1. Data controller

The controller of your personal data is Phi Technologies s.r.o., with registered office at U Nových Vil 16, 100 00 Prague 10, Czech Republic, Company ID (IČO): 05745951, VAT ID (DIČ): CZ05745951 (referred to below as “we” or “Phi Technologies”).

This privacy policy describes how Phi Technologies s.r.o. processes the personal data you provide when using this website, in accordance with the General Data Protection Regulation (GDPR) and the applicable legislation of the Czech Republic.

We may update this policy from time to time. The current version is always available on this page. Last updated: 21 August 2026.

2. What personal data we collect

We may collect the following categories of personal data:

• name and job title
• contact details, including email address and telephone number
• information you provide to us in enquiries, contact forms or customer surveys
• content you enter into the chat assistant on this website
• technical data relating to your use of the website (for example through cookies), such as IP address, browser type and pages visited

3. Legal basis and purpose of processing

We process personal data on one of the following legal grounds under Article 6 GDPR:

• performance of a contract, or steps taken at your request prior to entering into a contract (for example when you enquire about PhiSuite services)
• our legitimate interest (for example improving our website and services, and internal records)
• your consent (for example marketing communications and analytics cookies)
• compliance with a legal obligation (for example accounting and tax legislation)

We use your personal data primarily for the following purposes:

• handling your enquiry or question
• internal records and management of business relationships
• improving our products and website
• sending commercial communications about new products or offers (only with your consent)
• market research, where we contact you in this connection by email, telephone or post

We do not use your personal data for automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you.

4. How long we keep your data

We keep personal data only for as long as is necessary for the purpose for which it was collected, or for as long as required by law (for example accounting and tax obligations).

Specific retention periods:

• enquiries that did not lead to a contract: 12 months
• customer data from a contractual relationship: for the term of the contract and a further 4 years
• tax documents and invoices: 10 years (Section 35 of the Czech VAT Act)
• data processed on the basis of consent (commercial communications): until consent is withdrawn
• Google Analytics cookies: 14 months
• technical server logs: 30 days
• chat assistant conversations: 3 months

5. Security

We are committed to keeping your personal data secure. To prevent unauthorised access, loss or misuse, we have put in place appropriate technical and organisational measures to secure and protect the information we collect.

6. How we use cookies

A cookie is a small file that is stored on your device with your consent. Cookies help us analyse website traffic and adapt content to your needs and preferences.

Essential cookies (for example storing your language selection) do not require consent, because they are necessary for a function you have actively requested and serve no other purpose.

Analytics cookies from Google Analytics (_ga and related cookies) require your prior consent, which we obtain through the cookie banner on this website. These cookies are not set until you give consent. You can withdraw your consent at any time by changing your settings in the cookie banner or in your browser.

Most web browsers accept cookies automatically, but you can adjust your browser settings to refuse them. This may limit the functionality of some parts of the website.

7. Links to other websites

Our website may contain links to other websites. We have no control over those websites and cannot be responsible for the protection of personal data on them. We recommend that you read the privacy policy applicable to each website you visit.

8. Transfer of personal data to third parties

We will not sell or rent your personal data to third parties. Personal data may be passed to processors who provide individual services for us, exclusively on the basis of data processing agreements ensuring an adequate level of protection. Specifically, we use:

• Velia.net Internetsysteme GmbH (Germany) — website hosting and server infrastructure. Processing takes place within the EU.
• Hetzner Online GmbH (Germany) — server infrastructure and application hosting. Processing takes place within the EU.
• Google Analytics (Google Ireland Limited) — website traffic analysis by means of cookies (for example _ga). As part of providing this service, Google may transfer data outside the EU/EEA; such transfers are covered by the EU Standard Contractual Clauses. Further information: https://policies.google.com/privacy

The chat assistant on this website runs on our own infrastructure within the EU. Your input is not transmitted to external language model providers.

Personal data may also be passed to third parties where required by law.

9. Your rights under the GDPR

In connection with the processing of your personal data, you have the following rights:

• the right of access to the personal data we process about you
• the right to rectification of inaccurate or incomplete data
• the right to erasure (“right to be forgotten”), where the data is no longer necessary for the purpose for which it was collected
• the right to restriction of processing
• the right to data portability
• the right to object to processing based on legitimate interest
• the right to withdraw consent, where processing is based on consent — withdrawal does not affect the lawfulness of processing based on consent given before its withdrawal
• the right to lodge a complaint with the supervisory authority, the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, www.uoou.cz), if you believe that the processing of your personal data infringes the GDPR

To exercise any of these rights, please contact us at info@phitech.io.

10. Contact

If you have any questions about this privacy policy or about the way we process your personal data, please write to us at info@phitech.io.

If you believe that any information we hold about you is incorrect or incomplete, please write to us as soon as possible at the address above. We will promptly correct any information found to be incorrect.