Privacy Policy

1. Controller

• Name: Montei cz s.r.o.
• Registered office: Vrchlického 439/29, 150 00 Praha 5, Czech Republic
• Company ID (IČO): 24903396
• VAT ID (DIČ): CZ24903396
• Email: hello@montei.digital
• Phone: +420 775 915 612

We have not appointed a Data Protection Officer; we are not legally required to do so. The contact above is your main point of contact for any privacy matter.

2. What we collect and why

We process the following categories of personal data:

• Site analytics (consent-based): When you grant analytics consent through our cookie banner, we collect product analytics events via PostHog (page views, clicks, session duration, device and browser metadata, an internal distinct_id) and Google Analytics 4 (page views, traffic source, approximate location at city level, similar device data). These are used to understand how the site is used and improve it.
• Marketing pixels (consent-based): When you grant marketing consent, third-party advertising and remarketing pixels may load through our Google Tag Manager container. As of the date above, no marketing pixels are active.
• Error events (consent-based): If you grant analytics consent, JavaScript errors that occur in your browser may be sent to PostHog with a stack trace, page URL, and basic browser info, so we can fix bugs.
• Contact form: If you submit our contact form, we receive your name, email address, and message in order to reply. We do not enrich, profile, or sell this data.
• Strictly necessary technical data: We store a small montei_consent cookie that records your cookie preferences, and a NEXT_LOCALE cookie set by our internationalisation library to remember your language choice. Our hosting provider receives the IP address of every request to operate and secure the service.

We do not sell personal data, we do not run automated decisioning that produces legal effects on you, and we do not target children below the age of 16.

3. Legal basis (Article 6 GDPR)

• Article 6(1)(a) - Consent: Site analytics, error events, and marketing pixels are processed only with your explicit consent given through the cookie banner. You can withdraw consent at any time (see section 8).
• Article 6(1)(b) - Pre-contractual measures / contract performance: Processing of data you submit through our contact form, in order to respond to your inquiry.
• Article 6(1)(f) - Legitimate interest: Processing the strictly necessary montei_consentcookie (which records the consent itself) and our hosting provider's IP-level security logging.

4. Recipients and processors

We use the following processors, who process personal data on our behalf:

• PostHog Inc. (United States) - product analytics. Data is stored on PostHog EU Cloud (servers in Frankfurt, Germany), so customer data does not leave the EU under normal operation.
• Google Ireland Ltd. (Ireland) - Google Analytics 4 and Google Tag Manager. Sub-processor is Google LLC (United States).
• Fly.io, Inc. (United States) - application hosting. Requests are served from the European region; access logs are retained briefly for security.

5. International transfers

PostHog data is hosted in the EU, so analytics events do not normally leave the EU. PostHog Inc. and Fly.io Inc. are nonetheless US-based companies with potential administrative access to the systems holding data. Transfers to the United States are protected by Standard Contractual Clauses (Module 2 / Module 3, as applicable) and supplementary measures such as encryption at rest. Google Analytics may transfer data outside the EU; Google publishes its SCCs and EU–US Data Privacy Framework certification at policies.google.com/privacy.

6. Retention

• PostHog analytics events: 12 months (PostHog default).
• Google Analytics 4 events: 2 months (the GA4 minimum, set in our property configuration).
• Contact form messages: until your inquiry is resolved and a reasonable follow-up period; typically deleted from our inbox within 12 months.
• montei_consent cookie: 12 months from your last interaction with the cookie banner.
• NEXT_LOCALE cookie: 12 months.

7. Your rights under GDPR

You have the following rights with respect to your personal data:

• Right of access (Art. 15) - to obtain a copy of personal data we hold about you.
• Right to rectification (Art. 16) - to correct inaccurate data.
• Right to erasure (Art. 17) - to ask us to delete your data, subject to legal exceptions.
• Right to restriction (Art. 18) - to limit how we use it.
• Right to data portability (Art. 20).
• Right to object (Art. 21) - including the right to object to processing based on legitimate interest.
• Right to lodge a complaint with a supervisory authority - in the Czech Republic, the Office for Personal Data Protection (ÚOOÚ). EEA residents may also file with their national authority.

To exercise any of these rights, write to hello@montei.digital. We will respond within one month.

8. Withdrawing consent

You can change or withdraw your cookie consent at any time using the Manage cookies button in the site footer, or by clearing this site's cookies in your browser. Withdrawing consent does not affect the lawfulness of processing carried out prior to the withdrawal.

9. Updates to this Policy

We update this Policy when our processing changes (e.g. a new processor, a new analytics tool). The "Last updated" date at the top of the page reflects the most recent change.