Legal documents
Cookie Policy
Last updated: 15 October 2026 · Consent version v3 · The Czech version prevails in case of discrepancy.
1. What cookies are
Cookies are small text files that a website stores in your browser or device. They are used to help the website remember your preferences and settings, or to track how you use the website.
The ATAVUS website uses essential technical storage and, only after fresh analytics consent, Google Analytics cookies. In your browser's localStorage we store only technical preferences without any identifier: your consent to the cookie categories below, on sales.atavus.cz your confirmation of the page notice, and for invited content reviewers a review flag (listed in section 2.1). The complete consent record is not sent; after marketing consent, only its limited confirmation is sent to our server for the transfer described in Section 2.3. The exceptions are the private investor presentation at invest.atavus.cz, which uses two necessary cookies for sign-in and to store your consent choice, and the sign-in of invited content reviewers, for whom we set one necessary cookie (see section 2.1).
2. What cookies (and local storage) we use
2.1 Necessary (always active)
These technical records are necessary for the basic functioning of the website. They cannot be switched off.
| Name | Storage type | Purpose | Expiry | Operator |
|---|---|---|---|---|
| atavus_consent_v1 | localStorage | Stores your cookie preferences (category, timestamp, version) | Until manually deleted | ATAVUS (this website) |
| atavus_sales_partner_v1 | localStorage | Remembers that you confirmed the notice about who the page is intended for (value 1), so the bar is not shown again | Until manually deleted | ATAVUS (sales.atavus.cz) |
| atavus-review-session | localStorage | Only for invited content reviewers: a flag that you are signed in to comment on texts (value 1). It is never stored for regular visitors. | Until you leave the review or delete it manually | ATAVUS (atavus.cz, sales.atavus.cz, invest.atavus.cz) |
| atavus_review | HTTP cookie | Only for invited content reviewers: sign-in to comment on texts. It is never set for regular visitors. | 7 days | ATAVUS (atavus.cz) |
| av-intro | sessionStorage | Remembers that the intro animation has already played in this session (value 1). Contains no identifier. | Until the browser tab is closed | ATAVUS (atavus.cz, sales.atavus.cz, invest.atavus.cz) |
| atavus_invest_gate | HTTP cookie | Sign-in to the private investor presentation | 8 hours | ATAVUS (invest.atavus.cz) |
| atavus_invest_consent | HTTP cookie | Remembers whether recording of your browsing is on for your access, based on the consent you gave in advance (value 1 or 0) | 8 hours | ATAVUS (invest.atavus.cz) |
2.2 Analytics cookies
Only after fresh, explicit analytics consent, self-hosted GoatCounter and Umami on ATAVUS infrastructure measure visits and permitted aggregate events on the public atavus.cz website. They use neither analytics cookies nor third-party cookies. GoatCounter receives the page path, the page title, the referrer reduced to its origin (protocol and domain), the screen resolution, an event flag and an automated-browser flag. Umami receives the page address without query parameters or fragment, the page title, the site name (hostname), language, screen resolution, the referrer reduced to its origin, permitted events with their data (e.g. section, contact channel, video, article) and, where applicable, the permitted source and medium category (utm_source, utm_medium), plus the site identifier and a measurement version tag. The server of both tools naturally sees the IP address and browser information (User-Agent) with each request. Query strings, fragments, form contents and free identifiers are not sent. DNT and GPC stop measurement.
After analytics consent, sessionStorage may contain atavus_attribution_v1: only a permitted source and medium category, version and expiry at most 30 minutes ahead. This limited information may accompany an accepted public enquiry; refusing or withdrawing consent does not prevent sending the enquiry. Analytics consent is separate from marketing consent for Meta CAPI.
Google Analytics 4 (Google Ireland Limited) loads only after fresh analytics consent. Google receives your IP address, browser information, a fixed public page group, language and permitted aggregate events. Articles share /blog/, without titles or slugs. Source and medium use a fixed vocabulary; unrecognised sources are labelled unknown. URL parameters, fragments, referrers, click IDs and form contents are excluded. Cookies _ga and _ga_VDPL1QYMTY on atavus.cz expire within 180 days and are not renewed by visits. Google Signals, advertising personalisation and enhanced automatic measurement are disabled. Invest and Sales are excluded. Withdrawal stops further measurement and removes these cookies; it cannot recall data already transferred. Google explains processing and possible international transfers in its Privacy Policy.
2.3 Marketing cookies
We store no advertising cookies and load no browser Meta SDK. Only after fresh, explicit marketing consent, Meta Conversions API measures advertising: Meta Platforms Ireland Limited receives your IP address, browser information, event time and type (page view; enquiry only after the local sending system acknowledges acceptance of its email), and a fixed permitted public page path. We do not share names, emails, phone numbers, messages, URL parameters, fragments, referrers or advertising click IDs. Invest and Sales are excluded from this measurement.
DNT and Global Privacy Control prevent transfers even with consent. Withdrawing marketing consent stops future requests; it cannot recall data already transferred. Meta processing information: Meta Privacy Policy.
3. Consent to processing
On your first visit we display a cookie management panel. GoatCounter, Umami and Google Analytics run only after fresh analytics consent; Meta CAPI transfers require separate marketing consent. Essential site functions and the contact form remain available regardless of these choices. Previous v2 consent is not reused for newly added Google Analytics: policy version v3 requires a fresh choice.
Consent is voluntary and can be withdrawn at any time. Not giving consent to analytics or marketing cookies does not affect your ability to use the website in full.
You manage your consent (or withdraw it) by clicking the Cookie settings link in the page footer.
4. How to reject cookies in your browser
All cookies (including localStorage) can be deleted in your browser settings. Below are direct links to help pages for the main browsers:
- Chrome: Settings → Privacy and security → Cookies and site data
- Firefox: Settings → Privacy and security → Cookies and site data
- Safari: Settings → Privacy → Manage website data
- Edge: Settings → Cookies and site permissions → Manage and delete cookies
Note: deleting localStorage data in your browser will cause the website to show the cookie management panel again on your next visit.
5. Storage period
The atavus_consent_v1 localStorage record contains policy version v3 and remains until deleted or replaced by a new choice. Your choice is valid for 180 days; after expiry or a policy version change, we request a fresh choice. Our server request limiter stores counts in minute windows with a derived identifier, without storing your IP address or browser information in that record. The next request after a window change replaces the old record.
6. Third parties
The ATAVUS website uses self-hosted GoatCounter and Umami for cookieless traffic measurement. Optional Meta Conversions API advertising measurement uses only the data described in Section 2.3 and fresh marketing consent. Google Analytics loads only as described in Section 2.2. We load neither browser Facebook Pixel nor LinkedIn Insight Tag.
We load fonts self-hosted, without any external CDN. This is part of the technical operation of the website and is not subject to your consent to the cookie categories above.
7. Updates to this policy
This policy may be updated from time to time · in particular in connection with the introduction of new features or analytics tools. The date of the last change is always shown at the top of the document. In the event of a material change, we will request fresh consent.
8. Contact for questions
For questions about the processing of cookies or personal data, please contact us:
Company ID (IČO): 29630681
Příčná 1892/4, Nové Město, 110 00 Prague 1, Czech Republic
E-mail: office@atavus.cz
If you believe that the processing of cookies violates applicable regulations, you have the right to lodge a complaint with the Office for Personal Data Protection (uoou.gov.cz).
This policy is governed by the law of the Czech Republic and European Union regulations, in particular the GDPR (EU) 2016/679, Act No. 110/2019 Coll., Section 89(3) of Act No. 127/2005 Coll. on Electronic Communications, and Act No. 480/2004 Coll.