Effective from August 12, 2026
Privacy Policy
This policy describes which personal data we process when you visit ptbk.io or use the Promptbook services, why we do it, and which rights you have.
1.Who processes your data
The controller of your personal data is AI Web s.r.o., company number 21012288, registered in the Czech commercial register, which operates the ptbk.io website and the Promptbook services.
For anything concerning personal data, reach us at privacy@ptbk.io or through the Czech data box hzuu4yn.
We have not appointed a data protection officer, because the law does not require us to.
2.Which data we process
We process only the data you give us yourself and the data which arises automatically from your visit.
- Data from forms: name, e-mail address, phone number, company name, billing details, and the message you write to us.
- Data about an event registration: the chosen date, the number of participants, the format, and any discount code.
- Technical data about the visit: IP address, browser type and language, device type, visited pages, time of the visit, and the page you came from.
- Data from cookies and measurement tools, to the extent you consent to.
3.Why we process the data
Every processing has its purpose and its legal basis.
- To answer you and agree on working together - based on pre-contractual negotiations and our legitimate interest in replying to an enquiry.
- To register you for a workshop or another event, issue an invoice, and send you the materials - based on the performance of the contract and our legal obligations.
- To send you news - based on your consent, which you may withdraw at any time.
- To understand how the website works and what visitors care about - based on your consent to analytics cookies.
- To measure the effectiveness of our advertising - based on your consent to marketing cookies.
- To meet our legal obligations, mainly accounting and tax ones.
4.How long we keep the data
- Data from enquiry and registration forms for the duration of the negotiations and then three years from the last contact.
- Accounting documents for ten years, as the law requires.
- The contact for sending news until you withdraw your consent.
- Data in analytics and marketing tools according to the settings of the given tool, at most 26 months.
5.Who we share the data with
We do not sell personal data. We share it only with processors who help us run the website and the services, and always only to the extent needed.
- Supabase - the database which holds the contacts from the forms.
- Google Analytics - measuring website traffic.
- Meta Pixel - measuring the effectiveness of advertising on Facebook and Instagram.
- LogRocket - a recording of behaviour on the website which helps us find bugs.
- YouTube - playback of embedded videos.
- Providers of the e-mail, calendar, and invoicing services we use to run the company.
6.Cookies and measurement technologies
Necessary cookies keep the website working and are always stored. Analytics and marketing cookies are stored only with the consent you give in the cookie bar.
You can change your choice at any time in the cookie settings or by deleting the cookies in your browser.
7.Transfers outside the European Union
Some of our processors are based in the United States. We transfer data to them under the standard contractual clauses approved by the European Commission, or under their certification in the EU-US Data Privacy Framework.
8.How we protect the data
Only the people who need it for their work have access to the data. We transfer data encrypted and protect it in the database with access rules at the level of individual records.
9.Which rights you have
You have the following rights regarding your personal data:
- To know which data we process about you and to get a copy of it.
- To have inaccurate data corrected.
- To have the data erased when we have no further reason to process it.
- To restrict the processing or to object to it.
- To receive your data in a machine-readable format and pass it to another controller.
- To withdraw the consent you gave us at any time; the processing before the withdrawal stays lawful.
- To complain to the supervisory authority.
10.How to exercise your rights
Just write to privacy@ptbk.io. We answer within one month at the latest. The steps for deleting your data are described in detail in the data deletion instructions.
If you believe we do not handle your data properly, you can turn to the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz.
11.Changes to this policy
We may amend this policy, for example when we start using a new tool. The current wording is always on this page and carries its effective date.