Privacy Policy

1. Who We Are

Karel Caslavsky Online provides professional website development, managed hosting, website maintenance, content services, business automation and managed business AI solutions.

Business operator: Karel Caslavsky
Website: karelcaslavsky.com
Privacy enquiries: yumi@karelcaslavsky.com

KCO is responsible for personal information processed for its own business purposes. Where KCO processes information on behalf of a client, the respective responsibilities are governed by the applicable agreement and data protection requirements.

2. Information We Collect

Depending on how you interact with KCO, we may process:

• Your name, business name and contact details.
• Information submitted through enquiry and quotation forms.
• Messages and conversation history exchanged with Yumi.
• Project requirements, specifications and supporting materials.
• Information needed to administer client relationships and services.
• Technical information associated with website operation, security and analytics.
• Financial and administrative records required for contractual or legal purposes.

Please avoid sending passwords, payment-card details, sensitive personal information or unnecessary confidential information through public enquiries or AI conversations.

3. How We Use Information

Personal information is processed where appropriate to:

• Respond to enquiries and requests.
• Assess project requirements and prepare quotations.
• Deliver contracted products and services.
• Maintain relevant communication and project records.
• Support website security, reliability and performance.
• Understand website usage and improve our services.
• Fulfil applicable legal, financial and administrative obligations.

4. Legal Basis for Processing

Depending on the specific activity, our processing may rely on the following lawful grounds under the General Data Protection Regulation (GDPR):

• Contract: Processing necessary to prepare for or fulfil an agreement.
• Legitimate interests: Appropriate business communications, operational security and service administration, subject to applicable safeguards.
• Legal obligations: Processing required by applicable law.
• Consent: Processing requiring your permission, including certain optional tracking and marketing activities.

Where consent is the lawful basis, you may withdraw it at any time without affecting processing already lawfully undertaken.

5. Yumi — Our AI Business Assistant

Yumi is KCO’s artificial intelligence business assistant. Visitors can communicate with her to discuss services, ask questions and explain project requirements.

Information provided during these conversations may be used to understand enquiries, provide responses, maintain relevant conversation context and support authorised business workflows.

Yumi may also assist with lead qualification, enquiry management and directing matters requiring human attention.

Yumi is an AI system, not a human representative. Her responses do not independently create binding contractual commitments unless expressly authorised through KCO’s applicable business processes.

AI-assisted communications may involve authorised technical and AI service providers necessary for the operation of the service. The applicable processing arrangements, international transfers and retention periods are subject to the providers and configurations in use.

Questions concerning information processed through Yumi can be sent to yumi@karelcaslavsky.com.

6. Contact Forms and Email

When you contact KCO, we process the details necessary to understand and respond to your request.

Messages may be handled through our authorised enquiry systems and Yumi’s communication workflows. Relevant correspondence may be retained for follow-up, service administration and lawful recordkeeping.

Providing information is generally voluntary, although sufficient details may be necessary for us to respond effectively.

7. Cookies and Analytics

KCO uses website analytics and privacy-related technologies to support site operation, understand website activity and improve services.

Essential technologies may operate where necessary for functionality or security. Optional technologies requiring consent must be managed according to applicable legal requirements.

Our website uses Koko Analytics and a dedicated privacy and consent system. Additional information about individual cookies, tracking technologies and available controls will be provided through the website’s Cookie Policy.

8. Service Providers and Data Sharing

KCO may use authorised providers to support website hosting, communications, AI functionality, business administration and other approved services.

Personal information is shared only where there is an appropriate purpose and lawful basis, or where disclosure is required by law.

KCO does not sell personal information to advertisers or data brokers.

Where processing involves transfers outside the European Economic Area, applicable data protection rules and transfer safeguards must be observed.

9. Data Retention

Personal information is retained only for as long as necessary for the relevant purpose, subject to applicable legal obligations.

Retention periods may differ for enquiries, AI conversations, active client projects, accounting records, server logs and backups.

When information is no longer required, appropriate deletion, anonymisation or lawful archival procedures should apply.

10. Information Security

KCO applies appropriate technical and organisational safeguards according to the nature of its services and the information processed.

These may include access restrictions, secure communications, system maintenance, server security controls and backup arrangements.

No online system is completely free from risk. Security incidents involving personal information will be assessed and handled in accordance with applicable legal obligations.

11. Your Data Protection Rights

Depending on the circumstances and applicable law, you may have the right to:

• Access personal information held about you.
• Request correction of inaccurate information.
• Request deletion where legally appropriate.
• Request restriction of certain processing activities.
• Object to certain processing.
• Request data portability where applicable.
• Withdraw consent where consent is the lawful basis.
• Exercise applicable rights concerning solely automated decisions.

To submit a request, contact yumi@karelcaslavsky.com.

Yumi may acknowledge and organise privacy enquiries, but identity verification and consequential decisions involving protected personal information are subject to appropriate human oversight.

You may also lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů): uoou.gov.cz.

12. External Websites

Our website may link to external websites and third-party services. Their information-handling practices are governed by their respective privacy policies.

13. Children’s Privacy

KCO’s business services are not specifically directed towards children. We do not intentionally request children’s personal information for general business enquiries or independent marketing.

14. Updates to This Policy

This policy may be updated to reflect changes in our services, technology, legal obligations and information-handling practices.

The latest version will be published on this page with its revision date.

CONTACT KCO

Privacy questions?

Yumi is KCO’s first point of contact for privacy enquiries and requests relating to personal information.

Email Yumi