Privacy policy
How Pragaweb s.r.o. handles the personal data collected on this website: what data, why, for how long and what your rights are under the GDPR.
This privacy policy explains what personal data the website www.pragaweb.net collects, why it collects it, how long it keeps it and what rights you have. It is written in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR).
Who the data controller is
The data controller, meaning the organisation that decides how and why your data is processed, is:
- Pragaweb s.r.o., Primátorská 296/38, Libeň, 180 00 Prague 8, Czech Republic
- Company ID (IČO) 08424420, EU VAT number (DIČ) CZ08424420
- Registered in the Commercial Register kept by the Municipal Court in Prague, Section C, File 318801
- Email: info@pragaweb.net
If you have any questions about this policy or your data, you can write to the email address above.
What data we collect and where it comes from
Contact form
If you fill in the form on the contact page, we collect your name, email address, phone number (optional), company name (optional), subject and message. To send the form you must confirm that you have read this policy. The data is stored in the website’s database and sent by email to info@pragaweb.net. We also record the IP address the form is sent from, to limit the number of messages and protect the form from spam.
Virtual assistant (chatbot)
The website includes an automated virtual assistant that answers general questions using the content published on the site. If you use the assistant without leaving your contact details, the conversation is not saved on our systems: it stays only in your browser while the tab is open.
If you ask to be contacted, the assistant asks for your name, email address, phone number (optional) and a short description of what you need, and asks you to confirm explicitly that you agree. In that case we save this data together with the conversation transcript, in the same archive as contact form messages.
Members area (user account)
If you create an account in the members area we collect: full name, email address, password (stored only in encrypted form, which not even we can read), preferred language and, if you enter them, company name, VAT number, phone and address. We record the date you confirm you have read this policy, the date of your last login and, if you choose to receive email updates, the date of your consent. If we work with you on a project we also keep the messages and files we exchange in the members area, and your requests to access products. To protect logins we keep the IP address of failed login attempts for no more than 24 hours.
Emails you send us directly
If you write to info@pragaweb.net, we process your email address, the content of your message and any other details you choose to share, so that we can reply.
Browsing data
As with almost every website, the hosting provider’s servers automatically record some technical data about each request, such as the IP address, the date and time of access and the resource requested. These records, known as logs, are used only to keep the website secure and working properly. We do not use them to profile you or for statistical analysis.
The website uses no profiling or analytics cookies. For details, see the cookie policy.
Why we process data and on what legal basis
The GDPR requires every processing activity to have a legal basis, meaning a reason recognised by law. These are ours:
| Purpose | Data | Legal basis |
|---|---|---|
| Replying to your enquiries, contacting you back, preparing a quote or proposal | Form, chatbot and email data | Steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR) |
| Protecting the website and form from abuse, spam and cyber attacks | IP address, server logs | Our legitimate interest in keeping the website secure (Article 6(1)(f) GDPR) |
| Meeting legal obligations, for example tax and accounting rules if your enquiry becomes a contract, or responding to requests from authorities | Data required by the obligation | Legal obligation (Article 6(1)(c) GDPR) |
| Creating and managing your account, projects, documents and product access in the members area | Account data, members area messages and files | Performance of a contract or pre-contractual steps at your request (Art. 6(1)(b) GDPR) |
| Sending you updates and news by email, only if you choose to | Name, email, language | Consent (Art. 6(1)(a) GDPR), which you can withdraw at any time from the My account page |
We do not use your data to send you newsletters or promotional messages unless you specifically ask us to. We do not sell or pass on your data to third parties for marketing purposes.
Providing the data requested by the form or the assistant is optional, but without your name, email and message we cannot reply to you.
How long we keep data
- Contact requests (form, chatbot, email): for 24 months from the last contact, if the enquiry does not become a contractual relationship. After that period the data is deleted.
- Enquiries that become a contract: for the duration of the relationship and, after it ends, for the period required by applicable tax and accounting law.
- IP address linked to a form submission: kept with the related message, for the same period.
- Server logs: for a maximum of 12 months, unless they are needed to establish or defend a legal claim following a security incident.
- Assistant conversations without a contact request: not saved on our systems.
- Members area accounts: for as long as the account is active. If you delete it, which you can do yourself from the My account page, we immediately delete your profile, projects, messages and files, except data we must keep for tax or accounting obligations.
- IP address of failed login attempts: no more than 24 hours.
Who may receive the data
Your data is processed by Pragaweb s.r.o. and by authorised people bound by confidentiality. It may also be processed on our behalf by certain providers acting as processors under Article 28 GDPR, on the basis of a written agreement:
- Aruba S.p.A. (Italy), which provides the website hosting, database and servers, located in the European Union.
- Artificial intelligence service provider, only if the virtual assistant’s advanced answers feature is switched on. In that case the text of the questions you type in the chat may be processed by this provider to generate the answer. When the feature is active, the provider’s name and the place of processing are listed in this section.
Data may be disclosed to public authorities only where the law requires it.
Transfers of data outside the European Union
As a rule, your data stays within the European Union. If an active artificial intelligence provider were based, or had servers, outside the European Economic Area, the transfer would only take place with the safeguards required by the GDPR: a European Commission adequacy decision, such as the EU-U.S. Data Privacy Framework for certified US companies, or the standard contractual clauses approved by the Commission (Article 46 GDPR). You can request a copy of the safeguards in place by writing to info@pragaweb.net.
Automated decision-making
We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you, within the meaning of Article 22 GDPR. The virtual assistant only provides general information and collects your request: every assessment of, and reply about, a project is made by a person.
Your rights
Under Articles 15 to 22 GDPR you can ask us at any time for:
- Access: to know whether we process your data and to receive a copy.
- Rectification: to correct inaccurate data or complete incomplete data.
- Erasure: to have your data deleted when there is no longer a valid reason to keep it.
- Restriction: to pause the use of your data temporarily, for example while we look into a complaint from you.
- Portability: to receive the data you gave us in a structured, machine-readable format, or have it sent to another controller.
- Objection: to object to processing based on our legitimate interest, on grounds relating to your particular situation.
To exercise your rights, write to info@pragaweb.net. We will reply without undue delay and in any case within one month of your request. We may ask for information to verify your identity.
If you have a members area account you can also do it yourself: from the My account page you can correct your data, download a full copy in JSON format and delete the account.
Withdrawing consent
Where processing is based on your consent, you can withdraw it at any time by writing to info@pragaweb.net. This does not affect the lawfulness of processing carried out before withdrawal. In any case, you can ask us at any time to stop contacting you and to delete your enquiry.
Complaints to a supervisory authority
If you believe the processing of your data breaches the GDPR, you can lodge a complaint with a supervisory authority (Article 77 GDPR). The authority responsible for the controller’s registered office is the Úřad pro ochranu osobních údajů, the Czech Office for Personal Data Protection (www.uoou.cz). You can also contact the authority in the country where you live or work, or where the alleged breach took place: if you live in Italy, this is the Garante per la protezione dei dati personali (www.garanteprivacy.it). We would still encourage you to write to us first, so we can try to resolve any concern directly.
Children
The website and our services are aimed at businesses and professionals, not at children. We do not knowingly collect data from anyone under 18. If we find that we have received such data, we will delete it.
Changes to this policy
We may update this policy, for example if the services used by the website or the law change. The current version is always published on this page, with the date of the last update. If we make significant changes, we will flag them clearly on the website.
Last updated: 16 October 2026.