Privacy policy

01 Who we are

The controller of your personal data is PragueCoding s.r.o., registered in the Commercial Register kept by the Municipal Court in Prague, Section C, Insert 307966, ID no. 07811225, VAT ID CZ07811225, with its registered seat at V Horkách 1730/3, Nusle, 140 00 Praha 4, Czech Republic.

You can reach us in all matters concerning personal data at info@llamat.com. We have not appointed a data protection officer, because the nature and scale of our processing do not require one.

02 Personal data we process

When you order a report, we process the data necessary to prepare and deliver it. To be as transparent as possible, we divide the personal data we process as controller into these categories:

• Contact information: the e-mail address you enter into the order form, and your name if you include it in correspondence.
• Order information: the website address you ask us to analyse, the search market and focus, the search phrases you choose or approve, and the time of the request.
• Communication: the content of e-mails you exchange with us about the report.
• Billing information, where the report is paid for: company name, billing address, registration and VAT numbers, and the information shared with the payment provider.
• Technical data: the IP address and request logs kept by our hosting provider for security and to run the service. The website sets no cookies and runs no advertising tools; how we count visits is described under Cookies and analytics.

03 Data in the report itself

The report is about a website and a brand, not about a person. To prepare it, we send the prompts and, where relevant, the website address to the AI engines named on the website and collect their answers. Those answers can occasionally name people — a founder, a reviewer, an author cited as a source. We treat such content as part of the report, keep it only with the report, and do not use it for any other purpose.

Personal data may be provided by you directly, or by a colleague ordering the report on behalf of the company you work for. In that case, please ask your company for further information about the order.

04 Purposes and legal bases

We process your personal data as controller for the following purposes, on the following legal bases and for the following periods.

05 Preparing and delivering the report

We process contact information and order information to run the analysis, to send you the finished report, to answer your questions about it and to offer the Deep report or continuous monitoring if you ask for them. The legal basis is the performance of a contract with you and the steps taken at your request before entering into it (Article 6(1)(b) GDPR). If you order on behalf of your company, the legal basis is our legitimate interest in performing the contract with that company (Article 6(1)(f) GDPR).

The data is processed for the duration of our relationship and for 12 months after the report is delivered, so that we can answer questions about it and prepare a follow-up report on the same basis.

06 Internal records, statistics and protection of our rights

We may process contact information, order information, communication and billing information to keep internal records, to record payments, to produce anonymous statistics about the service and to protect our rights and legal claims. The legal basis is our legitimate interest in keeping records and defending our rights (Article 6(1)(f) GDPR). The data is processed for the period necessary to protect our claims, at most for the applicable limitation period.

07 Fulfilling legal obligations

Where the report is paid for, we process billing information to comply with our obligations under tax and accounting law, and we may be required to cooperate with public authorities. The legal basis is compliance with a legal obligation (Article 6(1)(c) GDPR). The data is processed for the period required by law.

08 Keeping you informed about the service

If you have ordered a report, we may write to you about related services — for example a follow-up report, the Deep report or continuous monitoring. The legal basis is our legitimate interest in promoting our services to existing customers (Article 6(1)(f) GDPR). If you are not our customer, we only send such messages with your consent (Article 6(1)(a) GDPR).

Every such message contains an unsubscribe link, and you can object at any time by writing to info@llamat.com. We do not send a newsletter, and we do not pass your address to anyone else for marketing.

09 Cookies and analytics

The website does not set cookies, does not use advertising tools and does not load resources from third-party domains. To count visits we use Plausible Analytics, which we host ourselves; your browser reaches it only through llamat.com. Plausible sets no cookies and keeps no personal data: it records the page, the referring site, the browser, operating system, device type and country. Your IP address is used only to compute an anonymous identifier that changes every day, and is never stored. We also count when the order form is sent — that something was sent, never what was in it. If this changes, this policy will change with it and, where consent is required, a consent banner will be introduced before any such tool is enabled.

10 Who we share it with

We share personal data with third parties who help us run the service and who act as our processors, and with other controllers where the law requires it. These recipients may be:

• Our hosting provider, which runs the website and keeps technical logs: Hetzner Online GmbH, Germany.
• Our transactional e-mail provider, which delivers the confirmation and the report: Resend, Inc., United States.
• Google, through its public search suggestions (autocomplete): to find the search phrases suggested in the order form, our research service sends it short search queries about the website's products or services — never your e-mail address or any other personal data. The website text itself is analysed by an AI model we run on our own servers, not by a third-party AI provider.
• The AI engine providers whose assistants we query to prepare the report — OpenAI (ChatGPT), Google (Gemini) and Perplexity AI. They receive the prompts and, where relevant, the website address. They do not receive your e-mail address.
• Where the service is paid for: our payment provider, our accountants and tax advisors.
• Public authorities, courts and law enforcement, where we are obliged to share data under applicable law, and persons who claim to have been harmed by your conduct, where the law so requires.

11 Transfers outside the EEA

The website is hosted in the European Union. Some of the other providers above — the e-mail delivery provider, Google and the AI engine providers — are established in the United States. Where we transfer personal data outside the European Economic Area, we do so only to countries the European Commission has found to provide an adequate level of protection, to organisations certified under the EU-US Data Privacy Framework, or on the basis of the Standard Contractual Clauses adopted by the European Commission, with additional safeguards where necessary.

12 How long we keep it

We keep personal data only for as long as the purpose requires:

• Contact and order information, and the report: for the duration of our relationship and 12 months after delivery.
• Communication: for 3 years after the last message, so that we can follow up on an open question.
• Billing information: for the period required by tax and accounting law.
• Marketing contacts: until you object or unsubscribe.
• Technical logs: for the period set by our hosting provider.

13 Your rights

Just as we have rights and obligations when processing your personal data, you have rights too. You have the right to (i) request access to your personal data; (ii) withdraw your consent, where processing is based on consent; (iii) request rectification of your personal data; (iv) request erasure of your personal data; (v) request restriction of processing; (vi) request portability of your personal data; (vii) object to processing based on our legitimate interest, including direct marketing; and (viii) lodge a complaint with a supervisory authority. The details of these rights are set out in Articles 15 to 22 of the GDPR.

To exercise any of these rights, write to info@llamat.com. We answer within one month; where a request is complex, we may extend that period and will tell you why.

14 Right to file a complaint

In addition to exercising your rights with us, you can file a complaint with the supervisory authority, which in the Czech Republic is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, www.uoou.cz. If you live or work in another EU member state, you may also contact the supervisory authority there.

15 Changes to this policy

This policy is effective as of 1 October 2026. We may change it from time to time, so please check it regularly. We publish changes on this page, and where a change has a significant impact on how we process your personal data we also inform you by e-mail.