1. Data Controller
The data controller is Datanius s.r.o., Reg. No. (IČO): 30066786, Dandova 2619/13, Horní Počernice, 193 00 Prague 9, Czech Republic, registered in the Commercial Register of the Municipal Court in Prague, Section C, File 456770. Contact: hello@datanius.com.
This Privacy Policy applies to datanius.com and all applications and services operated by Datanius s.r.o.
2. Data We Process, Purposes, and Legal Bases
| Data Category | Purpose | Legal Basis |
|---|---|---|
| Contact Form (name, email, message) | Responding to your inquiry or request | Art. 6(1)(b) GDPR (pre-contractual steps) & Art. 6(1)(f) (legitimate interest) |
| Account Data (email, password hash, profile) | Account management and service delivery | Art. 6(1)(b) GDPR (performance of a contract) |
| User Content (texts, dictionaries, media) | Storing, rendering, and syncing your content | Art. 6(1)(b) GDPR (performance of a contract) |
| AI Training & R&D (de-identified content & text corpora) | Training and fine-tuning language models disconnected from your identity | Art. 6(1)(f) GDPR (legitimate interest in technological innovation) |
| Behavioral Analytics & Targeted Ads (interests, browsing patterns) | Content personalization and serving internal campaigns for commercial Merchants | Art. 6(1)(a) GDPR (your voluntary consent) |
| Aggregated Market Data (anonymized summary reports for Merchants) | Consumer trend compilations and market analytics | Fully anonymized data (outside the scope of GDPR) |
| Marketing Emails | Sending product updates and newsletters | Art. 6(1)(a) GDPR (consent) or statutory customer exemption |
| Technical Logs & Security (IP addresses, session tokens) | System security, abuse prevention, and rate-limiting | Art. 6(1)(f) GDPR (legitimate interest in infrastructure security) |
No Sale of Personal Records: We do not sell, rent, or disclose your raw personal records (such as names, emails, or personal activity history) to third parties or Merchants.
3. Recipients and Subprocessors
We share data only with vetted subprocessors necessary to deliver our services:
- Hosting & Infrastructure: Cloudflare, Inc., Hetzner Online GmbH, netcup GmbH
- Email Delivery: ActiveCampaign, LLC (Postmark)
- AI Technologies: Google LLC, OpenRouter, Inc., Fireworks AI, Inc. (prohibited from training public models on submitted data)
An up-to-date directory is available on our Subprocessors page.
4. International Data Transfers
When data is processed outside the EEA (notably in the USA), transfers rely on the European Commission’s adequacy decision (EU–US Data Privacy Framework) or Standard Contractual Clauses (SCCs).
5. Retention Periods
- Accounts & User Content: Retained for the duration of your account and up to 30 days in backup archives following deletion.
- Data Embedded in AI Models: Model weights, embeddings, and architectures trained on de-identified data cannot be retroactively extracted or erased.
- Contact Inquiries: Retained for up to 24 months from resolution.
- Analytics & Ad Profiling Data: Until consent is withdrawn, and at most 14 months.
6. Your Rights
You have the right to access, rectify, erase, restrict processing, data portability, object to processing, and withdraw consent at any time. To exercise these rights, email hello@datanius.com. See our GDPR guide for details.
You also have the right to lodge a complaint with the Czech Data Protection Authority (uoou.gov.cz) or your local EU supervisory authority.
7. Protection of Minors
Our services featuring ad profiling and behavioral targeting are not intended for individuals under 16 years of age. We do not profile or target ads to minors.
8. Prevailing Language
This policy is published in English, Czech, and Slovak. In the event of any conflict, the English version shall prevail.
Annex — what each service processes
| Service | Personal data | Notes |
|---|---|---|
| datanius.com | Contact form entries; analytics with consent | As described above |
| Osmičky (ws.datanius.com) | Optional account: email, name, password hash; dictionaries, puzzles and game results; a recipient’s address when you email a puzzle; newsletter only with consent; push subscription if you allow it; words typed into a dictionary, sent to Google Gemini for suggestions; words and dictionaries, without a link to your account, used to improve suggestions and develop products, including with language models; anonymous cookieless visit counts, and a visitor ID and session recording only with consent | Account optional; full detail in its own privacy policy |
| Freefall | Account email, password hash; places you save | In development |
| Band Practice | Account email, password hash; recordings and comments you upload; band membership | In development |
| Meal Prep | Account email, password hash; your plans, recipes and pantry | In development |
An entry is added here before a service starts collecting anything.
This document is available in English, Czech and Slovak. In case of any conflict, the English version prevails to the extent permitted by law.
Company details
Datanius s.r.o.
Registered office: Dandova 2619/13, Horní Počernice, 193 00 Praha 9, Czech Republic
Company No.: 30066786
Registered in the Commercial Register kept by the Municipal Court in Prague, section C, file 456770.
hello@datanius.com