or profiling with legal or similarly significant effects (Art. 22 GDPR).

• Inquiries and communication: time to resolve + 6 months
• Contract documents and accounting: 10 years
• Technical logs: max. 12 months
• Session recordings (session replay): 30 days
• Analytics events in PostHog (traffic measurement, including the record of your cookie choice): 1 year
• PostHog analytics cookie in the browser: 180 days, or until you withdraw consent
• Your cookie choice in the browser (consent or refusal): 6 months, then we ask again

Processors

The following providers process data on our behalf, only to the extent needed for the given service:

• PostHog, Inc. (USA): traffic measurement and session recording, each only with your separate consent. Data is stored in the EU (PostHog EU Cloud, Frankfurt).
• Netlify, Inc. (USA): website hosting and server logs.
• Plus Five Five, Inc. (USA), the Resend service: sending e-mails from the contact forms. Data is processed in the USA.
• Cal.com, Inc. (USA): call booking, only if you click to pick a time and make a booking.
• Accounting and administrative service providers.

We have data processing agreements with our processors under Art. 28 GDPR. We will provide the list of processors on request at info@transformuj.ai.

Transfers Outside the EU

The processors listed are based in the USA and data may be transferred to them; for PostHog this only concerns possible access from the USA, the data itself is stored in the EU. Transfers rely on the European Commission adequacy decision (EU-U.S. Data Privacy Framework, Implementing Decision (EU) 2023/1795) where the provider is certified, and on standard contractual clauses approved by the European Commission, which are part of the data processing agreements of PostHog, Netlify and Resend (Art. 45 and 46 GDPR). We will provide details on the certification of each processor and the transfer mechanism for Cal.com on request at info@transformuj.ai.

What We Do Not Share

We do not sell data or share it for advertising. We do not use Google Analytics or Microsoft Clarity.

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to object to processing based on legitimate interest (Art. 21 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to withdraw consent at any time (Art. 7(3) GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise your rights, e-mail info@transformuj.ai. We will reply without undue delay and within one month at the latest (Art. 12(3) GDPR).

You can withdraw your consent to traffic measurement and your consent to session recording, each separately, with the Cookie settings button in the website footer, as easily as you gave it. Withdrawal does not affect processing before it.

You can lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work or place of the alleged infringement (Art. 77 GDPR). In the Czech Republic, where we are established, this is the Office for Personal Data Protection, www.uoou.gov.cz.

We use two kinds of cookies:

• Strictly necessary: cookie choice, site language and currency. They are stored without consent because the website needs them to work the way you set it up (Section 89(3) of Czech Act No. 127/2005 Coll.).
• Analytics (PostHog): traffic measurement and session recording, each only with your separate consent, which you can withdraw at any time with the Cookie settings button in the footer.

Names, purposes and storage periods are listed in our Cookie Policy.

Data is protected by physical and technical measures.

Only persons authorized by the controller have access.

Data Scope

• Company identification data
• Contact persons
• Billing information
• Communication content
• Contract documents

Purpose

Conclusion and performance of contractual relationship (workshops, integration, partnerships, training cooperation, revenue-share). Records and fulfillment of legal obligations (accounting, taxes).

Legal Basis

• Contract performance
• Legal obligation fulfillment
• Legitimate interest in protecting rights and maintaining contract records

Retention Period

• Contract documents and accounting records: 10 years
• Other communications: during cooperation + 12 months

a) Consultation Preparation and Outputs

• Creating consultation summaries
• Process improvement suggestions
• Analysis of text provided by client

AI systems may only process content provided by the client. This data is not used for model training.

b) Subscriptions (AI Team as a Service)

• Automation, recommendations, and technical proposals
• Internal workflows and analyses
• Processing occurs only for service delivery purposes.

c) Website Technical Infrastructure

Automated text translation or quality control, if deployed.

Data Protection in AI Systems

• We use AI tools in a mode that does not allow data to be used for model training.
• Processing occurs in provider mode guaranteeing NDA-safe operation.

Workshops take place in digital or in-person format.

Data Scope

• Participant name
• Email
• Company (if B2B workshop)
• Information provided during workshop
• Materials or outputs created during workshop (if service includes them)

Purposes

• Participation organization
• Material provision
• Provision of accompanying services (follow-up, summaries, documentation)

Legal Basis

• Contract performance (workshop participation)
• Consent (if workshop is recorded or if participant provides data beyond necessity)

Retention Period

• Administrative records: during cooperation + 12 months
• Accounting documents: 10 years
• Workshop recordings (if they exist): only based on consent and until withdrawal

Updates follow legislation and operational changes.

The current version is always on this page (transformuj.ai/en/privacy). If there are significant changes, we will inform users in an appropriate way.