Legal documents
Cookie Policy
Last updated: 4 October 2026 · Consent version v3 · The Czech version prevails in case of discrepancy.
1. What cookies are
Cookies are small text files that a website stores in your browser or device. They are used to help the website remember your preferences and settings, or to track how you use the website.
The ATAVUS website uses essential technical storage and, only after fresh analytics consent, Google Analytics cookies. We store a single persistent technical preference in your browser's localStorage · your consent to the cookie categories below. The complete preference record is not sent; after marketing consent, only its limited confirmation is sent to our server for the transfer described in Section 2.3. The exception is the private investor presentation at invest.atavus.cz, which uses two necessary cookies for sign-in and to store your consent choice (see section 2.1).
2. What cookies (and local storage) we use
2.1 Necessary (always active)
These technical records are necessary for the basic functioning of the website. They cannot be switched off.
| Name | Storage type | Purpose | Expiry | Operator |
|---|---|---|---|---|
| atavus_consent_v1 | localStorage | Stores your cookie preferences (category, timestamp, version) | Until manually deleted | ATAVUS (this website) |
| atavus_invest_gate | HTTP cookie | Sign-in to the private investor presentation | 8 hours | ATAVUS (invest.atavus.cz) |
| atavus_invest_consent | HTTP cookie | Remembers whether recording of your browsing is on for your access, based on the consent you gave in advance (value 1 or 0) | 8 hours | ATAVUS (invest.atavus.cz) |
2.2 Analytics cookies
Only after fresh, explicit analytics consent, self-hosted GoatCounter and Umami on ATAVUS infrastructure measure visits and permitted aggregate events. They use neither analytics cookies nor third-party cookies. A permitted page path, language and permitted event metadata are sent; the referrer is reduced to its origin (protocol and domain), without its path or parameters. Query strings, fragments, form contents and free identifiers are not sent. DNT and GPC stop measurement.
After analytics consent, sessionStorage may contain atavus_attribution_v1: only a permitted source and medium category, version and expiry at most 30 minutes ahead. This limited information may accompany an accepted public enquiry; refusing or withdrawing consent does not prevent sending the enquiry. Analytics consent is separate from marketing consent for Meta CAPI.
Google Analytics 4 loads only after fresh analytics consent. Google receives your IP address, browser information, a fixed public page group, language and permitted aggregate events. Articles share /blog/, without titles or slugs. Source and medium use a fixed vocabulary; unrecognised sources are labelled unknown. URL parameters, fragments, referrers, click IDs and form contents are excluded. Cookies _ga and _ga_VDPL1QYMTY on atavus.cz expire within 180 days and are not renewed by visits. Google Signals, advertising personalisation and enhanced automatic measurement are disabled. Invest and Sales are excluded. Withdrawal stops further measurement and removes these cookies; it cannot recall data already transferred. Google explains processing and possible international transfers in its Privacy Policy.
2.3 Marketing cookies
We store no advertising cookies and load no browser Meta SDK. Only after fresh, explicit marketing consent, Meta Conversions API measures advertising: Meta Platforms Ireland Limited receives your IP address, browser information, event time and type (page view; enquiry only after the local sending system acknowledges acceptance of its email), and a fixed permitted public page path. We do not share names, emails, phone numbers, messages, URL parameters, fragments, referrers or advertising click IDs. Invest and Sales are excluded from this measurement.
DNT and Global Privacy Control prevent transfers even with consent. Withdrawing marketing consent stops future requests; it cannot recall data already transferred. Meta processing information: Meta Privacy Policy.
3. Consent to processing
On your first visit we display a cookie management panel. GoatCounter, Umami and Google Analytics run only after fresh analytics consent; Meta CAPI transfers require separate marketing consent. Essential site functions and the contact form remain available regardless of these choices. Previous v2 consent is not reused for newly added Google Analytics: policy version v3 requires a fresh choice.
Consent is voluntary and can be withdrawn at any time. Not giving consent to analytics or marketing cookies does not affect your ability to use the website in full.
You manage your consent (or withdraw it) by clicking the Cookie settings link in the page footer.
4. How to reject cookies in your browser
All cookies (including localStorage) can be deleted in your browser settings. Below are direct links to help pages for the main browsers:
- Chrome: Settings → Privacy and security → Cookies and site data
- Firefox: Settings → Privacy and security → Cookies and site data
- Safari: Settings → Privacy → Manage website data
- Edge: Settings → Cookies and site permissions → Manage and delete cookies
Note: deleting localStorage data in your browser will cause the website to show the cookie management panel again on your next visit.
5. Storage period
The atavus_consent_v1 localStorage record contains policy version v3 and remains until deleted or replaced by a new choice. Your choice is valid for 180 days; after expiry or a policy version change, we request a fresh choice. Our server request limiter stores counts in minute windows with a derived identifier, without storing your IP address or browser information in that record. The next request after a window change replaces the old record.
6. Third parties
The ATAVUS website uses self-hosted GoatCounter and Umami for cookieless traffic measurement. Optional Meta Conversions API advertising measurement uses only the data described in Section 2.3 and fresh marketing consent. Google Analytics loads only as described in Section 2.2. We load neither browser Facebook Pixel nor LinkedIn Insight Tag.
We load fonts self-hosted, without any external CDN. This is part of the technical operation of the website and is not subject to your consent to the cookie categories above.
7. Updates to this policy
This policy may be updated from time to time · in particular in connection with the introduction of new features or analytics tools. The date of the last change is always shown at the top of the document. In the event of a material change, we will request fresh consent.
8. Contact for questions
For questions about the processing of cookies or personal data, please contact us:
Company ID (IČO): 29630681
Příčná 1892/4, Nové Město, 110 00 Prague 1, Czech Republic
E-mail: office@atavus.cz
If you believe that the processing of cookies violates applicable regulations, you have the right to lodge a complaint with the Office for Personal Data Protection (uoou.gov.cz).
This policy is governed by the law of the Czech Republic and European Union regulations, in particular the GDPR (EU) 2016/679, Act No. 110/2019 Coll., Section 89(3) of Act No. 127/2005 Coll. on Electronic Communications, and Act No. 480/2004 Coll.