Privacy Policy

AMUI Design

Final Czech legal entity name, legal form, registered office, company identification number and VAT details: to be inserted after registration.

Privacy contact: info@amuidesign.org

Data processed

• Name and email address.
• Preferred communication language.
• Project description.
• Phone number, if supplied.
• Company or website details, if supplied.
• Files attached by the visitor.
• Relevant technical and security information, including a verification token and, where available, IP address.

Purposes

• Reviewing and responding to enquiries.
• Assessing proposed work and whether AMUI may be able to help.
• Taking steps requested before entering into a contract, where applicable.
• Protecting the form and service against spam, abuse and security threats.

Legal bases

Taking steps at the visitor's request before entering into a contract, where applicable; and AMUI's legitimate interests in responding to genuine enquiries, assessing potential projects and protecting its systems, where those interests are not overridden by the visitor's rights. The final allocation of each purpose to a legal basis must be reviewed before publication.

Retention

The final enquiry, unsuccessful-prospect and attachment retention periods—and the criteria for retaining messages that develop into a client relationship—must be established before publication.

The contact form uses Cloudflare Turnstile to distinguish legitimate visitors from automated abuse. Turnstile runs browser-side checks and produces a verification token. The AMUI server sends that token and, when available, the visitor's IP address to Cloudflare's Siteverify service.

Cloudflare states that Turnstile processes signals needed for this security function and does not access form entries or visitor communications. The Cloudflare account owner, applicable contractual terms and retention details must be confirmed before publication.

The website is intended to be hosted by Vercel Inc. Vercel infrastructure may process request information needed to deliver, secure and operate the website, including IP address, request metadata, device or browser information and function logs.

The production account, hosting region, plan, log retention, firewall configuration, Log Drains, subprocessors and applicable data-processing terms must be confirmed before publication.

The website sends contact enquiries through Resend. The enquiry fields and any attachment are transferred to Resend through its email API and then delivered to info@amuidesign.org.

The Resend account owner, applicable DPA and transfer safeguards, message and attachment retention, deletion procedure, and the mailbox provider must be confirmed before publication.

Attachments are optional and limited by type and size. AMUI's application code reads an attachment into server memory, converts it for email transmission and forwards it to Resend. It does not deliberately write an enquiry or attachment to an application database, local filesystem or object-storage service.

This does not establish whether hosting or email infrastructure temporarily buffers or retains a copy. Those provider-level details must be verified before publication.

The main website currently integrates Vercel Web Analytics and Vercel Speed Insights. They load only after a visitor chooses “Allow analytics” in Cookie settings. The choice is stored locally in the visitor's browser and can be changed from the footer.

Vercel states that Web Analytics is cookie-less, stores anonymised aggregate data and identifies a visitor using a request-derived hash that resets after 24 hours. Speed Insights reports real-user performance measurements to Vercel. AMUI nevertheless gates both services behind its analytics choice.

A direct Google Analytics 4 page-view foundation is integrated in source using the deployment-provided `NEXT_PUBLIC_GA_MEASUREMENT_ID`. It is eligible only in Production after explicit analytics consent; Google Analytics does not load before consent. Production collection, account settings, retention and transfer safeguards remain subject to runtime and account verification. Google Signals, advertising features, User-ID, user-provided data and custom AMUI business events are not enabled.

Legacy Google Tag Manager and Webnode event-transmission code have been removed from the archived page. Any future analytics added to that archive must use the same consent and production-environment controls as the main website.

Depending on the interaction and selected settings, personal data may be available to authorised AMUI personnel and providers supporting hosting, website security, email delivery, mailbox operation and consented analytics. A final processor and subprocessor list must be confirmed against the production accounts.

Some providers may process data outside the Czech Republic or European Economic Area, including in the United States. Before publication, AMUI must confirm the actual processing locations and the applicable mechanism for each restricted transfer, such as an adequacy decision, the EU Standard Contractual Clauses and any supplementary measures.

Vercel's current DPA describes EU Standard Contractual Clauses for relevant transfers. Equivalent details must be verified for every provider actually used.

Subject to the conditions and limits in applicable data-protection law, individuals may request:

• Access to their personal data.
• Correction of inaccurate or incomplete data.
• Erasure.
• Restriction of processing.
• Objection to processing based on legitimate interests.
• Data portability where applicable.
• Withdrawal at any time where consent is the basis, without affecting earlier lawful processing.

Requests may be sent to info@amuidesign.org. Individuals may also lodge a complaint with the Czech supervisory authority, Úřad pro ochranu osobních údajů. Final authority contact details should be checked when the notice is published.

Required form fields are necessary for AMUI to understand and answer an enquiry. The phone number, company or website and attachment are optional. If required information is not provided, AMUI may be unable to assess or respond through the form.

This notice will be updated when the Czech entity is registered, provider details are confirmed, retention periods are approved, or the website's processing changes materially.

Expanded pre-launch draft prepared 2 September 2026.