Privacy information

Who controls your personal data

The controller is:

Sense & Think is developed under AI s rozumom / Think, then AI.

Information we process

When you use the contact form, we may process:

• your name
• organisation, if provided
• email address
• enquiry type
• message
• form language
• submission time and reference number
• limited technical data needed to protect the form from spam and abuse

The form is not intended for children’s personal data, health data or other special-category personal data.

Why we use the information

We use it to:

• receive and respond to your enquiry
• assess interest in piloting, methodology review, research, funding or other cooperation
• continue communication reasonably connected with your message
• protect the form and infrastructure from spam, automated abuse and security incidents

We do not use contact-form information for marketing without a separate legal basis or consent.

Legal basis

Where your message concerns possible cooperation, support, partnership or another contractual relationship, processing may be necessary to take steps at your request before entering into a contract under Article 6(1)(b) GDPR.

For other enquiries and ordinary project communication, processing is based on our legitimate interest in responding to enquiries, managing reasonable project communication and protecting the form from abuse under Article 6(1)(f) GDPR.

You may object to processing based on legitimate interests for reasons relating to your particular situation.

Recipients and service providers

Depending on the actual infrastructure, information may be processed by:

• hosting and server infrastructure: Hostinger
• email services: Google Workspace (Google Cloud EMEA Limited, Ireland)
• form security and anti-abuse: Cloudflare, Inc.
• workflow automation: self-hosted n8n on Hostinger VPS
• CRM or contact management: self-hosted contact-management application on Hostinger VPS
• authorised people working on Sense & Think enquiries and partnerships

International transfers

Some technology providers may process personal data outside the European Economic Area. In such cases, we use appropriate safeguards under the GDPR, in particular an adequacy decision or Standard Contractual Clauses.

Retention

Contact enquiries and related communication are normally retained for no longer than 12 months after the enquiry has been resolved.

Where communication leads to cooperation, a contractual relationship, grant application or another ongoing relationship, relevant records may be retained for the duration of that relationship and for any further period required by law or needed to protect legal claims.

Technical data needed to protect the form and limit abuse is retained for no longer than 10 minutes. Operational logs and error data are retained for no longer than 24 hours unless longer retention is necessary to investigate a security incident.

Unsolicited or obvious spam may be deleted sooner.

Whether information is required

Providing information is voluntary. Without your name or identifier, email address and message, we may be unable to process or answer your enquiry. Optional information does not need to be provided.

Automated decision-making

We do not use contact-form information for automated individual decision-making or profiling that produces legal or similarly significant effects. Automated tools may perform spam checks or route your message to the appropriate person.

Your rights

Subject to the conditions of the GDPR, you may have the right to:

• access your data
• correct inaccurate data
• request erasure
• request restriction
• object to processing based on legitimate interests
• receive portable data where applicable
• complain to a supervisory authority

Contact first@thinkthenai.com to exercise these rights. We may take proportionate steps to verify your identity before responding.

Supervisory authority

You may lodge a complaint with the Slovak Data Protection Authority or another competent supervisory authority in the EU country where you live or work.

Language preference and consent choice

Language preference

The website may store the functional language preference sat_locale so that it can open the last selected language on a later visit. The preference is not used for analytics or marketing.

Consent choice

The sat_consent_v1 cookie stores your choice regarding analytics technologies. It is required so that the website can respect your decision and does not ask again on every page load.

Google Analytics

If you allow analytics technologies, we use Google Analytics 4 with Measurement ID G-0CNQSSD4ZC to measure visits, understand how parts of the website are used and improve the website. Google Analytics is not loaded before analytics consent is given. When analytics is enabled, it may process online identifiers, technical information about the device and browser, approximate location information and website interaction data. We do not send names, email addresses, organisations, contact-message content or children’s data to Google Analytics.

The legal basis is your consent under Article 6(1)(a) GDPR. We do not enable Google Ads, advertising signals or ad personalisation on this website. Under the current Google Analytics terms, the service provider for EEA customers is Google Ireland Limited. Google states that information may be processed on servers in different countries and that it relies, where relevant, on adequacy decisions, the EU–US Data Privacy Framework or Standard Contractual Clauses. See the Google Analytics terms and Google’s data-transfer information.

You can change your analytics choice at any time through the “Privacy settings” link in the website footer. Withdrawing consent stops future analytics measurement in that browser and removes available analytics cookies from the current domain. It does not retroactively affect data processed before withdrawal.

In this GA4 property, event-data retention is set to 2 months and user-data retention is set to 14 months. This setting does not affect standard aggregated reports.

Cookies used by the website

Analytics cookies can be created only after you consent. The default analytics-cookie duration is described in the Google Analytics documentation.

Security and website technologies

We use appropriate technical and organisational measures, including HTTPS, access controls, anti-abuse protection, data minimisation, limited retention and separation of the public form from internal automation systems.

The website does not use marketing cookies and does not store contact-form information in browser local storage. Fonts and images are served from our domain. When Cloudflare Turnstile protection loads, the browser connects to Cloudflare, which processes technical signals needed to distinguish a person from automated abuse.

Changes

We may update this information when the form, providers, processing purposes or legal requirements change. The current version is published on this page.