Privacy notice
Information for visitors to cernyseed.cz and its test version testcerny.eu. Orders, payments and customer accounts in the separate online shop are covered by the information at eshop.cernyseed.cz.
1. Who processes your data
The controller is Černý Seed s.r.o., company ID 04431049. Correspondence address: Husova 999, 551 01 Jaroměř, Czech Republic. For questions and rights requests, email cerny@cernyseed.cz or write to this address.
2. Website operation and security
When you connect, the server processes your IP address and technical request data. Operational logs may include the time, requested URL, referral source, browser information and request outcome. We use these for operation, troubleshooting and security on the basis of our legitimate interests under GDPR Article 6(1)(f).
Hosting is provided by ZONER / CZECHIA. Its published help states that access logs are backed up for 12 months and files and databases have 30 daily backups. Deleted data may therefore temporarily remain in backups. These periods differ from our own analytics retention.
3. Cookies, preferences and analytics
Necessary storage supports your cookie choice, the theme selected during your visit and sign-in. Remembering language and theme for future visits and analytics require separate consent. Rejecting optional features does not prevent browsing.
Analytics record pages, event time, language, device category, referral category, estimated country and clicks or use of selected features, including Petunia. They do not store conversation content, account names or full IP addresses. IP addresses support local country lookup and abuse prevention; visits are distinguished by a pseudonymous identifier.
The legal basis for analytics is consent under GDPR Article 6(1)(a). Daily maintenance is configured to remove detailed events and visit identifiers older than 90 days. Monthly totals without visit identifiers remain long term. Event details also retain the time and version of consent. Withdraw consent at any time through Cookie settings in the footer, without affecting the lawfulness of earlier processing.
4. Petunia assistant
Petunia is an automated assortment and growing-information assistant. Use is optional; you may contact us directly. To answer, it processes your message and part of the preceding conversation. Do not enter personal, sensitive or payment information. Check answers against the cited sources.
Providing requested assistance and protecting the service rely on our legitimate interests under GDPR Article 6(1)(f). OpenAI may process your message and context. We use store: false; this does not mean zero retention. OpenAI security logs are normally retained for up to 30 days, subject to exceptions in its rules. See OpenAI data controls.
Optional quality-review record
Enable retention of new Petunia questions and answers to review and improve answers through the separate “Allow Petunia conversations to be saved for 90 days” option in Cookie settings, or through “Accept all”, which includes this purpose. The legal basis is consent under GDPR Article 6(1)(a). Saving is off before consent; earlier cookie consent does not enable it. Refusing does not restrict chat or the website, and earlier messages are not added retrospectively.
The record includes question and answer text, time, interface language, a random conversation identifier, sources, assistant and model versions, available token counts, technical error codes and any rating or note added by authorised staff. It also records the time and version of consent. We do not add your IP address or website analytics identifier to this log. Before saving, we automatically mask recognised email addresses, telephone numbers and certain other numeric identifiers. This is not full anonymisation: text may still contain a name or other personal information the masking did not recognise.
Individual messages remain in the active review log for no more than 90 days. Daily maintenance and subsequent processing or opening of the log remove expired records. Only authorised staff and necessary technical administrators have access; files are outside the public web directory. ZONER / CZECHIA provides the hosting. Deleted information may temporarily remain in backup copies under the backup rules above; these are not used for routine review. Exports are subject to the same retention and access restrictions.
Withdraw consent by switching off Petunia recording and saving your choices in Cookie settings, or by selecting “Necessary only”. New saving stops and the application requests deletion of conversations registered in this browser. If deletion fails, a retry is offered and saving remains paused. Consent persists after reloading and for new conversations, until changed or expired. Withdrawal does not affect earlier lawful processing. A technical withdrawal fingerprint without text is kept for up to 90 days to prevent restoration. Clearing browser storage alone does not erase the server archive. For access or erasure of older records or records from another device, email cerny@cernyseed.cz, preferably including the P-… reference displayed in the chat.
Conversations are not automatically added to Petunia’s knowledge or used to fine-tune its model. During review we select corrected test examples without personal data. Consent to our review log is separate from processing needed to answer and from any data-sharing setting in the AI provider’s account.
Technical records for usage limits and costs remain separate. The IP-derived rate-limit identifier expires 24 hours after the last accepted question; expired records are removed during subsequent question processing. The Czech interface may send search names derived from the conversation to eshop.cernyseed.cz. It does not forward the entire conversation, sign-in cookies or the visitor’s IP address. Search phrases may appear in URLs and shop logs. English and Russian interfaces do not use this integration for prices or stock.
5. Photo library
We process the username, password verification value, customer or company label, account status and sign-in session data to provide authorised access and protect the library. Depending on the relationship, the legal basis is performance of a contract or our legitimate interest in providing and securing customer access.
Server sign-in lasts no more than 8 hours. The account does not expire with the session. We retain account data while access is provided and manually delete the account when access ends. Records needed for a specific legal claim are retained only as long as necessary.
6. Email and other direct communication
When you email or call, we process contact details and communication content to handle the request, take steps towards a contract or perform a contract. Depending on the purpose, GDPR Article 6(1)(b) or (f) applies. Providing data is voluntary, but we may be unable to respond without the necessary contact details.
We retain ordinary enquiries until resolved and delete them no later than 12 months afterwards. Communications relating to contracts, accounting or legal claims are assessed separately according to the applicable obligation and necessary retention period.
7. Recipients
Authorised staff and administrators, hosting providers and associated technical service providers may access data to the extent necessary. OpenAI receives messages when AI is used; our separate shop may receive search phrases.
OpenAI’s data processing terms for EEA customers name OpenAI Ireland Ltd. and provide for standard contractual clauses or adequacy decisions for transfers outside the EEA. Consult the linked terms or contact us for information about safeguards.
8. Your rights
Subject to GDPR conditions, you may request access, rectification, erasure, restriction and portability. You may object to processing based on legitimate interests and withdraw consent at any time. Contact cerny@cernyseed.cz. We may reasonably verify your identity where needed.
You may complain to the Czech Office for Personal Data Protection (uoou.gov.cz). Petunia provides information; it does not decide your rights or accept orders.