Privacy policy (GDPR)

This policy describes how Arwebia handles the personal data of website visitors and clients.

1. Who we are and who processes your data (Controller)

The controller of your personal data is us, the founders of the digital agency arwebia:

• David Kundrát, Company ID: [not yet registered], registered office: [not yet set]
• Oliver Plíšek, Company ID: [not yet registered], registered office: [not yet set]
• Contact email: info@arwebia.cz

2. What personal data we process and why

We obtain personal data from you primarily when you contact us through the form or chatbot on our site. We process:

• First and last name (so we know who we’re talking to and what to put on a contract).
• Email address and phone number (so we can reply and discuss the details of your enquiry).
• Message content (information about your project so we can prepare a quote).

Legal basis: We process this data on the basis of “negotiating a contract” and subsequently “performing a contract” (so we can build your website or logo).

3. How long we keep your data

We keep the data from your enquiry form for the duration of our communication (max. 1 year if we don’t agree on cooperation). If you become our client, we keep your billing and contact data for as long as required by law (e.g. accounting law requires invoices to be archived for 10 years).

4. Who else has access (Processors)

To make our site and services work as well as possible, we use trusted modern third-party tools that meet strict security standards:

• Vercel Postgres / Supabase: A secure database where your contact-form messages are safely stored.
• Vercel: The platform our site technically runs on.
• Google (Gemini AI): To run the “Ara” AI chatbot and AI search (messages are transmitted for processing).
• Google (Gmail / Workspace, Calendar): For sending transactional emails (meeting notifications) and writing bookings to the calendar.
• Fakturoid: Our invoicing system.

We never sell your data to any marketing agencies.

5. Your rights

Under the GDPR you have the right to:

• Ask us what personal data of yours we process.
• Request access to this data and have it updated or corrected.
• Request erasure of this personal data (unless another law prevents it, e.g. regarding invoices).
• Object to processing or request restriction of processing.
• If you have doubts about whether we process your data correctly, you can contact us or file a complaint with the Czech Office for Personal Data Protection (www.uoou.cz).

This policy takes effect on the day the website launches.