Effective from 5 October 2026.

Privacy and Cookie Policy

1. Who processes your data

The controller of your personal data is František Dron s.r.o., Company ID 08181900, VAT ID CZ08181900, with its registered office at Tlumačovská 2766/26, 155 00 Praha 5 – Stodůlky, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 314357.

Contact for everything concerning personal data: honza@frantisekdron.cz, tel. +420 723 707 958.

2. What data we process, why and for how long

Enquiries and communication with you

Data: name, email, phone number, information about the property or project, message text, the page from which you submitted the enquiry, and any other data you send us yourself by email, phone or WhatsApp.
Purpose: so that we can respond to your enquiry, prepare a quote, agree on a date and carry out the order.
Legal basis: negotiation and performance of a contract (Art. 6(1)(b) GDPR).
Retention: for the duration of the negotiations and thereafter for no more than 3 years from the last communication, so that we can follow up on previous cooperation. Data from completed orders is retained for the period required by accounting and tax regulations.

Invoicing and accounting

Data: identification and billing details, order and payment details.
Purpose and legal basis: compliance with legal obligations (Art. 6(1)(c) GDPR), in particular under the Czech Accounting Act (zákon o účetnictví) and the Czech VAT Act (zákon o DPH).
Retention: for the period laid down by these regulations; 10 years for tax documents.

Website chat (AI assistant)

Data: the content of the conversation and a random browser identifier, which is stored only at the moment you use the chat so that the conversation can continue.
Purpose: to answer questions about our services and to improve the assistant's answers.
Legal basis: our legitimate interest in prompt communication with visitors (Art. 6(1)(f) GDPR).
Who processes it: the answers are generated by a language model from Google, to which we connect through the Lovable AI Gateway service.
Retention: for no more than 24 months.

Please do not enter sensitive data in the chat (health information, national identification numbers, bank account numbers and the like).

Website traffic (our own measurement)

Data: the page visited, the referring page, browser type, screen width and IP address. If you consent to analytics cookies, we also store a random identifier in your browser so that we can tell repeat visits apart. Without your consent, we do not store any identifier.
Purpose: aggregate traffic statistics and protection of the website against abuse.
Legal basis: legitimate interest (Art. 6(1)(f) GDPR); the identifier in your browser only with your consent.
Retention: for no more than 24 months.

Cookies and similar technologies

We store some data directly in your browser (cookies, local storage). We divide them into three groups:

Necessary – remembering your cookie choice and logging in to the administration. The website does not work properly without them, so they do not require consent.
Analytics (only with consent) – Google Analytics 4 and our visit identifier. They help us understand which pages people read and where they come from.
Marketing (only with consent) – Google Ads (measuring whether an ad led to an enquiry, and remarketing, i.e. showing our ads to people who have visited the website). If we start using Meta Pixel (Facebook, Instagram) or the LinkedIn Insight Tag, they will likewise run only with this consent.

Until you give consent, Google does not store any cookies in your browser. Its tags may only send a signal without cookies and without an identifier (Google Consent Mode), which Google uses to estimate website traffic and ad performance in aggregate.

fd_cookie_consent (local storage): ProviderFrantišek Dron; Purposestoring your choice; Durationuntil you change your choice
fd_visitor_id (local storage): ProviderFrantišek Dron; Purposedistinguishing repeat visits (analytics) / continuing the chat; Durationuntil deleted in the browser
_ga, _ga_*: ProviderGoogle; Purposevisitor statistics (analytics); Durationup to 2 years
_gcl_au: ProviderGoogle; Purposemeasuring conversions from ads (marketing); Duration90 days
_fbp: ProviderMeta; Purposemeasurement and remarketing, if Meta Pixel is active (marketing); Duration90 days
li_*, bcookie: ProviderLinkedIn; Purposemeasurement and remarketing, if the LinkedIn Insight Tag is active (marketing); Durationup to 1 year

Cookie	Provider	Purpose	Duration
fd_cookie_consent (local storage)	František Dron	storing your choice	until you change your choice
fd_visitor_id (local storage)	František Dron	distinguishing repeat visits (analytics) / continuing the chat	until deleted in the browser
_ga, _ga_*	Google	visitor statistics (analytics)	up to 2 years
_gcl_au	Google	measuring conversions from ads (marketing)	90 days
_fbp	Meta	measurement and remarketing, if Meta Pixel is active (marketing)	90 days
li_*, bcookie	LinkedIn	measurement and remarketing, if the LinkedIn Insight Tag is active (marketing)	up to 1 year

Legal basis: your consent (Art. 6(1)(a) GDPR and Section 89(3) of the Czech Electronic Communications Act (zákon o elektronických komunikacích)).
Retention: as shown in the table. We retain data in Google Analytics for no more than 14 months and remarketing lists for no more than 540 days.
Changing or withdrawing consent: at any time via the “Cookie settings” link in the website footer. Withdrawal does not affect processing carried out before it.

We do not sell your data. The following processors help us with it, always only to the extent necessary for the given service:

Lovable and Supabase – operation of the website, the enquiry database, the chat and statistics,
Encited – technical pre-rendering of pages for search engines (processes the visitor's IP address),
WEDOS Internet, a.s. – email mailboxes,
Resend – sending email notifications about new enquiries,
Twilio – notifications about new enquiries via WhatsApp,
Google – Google Analytics and Google Ads (cookies only with consent) and the chat language model,
Meta and LinkedIn – only with consent and only if we use their tools,
accountant and tax advisor – processing of accounting records.

We may also disclose data to public authorities where the law requires us to do so.

4. Transfers outside the European Union

Some processors (for example Google, Meta, LinkedIn, Twilio, Resend and Supabase) may also process data in the USA. Transfers take place on the basis of a decision of the European Commission on an adequate level of protection (EU–US Data Privacy Framework) or standard contractual clauses.

5. Your rights

You have the right:

to access your data and obtain a copy of it,
to rectification of inaccurate data,
to erasure, if we no longer need the data or the processing has no legal basis,
to restriction of processing,
to data portability,
to object to processing based on legitimate interest,
to withdraw your consent at any time,
to lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, www.uoou.cz.

Send your request to honza@frantisekdron.cz. We will handle it without undue delay and at the latest within one month.

6. Automated decision-making

We do not make decisions about you by automated means that produce legal or similarly significant effects. With your consent, advertising systems (Google and, where applicable, Meta and LinkedIn) may personalise which ads you see.

7. Changes to this policy

We may update this policy. The current version can always be found on this page.