Privacy Policy

1. Who We Are

Codrea.ai is operated by Bitrich s.r.o., a company registered in the Czech Republic.

2. Information We Collect

2.1 Information You Provide

When you use our contact form or sign up for our services, we collect:

• Name and email address
• Company name and role
• Team size and interests
• Any message or inquiry you submit

2.2 Automatically Collected Information

When you visit our website, we may automatically collect:

• IP address (anonymized)
• Browser type and version
• Pages visited and time spent
• Referring website

3. How We Use Your Information

We use your information to:

• Respond to your inquiries and provide customer support
• Send you information about our products and services (with your consent)
• Improve our website and services
• Comply with legal obligations

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on:

• Consent: When you submit a contact form or subscribe to communications
• Legitimate Interest: To improve our services and protect our business
• Contract: To provide services you have requested
• Legal Obligation: To comply with applicable laws

5. Data Sharing

We do not sell your personal information. We may share your data with:

• Service Providers: Third parties that help us operate our business (e.g., email services, hosting providers)
• Legal Requirements: When required by law or to protect our rights

All service providers are contractually bound to protect your data and use it only for the purposes we specify.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, typically:

• Contact form submissions: 2 years
• Customer account data: Duration of the business relationship plus 5 years
• Analytics data: 26 months (anonymized)

7. Your Rights

Under GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (TLS/HTTPS)
• Secure data storage with access controls
• Regular security assessments
• Employee training on data protection

9. Cookies

Our website uses essential cookies to ensure basic functionality. We do not use tracking or advertising cookies without your explicit consent.

10. International Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

11. Children's Privacy

Our services are not directed at children under 16. We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting a notice on our website or sending you an email.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

14. Supervisory Authority

If you are not satisfied with our response to your complaint, you have the right to lodge a complaint with a supervisory authority. In the Czech Republic, this is:

Office for Personal Data Protection (UOOU)
Pplk. Sochora 27
170 00 Prague 7
Czech Republic
www.uoou.cz