Privacy Policy

1. Who processes the data

The controller is MYPIXEL s.r.o., company ID 17617421, registered office Příčná 1892/4, Nové Město, 110 00 Praha 1, Czech Republic, registered in the Commercial Register kept by the Municipal Court in Prague, section C, file 373971. Contact for personal data questions: sojka@sojkachat.cz.

We act in two roles:

• As a controller for data from this website, the contact form and customer accounts.
• As a processor for chat conversations on our customers’ websites. There, the controller is the operator of the website; we process the data on its instructions and under the data processing agreement.

2. Contact form

We process your name, e-mail, website address and message. We use them to reply, prepare an offer and set up a trial assistant.

Legal basis: steps taken at your request prior to a contract (Art. 6(1)(b) GDPR) and our legitimate interest in replying (Art. 6(1)(f) GDPR).

We delete messages 12 months after receipt unless they lead to a contract.

3. Customer accounts

We process e-mail, name, the password stored only as a hash (never readable), time of last login and assistant settings, and for invoicing the organisation’s billing details.

Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and, for accounting records, a legal obligation (Art. 6(1)(c) GDPR).

We delete the account and data within 30 days of the end of the contract. Accounting records are kept for 10 years as required by law.

When a member of our team opens your account for support, it is logged.

4. Chat on customers’ websites

If you write in a Sojka chat on one of our customers’ websites, the operator of that website is the controller of your data. We process:

• the text of your messages and the assistant’s answers,
• the browser language and the address of the page you write from,
• a random browser identifier (kept in browser storage, not in a cookie) so the chat can continue the conversation and apply limits,
• answer ratings, if you give them,
• your e-mail, if you choose to forward the conversation to the website operator; the conversation is then sent to the operator’s e-mail.

We do not store IP addresses with messages. We keep them briefly, for at most 2 days, only to protect the chat against flooding.

To generate an answer, the text of your question is passed to a language model (see the list of subprocessors). Please do not enter sensitive data such as health information, passwords or card numbers in the chat.

Conversations are deleted 12 months after the last message; the website operator may delete them sooner. To delete or obtain your conversation, contact the website operator or us.

Answers are generated by artificial intelligence. There is no automated decision-making with legal effects and no profiling.

5. Recipients and transfers outside the EU

Data is processed by our suppliers (hosting, database, language models, e-mail). The current list is at /en/subprocessors. The database and the application run in Frankfurt (EU).

Some suppliers are based in the USA. Transfers are based on the European Commission’s adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses.

We do not sell data or use it for advertising.

6. Cookies

We only use cookies needed to log in to the admin. Details: /en/cookies.

7. Security

• encrypted transmission (HTTPS),
• passwords stored only as hashes,
• access to data only for authorised persons, with a log of our team opening customer accounts,
• separation of each customer’s data in the application.

8. Your rights

You have the right to access your data, to rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interest. You may withdraw consent at any time.

Write to us at sojka@sojkachat.cz. We reply without undue delay, at the latest within one month.

You also have the right to lodge a complaint with the supervisory authority, in the Czech Republic the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.gov.cz.

9. Changes

We may update this policy. The current version with its effective date is always on this page.