Privacy Policy

inithouse.com s.r.o. ("inithouse," "we," "us," or "our") is the data controller responsible for your personal data. We are committed to protecting your privacy and ensuring that your personal information is handled in accordance with the General Data Protection Regulation (GDPR) and applicable Czech data protection laws. Company: inithouse.com s.r.o. Country: Czech Republic Email: info@inithouse.com Website: https://inithouse.com

We collect and process the following categories of personal data: Contact Information: • Email address (when subscribing to newsletter or contacting us) • Name (when provided through contact forms) • Company name (when provided) Professional Information: • LinkedIn profile URL (for career applications) • Portfolio/website URL (for career applications) • Job title and area of interest (for career applications) Usage Data: • IP address • Browser type and version • Pages visited and time spent • Referring website • Device information Cookies and Tracking: • Essential cookies for website functionality • Analytics cookies (with your consent)

We process your personal data for the following purposes: Service Delivery: • To respond to your inquiries and provide requested services • To process consultation requests • To deliver our AI visibility services Communication: • To send newsletters and marketing communications (with your consent) • To notify you about changes to our services • To respond to career applications Analytics and Improvement: • To analyze website usage and improve user experience • To monitor and enhance our services • To ensure security and prevent fraud Legal Compliance: • To comply with legal obligations • To protect our legal rights and interests

We process your personal data based on the following legal grounds: Consent (Art. 6(1)(a)): • Newsletter subscriptions • Marketing communications • Non-essential cookies Contractual Necessity (Art. 6(1)(b)): • Processing consultation requests • Providing requested services Legitimate Interest (Art. 6(1)(f)): • Website analytics and improvement • Security and fraud prevention • Responding to inquiries Legal Obligation (Art. 6(1)(c)): • Compliance with applicable laws • Tax and accounting requirements

We may share your personal data with: Service Providers: • Cloud hosting providers (data storage) • Email service providers (newsletter delivery) • Analytics providers (website analytics) All our service providers are bound by data processing agreements and are required to protect your personal data in accordance with GDPR requirements. We do not sell, rent, or trade your personal information to third parties for marketing purposes. International Transfers: Some of our service providers may be located outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected: • Newsletter subscribers: Until you unsubscribe or request deletion • Contact form submissions: Up to 3 years after last contact • Career applications: Up to 2 years after submission • Analytics data: Up to 26 months • Contractual records: As required by applicable law (typically 10 years in Czech Republic) After the retention period, your data will be securely deleted or anonymized.

Under the GDPR, you have the following rights regarding your personal data: Right of Access (Art. 15): You have the right to obtain confirmation of whether we process your personal data and access to that data. Right to Rectification (Art. 16): You have the right to correct inaccurate personal data and complete incomplete data. Right to Erasure (Art. 17): You have the right to request deletion of your personal data under certain circumstances ("right to be forgotten"). Right to Restriction (Art. 18): You have the right to restrict the processing of your personal data under certain circumstances. Right to Data Portability (Art. 20): You have the right to receive your personal data in a structured, commonly used format. Right to Object (Art. 21): You have the right to object to processing based on legitimate interests or for direct marketing purposes. Right to Withdraw Consent (Art. 7(3)): Where processing is based on consent, you have the right to withdraw consent at any time. To exercise these rights, please contact us at info@inithouse.com.

We use cookies and similar technologies on our website: Essential Cookies: Required for the website to function properly. These cannot be disabled. Analytics Cookies: Help us understand how visitors interact with our website. These are only placed with your consent. You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect website functionality. For more information about cookies, please visit www.allaboutcookies.org.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include: • Encryption of data in transit (HTTPS) • Secure hosting infrastructure • Access controls and authentication • Regular security assessments • Employee training on data protection While we strive to protect your personal data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us, and we will take steps to delete such information.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by: • Posting the updated policy on our website • Updating the "Last Updated" date • Sending you an email notification (for significant changes) We encourage you to review this Privacy Policy periodically.

If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with a supervisory authority: Czech Republic: Office for Personal Data Protection (ÚOOÚ) Pplk. Sochora 27 170 00 Prague 7 Czech Republic Website: www.uoou.cz You may also lodge a complaint with the supervisory authority in your country of residence within the EU/EEA.

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us: inithouse.com s.r.o. Email: info@inithouse.com Website: https://inithouse.com We aim to respond to all requests within one month, as required by GDPR.