Privacy Policy

Effective October 17, 2026

Who processes your data

The controller of personal data is KUDEN Solutions s.r.o., Company ID (IČO) 30057213, with its registered office at Havlíčkova 54, 261 01 Příbram, Czech Republic, registered in the Commercial Register kept by the Municipal Court in Prague, Section C, Insert 455900. For any question about personal data, write to us at info@kuden.cz.

What data we process and why

Contact form and email. When you write to us, we process what you send us yourself: your name, your company name if you give one, an email address or phone number, and the text of your message. If you write from the page of a specific service, we note which service it is. We use the data to reply to you, arrange a call, and, where appropriate, prepare a proposal.

Free website audit. When you send us a website through the audit page or through the form in our ad on Facebook or Instagram, we process the website address, the email address we send the audit to, your phone number, and your name if you enter it. We also note which page or ad you came from. We use the data to prepare the audit, to email you a link to its results, to arrange a call if you pick a time, to confirm the call and remind you of it, and to reply if you respond to the audit. We also use your phone number to call you if we find something serious in the audit, if you do not pick a call time or cancel it, if the email with the results bounces or cannot be delivered, if the audit cannot be prepared, and if you did not send us a website.

How we prepare the audit. Most of the audit is prepared by our software. It goes through your website the way a visitor sees it on a phone and on a computer, takes screenshots, and checks loading speed with the Google PageSpeed service. To prepare for the call we add publicly available business information about your company or about you as a sole trader: data from ARES, the Commercial Register and its collection of filed documents (for example the field, size, and financial results of the company), the content of your website, company profiles on social networks, the company listing on Google and firmy.cz including business reviews, and public ad libraries. We do not look up private profiles or anything about your private life. The text of the audit and the call notes are drafted with the help of artificial intelligence by the Claude service from Anthropic. The result is only material for our conversation; there is no automated decision-making with legal or similarly significant effects (Art. 22 GDPR).

Emails about the audit. We only send you emails that relate directly to the audit: a link to the audit results, confirmation, change, or cancellation of a booked call with a calendar invitation, a reminder on the day of the call, and at most one reminder with a new link if the first link expires and you have not picked a time. You can also request a new link yourself on the results page. The emails come from team@kuden.cz and each one contains a link to unsubscribe from further automated emails. If you reply to one of them, we no longer send the reminder with a new link. After you unsubscribe we send nothing further automatically, except confirmation of a booking, its change, or cancellation that you request yourself.

The audit results page. On the page the email links to, we record when and how many times you opened it, your screen width, which buttons and which days or times in the calendar you clicked, whether you picked, changed, or cancelled a call time (including the reason, if you write one), added it to your calendar, whether you opened the page after the link expired, and whether you asked for a new link. This tells us whether we should get in touch. The page does not use cookies or ad measurement.

In both cases the legal basis is handling your request and pre-contractual negotiations (Art. 6(1)(b) GDPR): preparing the audit, sending the results, arranging, confirming, and reminding you of the call, replying, and calling you if we find something serious in the audit, if the email bounces, if the audit cannot be prepared, or if you did not send a website. Preparing the call from public business information, the records from the results page, the one reminder with a new link, and a call if you do not pick a time or cancel it are based on our legitimate interest in offering you a clear explanation of the audit you requested and a call (Art. 6(1)(f) GDPR). You can object to this at any time, most quickly with the unsubscribe link in the email, by replying to the email, or during the call. We do not sell your data, we do not add you to any newsletter, and apart from the emails about the requested audit described above we do not send you commercial messages.

How long we keep it

If an inquiry or audit does not lead to a collaboration, we delete the data no later than 12 months after our last communication. This also applies to the audit, the screenshots of your website, the call notes, and the records from the results page. If a collaboration does begin, we keep the data for the duration of the contract and afterward for as long as the law requires, for example for accounting and tax purposes.

Who can access your data

We process the data ourselves. The following processors help us with the technical side:

• Vercel Inc.: hosting of the website, forms, the audit results page, and our internal system,
• Resend: delivery of the form message to our mailbox,
• Supabase Inc.: the database of our internal system for managing inquiries, where form data, audits, and call notes are stored (servers in the EU, Ireland),
• GitHub, Inc.: running the software that prepares the audit,
• Anthropic, PBC: drafting the audit text and call notes and looking up public information about the company (it receives the website address, content, and screenshots, the company name, your name, the domain of your email address, and the text you write in the form, not your phone number),
• Migadu: mailboxes and sending of emails from @kuden.cz addresses (Switzerland),
• Google: the email mailbox where messages arrive, and the PageSpeed service, which receives only the website address.

The form directly in our ad on Facebook or Instagram is run for us by Meta Platforms Ireland Ltd. as a processor, which passes the data you enter on to us. On the audit page, Meta receives data only if you allow its cookies. You'll find a description in the cookies section below.

These providers may also process data outside the European Union, in particular in the USA. Transfers take place under the EU–US Data Privacy Framework or the standard contractual clauses approved by the European Commission.

Cookies and ad measurement

The main website, the service pages, and this page do not use analytics or advertising cookies and do not track visits. If you choose “Reduce animations” in the footer, your browser remembers that choice in its storage until you change it. When you go from the home page to a service page, your browser briefly stores which card you came from so it can finish the transition animation. That entry is deleted as soon as the page loads.

Language. If you switch the language in the header or dismiss the language suggestion, we store your choice in the kuden-lang cookie for 12 months so the site opens in the same language next time. It is a functional cookie that tracks nothing and does not require consent.

The free audit page may use the Meta Pixel with your consent. Without consent, nothing is loaded from Meta. If you give consent:

• Meta stores the cookies _fbp and, where applicable, _fbc in your browser (valid for 90 days), which it uses to recognize that a visit came from an ad,
• Meta is told that you visited the page, worked with the form, and, where applicable, submitted it,
• after you submit the form, we also pass Meta your encrypted (hashed) email address, phone number, and name, your IP address, and browser identification, so the visit can be matched to the ad.

The purpose is to measure which ads work. The legal basis is your consent (Art. 6(1)(a) GDPR and Section 89(3) of the Czech Electronic Communications Act). For this purpose we are joint controllers with Meta. How Meta handles the data further is described in its privacy policy.

We remember your choice in your browser's storage so the consent window does not appear again: for 12 months if you allow anything, and for 6 months if you decline optional cookies. You can change or withdraw your consent at any time with the “Cookie settings” button in the footer of the audit page or with the settings icon in its corner. Withdrawal does not affect processing that took place before.

We host our fonts directly on our own site. Only on desktop computers do we load a 3D graphics library from the jsDelivr service; your browser then passes it your IP address, as with any content loaded from the internet. The hosting provider keeps ordinary technical access logs to ensure security.

Your rights

You have the right to access your data, to have it corrected or erased, to restrict processing, to data portability, to object to processing based on legitimate interest, and to withdraw consent at any time. Just write to info@kuden.cz. We will reply within one month at the latest.

Objection and unsubscribing. If you do not want us to prepare call notes or send you further automated emails, click the unsubscribe link in any of them, reply to us, or write to info@kuden.cz. Unsubscribing takes effect immediately and we send you nothing further automatically.

If you believe we are not handling your data properly, you can lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz.