Privacy Policy

This policy explains how we protect your privacy when you visit this website and register for the AI for Business 2026 conference (4 November 2026, Prague), what personal data we process, why, and what rights you have. We take the protection of personal data seriously and comply with the applicable rules, in particular the General Data Protection Regulation (GDPR).

Who we are

AI for Business 2026 is organised by the Czech National AI Platform (CNAIP). The legal entity that represents the event throughout – it registers attendees, sells the tickets, issues the invoices and is the controller of your personal data – is:

prg.ai, z. s., Company ID (IČO) 08345091, registered in the Register of Associations kept by the Municipal Court in Prague, Section L, Insert 72281, with its registered office at Staroměstské náměstí 1/4, Staré Město, 110 00 Praha 1, Czech Republic (“we”).

For anything concerning your personal data, write to info@prg.ai. Questions about the event, your registration or your invoice go to lenka@prg.ai.

What we process and why

Registration and tickets

When you register, you give us your name, organisation, email address, the tickets you chose, the sessions you are interested in and, if you enter it, your Czech company ID (IČO) for the invoice. We also record when you registered and whether you attended the event. We use this to register you, to let you attend, to organise the event (for example to plan rooms with the session leads) and to send you information about it, including a confirmation email. The legal basis is the conclusion and performance of a contract (Art. 6(1)(b) GDPR).

Payment and invoicing

Payments are handled by Stripe on its own secure page, so your card details never reach us. Stripe passes us the billing name, company and address you enter there, the discount code you used, if any, and whether the payment went through, and it issues your invoice. The legal basis is the performance of a contract and our obligations under Czech accounting and tax law (Art. 6(1)(b) and (c) GDPR).

Photos and video

We take photos and video recordings at the event and use them to present the event and the project. Taking part in the event includes agreeing to this, and you give your consent at registration (Art. 6(1)(a) GDPR). You can withdraw it at any time by writing to us; this does not affect what was used before the withdrawal.

News and invitations

If you tick the box at registration, we use your name and email address to send you news and invitations to events from prg.ai and Dny AI. The legal basis is your consent (Art. 6(1)(a) GDPR), which is optional. You can withdraw it at any time by writing to us, and we will stop sending them.

This website

The website sets no cookies of its own. The sessions you save to My programme are kept only in your own browser and are never sent to us; a share link and a calendar link contain just the codes of the sessions. To deliver the site securely, our hosting provider automatically records technical data such as your IP address, browser type and the time of your visit in its server logs. We use them to run, administer and protect the website.

To see how many people visit the site and how they find it, we use two tools:

Vercel Web Analytics works without cookies and without identifying you: it counts page views and records the page, the referring website, the country and the type of device and browser. It does not keep your IP address or follow you across other websites. The legal basis is our legitimate interest in knowing how the site is used (Art. 6(1)(f) GDPR); you can object to it at any time.
Google Analytics (Google Ireland Limited; Google LLC in the United States) runs only if you accept it in the cookie banner. It sets the cookies _ga and _ga_SJ3LS2BR93 (up to 2 years) and collects pseudonymous usage data: pages viewed, time on the site, how you arrived, approximate location, device and browser. We use it for statistics only: advertising features and personalised ads are switched off. Until you accept, nothing is loaded from Google and no data is sent to it. The legal basis is your consent (Art. 6(1)(a) GDPR and the Czech act on electronic communications). Transfers to the United States rely on the EU–US Data Privacy Framework.

Cookie settings: you can change or withdraw your consent at any time, as easily as you gave it. Withdrawing stops the measurement and deletes Google’s cookies from your browser. Your choice is remembered in your own browser, so that we don’t ask again on every visit.

Legal obligations and claims

We may also process your data where the law requires it, to show that we have met our obligations, to deal responsibly with any claims you may have and to protect our rights and interests. The legal basis is compliance with a legal obligation (Art. 6(1)(c) GDPR) or our legitimate interest (Art. 6(1)(f) GDPR).

Who else processes your data

We use these providers, who process data only on our behalf and only to the extent they need for their task:

Stripe (Stripe Payments Europe, Ltd., Ireland) – payments and invoices
Google (Google Workspace) – the list of registrations and confirmation emails
Vercel (Vercel Inc.) – website hosting and cookie-free visit statistics
Google (Google Ireland Limited) – Google Analytics, only with your consent

All of them are bound by confidentiality and by the data protection rules that apply in the EU. Some are based in the United States or may process data there; such transfers rely on the EU–US Data Privacy Framework or on the European Commission’s standard contractual clauses.

The CNAIP team that organises the event and the session leads may receive the information they need to run it – session leads typically just the number of people interested in their session. We disclose personal data to public authorities only where the law requires it and only to the required extent, and to third parties (mainly public authorities) where this is necessary to establish, exercise or defend a legal claim.

How we protect it

Only the people who need your data for their work can access it, and all of them, our providers included, are bound by confidentiality. Data travels over encrypted connections, and the keys and passwords to our systems are never stored in the website itself.

How long we keep it

Registration data: until the event is over and all obligations from the contract, such as refunds or questions about invoices, have been settled. We may keep it longer where we need it to meet a legal obligation or to protect our rights, at the latest until the relevant limitation period expires.
Invoices and accounting records: for the period required by Czech accounting and tax law.
Photos and video: for as long as we use them to present the event, or until you withdraw your consent.
News and invitations: until you unsubscribe or withdraw your consent.
Server logs: for the short period set by our hosting provider.
Google Analytics data: for the retention period set in our Google Analytics account, no longer than 14 months. The cookies expire after at most 2 years or when you withdraw your consent.

Your rights

You can exercise any of these rights free of charge. Whether a particular right applies may depend on the circumstances, for example on how we obtained the data.

Ask whether we process your personal data and get access to it, including why we process it, which categories of data, who receives it and how long we keep it.
Have your data corrected, erased or its processing restricted, for example if it is incomplete or inaccurate, no longer needed, or if you have withdrawn your consent or objected to the processing. Where our providers process the data for us, we pass your request on to them.
Receive the data you gave us in a structured, commonly used, machine-readable format and have it transferred to another controller, where technically feasible.
Object to processing based on our legitimate interest. If your interests prevail, we stop the processing.
Refuse or withdraw your consent at any time, without affecting the processing before the withdrawal.
Not be subject to a decision based solely on automated processing that has legal or similarly significant effects on you. We make no such decisions.

To exercise a right, or with any questions or complaints, write to info@prg.ai – in a way that lets us verify your identity. You also have the right to lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.gov.cz).

Last updated: 6 October 2026