Privacy Policy

Last Updated: March 2026

Introduction

KompiTech s.r.o. (“KompiTech,” “we,” “us,” or “our”) is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us in any capacity.

By accessing or using our website and services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this policy, please do not access or use our services.

Information We Collect

We may collect the following categories of information:

Personal Information

When you interact with us directly — for example, by filling out a contact form, requesting a demo, subscribing to our newsletter, or entering into a business relationship — we may collect:

  • Full name
  • Email address
  • Phone number
  • Company name and job title
  • Mailing or billing address
  • Any other information you voluntarily provide to us

Usage Data

We automatically collect certain information when you visit our website, including:

  • IP address and approximate geographic location
  • Browser type and version
  • Operating system
  • Referring URL and exit pages
  • Pages visited, time spent on each page, and click patterns
  • Date and time of access
  • Device identifiers and screen resolution

Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to collect usage data and improve your experience. For more details, see the “Cookies” section below.

How We Use Your Information

We use the information we collect for the following purposes:

  • Service Delivery: To provide, operate, and maintain our services, including our AI-powered IT management platform and related support.
  • Communication: To respond to your inquiries, send you requested information, provide customer support, and deliver service-related notices.
  • Improvement: To analyze usage patterns and feedback in order to improve our website, products, and services.
  • Marketing: To send you promotional communications about our products, services, and events, where you have opted in to receive such communications. You may opt out at any time.
  • Legal Compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.
  • Security: To detect, prevent, and address technical issues, fraud, or security vulnerabilities.

Data Sharing

We do not sell your personal information. We may share your data with third parties only in the following circumstances:

  • Service Providers: We engage trusted third-party companies and individuals to facilitate our services, perform service-related functions, or assist in analyzing how our services are used. These parties have access to your personal information only to perform these tasks on our behalf and are contractually obligated not to disclose or use it for any other purpose.
  • Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities, including law enforcement agencies, courts, or regulatory bodies.
  • Business Transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal data may be transferred as part of that transaction. We will provide notice before your personal data is transferred and becomes subject to a different privacy policy.
  • With Your Consent: We may share your information for any other purpose with your explicit consent.

Data Security

We take the security of your personal data seriously and implement appropriate technical and organizational measures to protect it against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption: All data transmitted between your browser and our servers is encrypted using TLS/SSL protocols. Sensitive data at rest is encrypted using industry-standard AES-256 encryption.
  • Access Controls: We enforce strict role-based access controls, ensuring that only authorized personnel can access personal data, and only to the extent necessary for their role.
  • Regular Audits: We conduct regular security audits and vulnerability assessments, including third-party penetration testing, to identify and remediate potential risks.
  • Incident Response: We maintain a documented incident response plan to address any data breaches promptly and in compliance with applicable notification requirements.

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Your Rights

Depending on your location, you may have the following rights under applicable data protection legislation, including the General Data Protection Regulation (GDPR):

  • Right of Access: You have the right to request a copy of the personal data we hold about you.
  • Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data.
  • Right to Erasure: You have the right to request the deletion of your personal data, subject to certain legal exceptions.
  • Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller.
  • Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
  • Right to Restrict Processing: You have the right to request that we limit the processing of your personal data under certain circumstances.
  • Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact us using the details provided in the “Contact Us” section below. We will respond to your request within 30 days, as required by applicable law.

Cookies

Cookies are small text files placed on your device by our website. We use the following types of cookies:

  • Strictly Necessary Cookies: These cookies are essential for the operation of our website. They enable core functionality such as security, session management, and accessibility. These cookies cannot be disabled.
  • Analytics Cookies: These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. We use this data to improve our website and services.
  • Functional Cookies: These cookies enable enhanced functionality and personalization, such as remembering your language preferences or form entries.
  • Marketing Cookies: These cookies are used to track visitors across websites in order to display relevant advertisements. They may be set by us or by third-party advertising partners.

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of our website. For more information on managing cookies, visit aboutcookies.org.

Data Retention

We retain your personal data only for as long as is necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. The retention period may vary depending on the context and the nature of the data:

  • Account and contact data is retained for the duration of our business relationship and for up to 3 years after the relationship ends, unless a longer retention period is required by law.
  • Usage and analytics data is retained in an aggregated and anonymized form for up to 2 years.
  • Marketing communications data is retained until you unsubscribe or withdraw consent, after which it is deleted within 30 days.
  • Legal and financial records are retained for the period required by applicable laws and regulations, typically between 5 and 10 years.

When personal data is no longer required, we will securely delete or anonymize it in accordance with our data retention policies.

International Transfers

KompiTech operates globally with offices in the Czech Republic, the United Kingdom, Germany, and the United States. Your personal data may be transferred to and processed in countries outside of your country of residence, including countries that may not provide the same level of data protection as your home jurisdiction.

When we transfer personal data from the European Economic Area (EEA), the United Kingdom, or Switzerland to countries that have not been deemed to provide an adequate level of data protection, we rely on appropriate safeguards, including:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • UK International Data Transfer Agreement (IDTA) or UK Addendum to the EU SCCs, as applicable
  • Binding Corporate Rules where applicable
  • Other legally recognized transfer mechanisms or derogations under applicable data protection law

You may request a copy of the safeguards we use for international data transfers by contacting us at the address below.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by posting the updated policy on this page and revising the “Last Updated” date at the top. We encourage you to review this page periodically to stay informed about how we are protecting your data.

Your continued use of our website and services after any changes to this Privacy Policy constitutes your acceptance of the updated terms.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

  • Email: [email protected]
  • Address: KompiTech s.r.o., Husitska 107/3, Prague 130 00, Czech Republic

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.