1. Scope of this policy
This policy explains how Adam Červinka, trading as ADAMS — AI Solutions, handles personal data when you visit this website, send an enquiry, request a proposal or use consulting, automation, integration, AI-agent, chatbot, voice-agent, scheduling, website or support services.
It applies to prospective clients, clients, their representatives and other people whose data is provided in connection with a project. A project-specific agreement or data-processing agreement may provide additional information.
2. Data controller and contact
The controller for website enquiries and direct business relationships is Adam Červinka, Company ID 14314754, Horní náměstí 409/14, 165 00 Prague–Lysolaje, Czech Republic.
Privacy enquiries and requests can be sent to adam@adamsais.com.
3. Roles in client projects
For ordinary business administration, proposals, invoicing and direct communication, ADAMS acts as the data controller. When personal data is processed only on a client’s documented instructions inside a workflow, bot, agent or connected system, the client will normally remain the controller and ADAMS will act as a processor.
The parties will define their roles, security requirements, approved providers, retention and deletion responsibilities in the proposal, service agreement or a separate data-processing agreement where required.
4. Personal data that may be processed
Depending on the enquiry or agreed project, the following categories may be processed:
- identity and contact details, including name, role, company, email address and phone number;
- enquiry, proposal, contract, billing and project-management information;
- messages, files, recordings, transcripts, booking details and other content deliberately supplied for a project;
- account identifiers and configuration data for connected services;
- technical data such as IP address, browser, timestamps, delivery status, error reports and security logs;
- end-user or customer data processed within a client system when the agreed solution requires it.
5. Sensitive information and credentials
Special-category or highly sensitive data is not intentionally requested unless the project expressly requires lawful processing and appropriate safeguards. Do not send passwords, private keys, full payment-card details, government identifiers or production access tokens through the website or ordinary email.
Where system access is necessary, credentials and secrets should be shared through an agreed secure method and limited to the minimum permissions needed.
6. Sources of personal data
Data is obtained directly from you, from the organisation you represent, from people authorised by the client, from connected systems selected for the project and from service providers that deliver communications or technical infrastructure.
Public business information may be used where reasonably necessary to understand an enquiry or prepare a proposal.
7. Purposes of processing
Personal data may be processed to:
- respond to enquiries and arrange consultations;
- prepare proposals, contracts and project documentation;
- design, configure, test, operate, support and secure agreed solutions;
- manage bookings, communications, invoices and business records;
- detect errors, abuse, fraud and security incidents;
- improve service quality using appropriately limited project information;
- establish, exercise or defend legal claims and comply with legal obligations.
8. Legal bases under GDPR
Processing is based on steps requested before entering into a contract and performance of a contract, compliance with legal obligations, legitimate interests in operating and securing the business and services, or consent where the law requires it.
Where processing relies on consent, it can be withdrawn at any time without affecting processing that was lawful before withdrawal.
9. Communication, AI and platform providers
Projects may connect services such as email, web hosting, cloud infrastructure, CRM and scheduling systems, WhatsApp or Instagram through Meta, Telegram, telephony and voice providers, automation platforms and AI-model providers. Only providers relevant to the agreed solution are used.
These providers may process identifiers, message content, metadata or technical data under their own terms or as contracted processors. Platform operators may also act as independent controllers for their own account, security and network operations.
10. Sharing and processors
Data is shared only where necessary with approved hosting, cloud, communications, automation, AI, accounting, security or professional-service providers, with a client’s selected providers, or where disclosure is required by law.
Personal data is not sold. Providers acting as processors are expected to follow confidentiality, security and data-protection obligations appropriate to their role.
11. International transfers
Some technology providers may process data outside the European Economic Area. Where GDPR requires it, transfers rely on an adequacy decision, Standard Contractual Clauses or another lawful safeguard, together with supplementary measures where appropriate.
The providers and transfer arrangements for a client solution can be documented in the relevant project materials or data-processing agreement.
12. Retention
Unsuccessful enquiries are normally retained for up to 12 months after the last meaningful contact. Project communications and operational records are retained for the duration of the relationship and normally up to 3 years afterwards where needed for support, continuity or legal claims. Technical and security logs are normally kept for up to 90 days unless an incident requires longer investigation.
Contracts, invoices and accounting or tax records are retained for the periods required by Czech law. Client-controlled project data follows the agreed retention and deletion instructions. Backups may remain for a limited rolling period until securely overwritten.
13. AI-assisted processing
AI systems may help classify, summarise, draft, route or respond to information according to the agreed workflow. Appropriate instructions, access controls, testing and human review are selected according to project risk.
ADAMS does not use website enquiries or client data to train a general-purpose AI model. No decision producing legal or similarly significant effects is made solely by ADAMS through automated processing unless a lawful, separately documented project explicitly provides for it.
14. Security
Reasonable technical and organisational measures are used according to the nature of the project, including access limitation, secure credential handling, provider controls, logging, backups where agreed and separation of development and production access where practical.
No internet, messaging or AI system can be guaranteed completely secure. Suspected incidents affecting a client project should be reported promptly to adam@adamsais.com.
15. Your rights
Subject to GDPR conditions and exceptions, you may request access, correction, deletion, restriction, portability or object to processing. You may also withdraw consent where processing relies on consent.
- Requests should be sent to adam@adamsais.com with enough information to identify the relevant relationship or project.
- Identity may be verified before a request is completed.
- If ADAMS processes data only for a client, the request may be forwarded to or coordinated with that client as controller.
16. Complaints
Please contact adam@adamsais.com first so the concern can be addressed. You also have the right to complain to the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ) or another competent supervisory authority.
18. Children, changes and contact
The services are intended for businesses and adult users and are not directed to children. This policy may be updated when services, providers or legal requirements change. The effective date at the top identifies the current version.
Controller: Adam Červinka, Company ID 14314754, Horní náměstí 409/14, 165 00 Prague–Lysolaje, Czech Republic. Email: adam@adamsais.com.