Privacy policy

This page explains, in plain terms, what personal data RoadLegal.cz processes and why. It is not a substitute for legal advice; if you need a fully tailored GDPR notice, please consult a lawyer.

Who we are

RoadLegal.cz is the data controller for the personal data described below. You can reach us at info@roadlegal.cz for any privacy question or to exercise your rights.

What we collect, and why

Lead/contact forms

When you submit the build-sheet or TP-registration form, we collect your name, email, phone (optional), and details about your vehicle/plans, to respond with an assessment and a quote. Legal basis: performance of a contract / pre-contractual steps taken at your request (Art. 6(1)(b) GDPR).

Forum account

If you register on the forum, we store your email, a display name, and your posts. Legal basis: performance of a contract (the forum's terms of use, Art. 6(1)(b) GDPR). See the forum rulesfor what is and isn't allowed.

AI legality-search tool

The free-text question you type is sent to our AI provider (Anthropic) to generate an answer, including a web search of public sources. We also store a hashed (irreversible) version of your IP address for 24 hours, purely to enforce the daily question limit; we do not store the question itself beyond what is needed to generate the answer. Legal basis: legitimate interest in preventing abuse of a free tool (Art. 6(1)(f) GDPR).

Analytics

We use Vercel Web Analytics, a cookieless, privacy-preserving analytics tool that does not use cookies or identifiers to track you across sites. No consent banner is required for this, but we mention it here for transparency.

Who processes data on our behalf

We use the following processors, each under their own data processing terms: Supabase (database and forum authentication), Resend (transactional email delivery), Vercel (hosting and analytics), and Anthropic (the AI search tool). Some of these providers may process data outside the EU/EEA; where that is the case, they rely on mechanisms such as the EU Standard Contractual Clauses to provide an adequate level of protection.

AI Act transparency note

Answers from the AI tool are clearly labeled as AI-generated and unverified in the interface, in line with transparency requirements for AI systems that generate content (EU AI Act, Art. 50). They are not a substitute for a legal/technical assessment by an accredited body.

How long we keep data

Lead-form submissions are kept for as long as needed to respond to your request and, where a service is provided, for the statutory retention period for business records. Forum accounts and posts are kept until you ask us to delete them or close your account. The IP-hash rate-limit record for the AI tool is automatically cleared after 24 hours.

Your rights

Under the GDPR, you can ask us to access, correct, delete, or export your personal data, and you can object to processing based on legitimate interest. Contact info@roadlegal.cz for any of these requests. You can also lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.cz).

Cookies

We use only strictly necessary cookies: one to remember your language preference, and Supabase's authentication cookies if you log in to the forum. Neither requires consent under the ePrivacy rules, since they are essential to the site's functioning and not used for tracking or advertising.