Skip to content

Personal data protection

This is an English translation for convenience. If there is any difference, the Czech version applies.

1. Who are we and what will you find here?

We are MENDATOR s.r.o., with its registered office at Nové sady 988/2, Staré Brno, 602 00 Brno, IČO 02446561, and we operate the Thesios.ai service available at https://thesios.ai, which uses artificial intelligence to help you find a thesis topic that interests you and that you enjoy. If you have visited our website and, where applicable, used our service, we process your personal data as a so-called personal data controller.

Here you can read what personal data we use, what we need it for, what entitles us to do so and how long we keep it. You will also find out who in general may have access to your personal data, what rights you have and how you can exercise them.

2. What would you like to read?

Click on what interests you and read more:

3. What personal data about you may we process?

We process different categories of personal data about you for different purposes. The specific scope depends on what we use the data for:

  • contact data (email address);
  • details about your studies and interests that you enter in the form (school, field, thesis type, your interests and any notes);
  • created content (suggested topics and the thesis assignment);
  • information about your order and payment (e.g. date, price, payment status). You enter your card number directly into the Stripe payment gateway and we never see it;
  • identification data of your device (IP address);
  • information about behaviour on the website (e.g. which pages you visited, only with your consent);
  • your rating of the assignment (number of stars and any note);
  • content of communication with us (e.g. when you send us a question).

4. What specifically may we do with your personal data?

On our website https://thesios.ai/ you can simply browse the services, write to us with a question, or place orders. Further on this page you can read what specifically we may do with your personal data in these cases.

Visiting the website https://thesios.ai/

We use cookies and similar trackers. When you visit our website, we may store cookies on your device and learn certain information about your behaviour on the website. You can find information about cookies here.

You can change your cookie settings at any time through the "Cookie settings" link in the site footer and, for example, withdraw consent you gave earlier. We don't use advertising cookies and we don't profile you based on cookies.

How specifically do we process your personal data when using cookies?

Use of necessary cookies:

We may process the identification data of your device and information about your behaviour on the website in order to ensure that our website works. We carry out the processing on the basis of our legitimate interest in the functioning of the website. We keep the personal data stored in this way according to the technical settings of the cookies.

Use of analytical cookies:

We may process the identification data of your device and information about your behaviour on the website so that we can create statistics and reports on the use of the website and improve it. We carry out the processing on the basis of your consent to the use of cookies. We keep the personal data stored in this way according to the technical settings of the cookies, at most until you withdraw your consent.

Ordering the service

You place an order for the service through the form on our website; exceptionally, we may make arrangements by email. In connection with an order, we may process your personal data for various purposes.

We need your contact data, details about your studies and interests, and information about your order and payment so that we can process your order, conclude a contract with you and deliver the service. We send the text you enter in the form to our artificial intelligence provider so it can create the topics and the assignment. We don't send it your email address, so please don't enter personal data in the interests and notes fields that isn't needed for the assignment. This processing is necessary for the performance of the contract. Without this data we can't deliver the service. We keep your data and assignment for 10 years from the order, so you can return to the assignment through its link at any time. We delete it sooner if you ask us to. We may keep information about you for longer for other purposes.

If your school pays, we use your email address to check that you are entitled to this.

If you pass an unused assignment from a paid order to a friend, they create their own order. You don't see their data or assignment, and they don't see yours.

We also have to fulfil obligations laid down by legislation (e.g. keeping accounting documents, handling statutory complaints). We therefore also process the information processed for handling the order on the basis of necessity for compliance with legal obligations, for the period laid down by legislation.

Sometimes, if there may be disputed questions between us (e.g. we are dealing with complaints), we may use your personal data obtained when handling the order to protect our rights and interests. We base this processing on our legitimate interest in protecting our rights and interests. We keep your personal data for this purpose for 10 years from the end of the contract and, where applicable, 10 years from the end of a court dispute (limitation periods are running). You can object to the processing. If your objection is justified, we will stop processing your personal data for this purpose.

Statistics and ratings

If you have ordered something from us, we may use your order data for creating statistics about orders. We base this processing on our legitimate interest in improving our services. For this purpose we keep the data for 5 years from when the service was provided. You can object to this processing. If your objection is justified, we will stop.

If you decide to rate an assignment, we store your rating and note with the order so we know how we are doing. We base this processing on our legitimate interest in customer satisfaction. We keep ratings for 5 years from the order.

We don't send commercial communications or newsletters. We only send emails related to your order.

Answering questions

You can write to us or call us. In that case we process the personal data you give us so that we can answer your question. We carry out the processing on the basis of our legitimate interest in communicating with you. We keep your personal data for 1 year from our last communication with you (in case you want to follow up on the last message). You can object to the processing. If your objection is justified, we will stop processing your personal data for this purpose.

5. Who may have access to your personal data?

Depending on the circumstances, your personal data may be made available to our suppliers, who process it as our processors:

  • Amazon Web Services (servers and database, EU, Frankfurt),
  • Cloudflare (website delivery and protection from bots),
  • OpenAI (creating topics and assignments from the text you enter, USA),
  • Stripe (payment gateway),
  • Mailgun (sending email, EU),
  • PostHog (analytics, only with your consent, EU).

External accountants and auditors and legal and tax advisers may also have access where they need it to meet contractual and legal obligations.

If you want to know to whom, when and for what purpose your data has been made available, we will be happy to tell you.

Some suppliers are based in or process data outside the EU, especially in the USA. In such cases we have made sure there are appropriate safeguards so that your personal data stays safe and your rights are not limited.

6. What are your rights and how can you exercise them with us?

Here you will find out what rights relating to the processing of your personal data you can exercise with us. Whatever the right, you can exercise it with us in any way you wish. It only has to be possible to verify that it really is you making the request.

If you want to get an answer as quickly as possible, please send your request to the email address team@thesios.ai.

Right to withdraw consent

If we process your personal data on the basis of your consent, you can withdraw it at any time, ideally at team@thesios.ai.

You can withdraw consent to analytics through the "Cookie settings" link in the site footer.

Right of access

You have the right of access to the personal data we process about you. You also have the right to information about what personal data we process about you, for how long, what the purposes of the processing are, to whom we make it available and whether we use it for automated decision-making (and, where applicable, how this automated decision-making works).

We will give you a copy of your personal data free of charge. If you would like more copies, we may ask you to pay the necessary costs.

Right to rectification

Have you found that we are processing incomplete or incorrect personal data about you? Then you have the right to have us rectify the personal data or, if the purpose of processing this personal data requires it, complete it.

Right to erasure

You also have the right to erasure of the personal data we keep about you. For you to be able to request erasure, one of the following grounds must apply:

  • your personal data is no longer needed for the purpose for which it was collected or processed;
  • we are processing your personal data unlawfully;
  • you have withdrawn the consent on the basis of which your personal data was processed, and we have no other entitlement to continue processing this personal data;
  • you object to the processing of your personal data that we process on the basis of legitimate interest, and we are unable to demonstrate that the legitimate interest overrides your right to erasure;
  • there is a statutory reason that requires the erasure of this personal data.

Even if you withdraw your consent to the processing of personal data or request the erasure of your personal data, we cannot always delete your data. Sometimes the law requires us to process your personal data. In that case, however, we will inform you of the reason why your personal data cannot be erased.

Right to restriction of processing

If you feel that your personal data is not accurate, you can request that we restrict the processing of your personal data for the period strictly necessary to verify its accuracy and, where applicable, to rectify it.

You also have this right in the following cases:

  • the processing of your personal data is unlawful, but you do not wish your personal data to be erased;
  • we no longer need your personal data for the purpose for which we processed it, but you insist on its processing (especially its retention) for the establishment, exercise or defence of your legal claims;
  • you have objected to the processing of your personal data on the basis of our legitimate interest; in this case we will restrict the processing until it has been assessed whether our legitimate interest overrides your right for your personal data not to be processed any further.

Right to object to the processing of your personal data on the basis of legitimate interest

If we process your personal data on the basis of legitimate interest, you have the right to object to this processing. On that basis we will assess whether it really is in our legitimate interest to process your personal data for the given purpose, or whether your right for your personal data not to be processed any further prevails.

If your objection is justified, we will stop processing your data.

Right to personal data portability

If we process your personal data by automated means on the basis of consent or of necessity for the performance of a contract, you can ask us to provide you with your personal data in a structured, commonly used and machine-readable format, and also, where applicable, to transfer it to another personal data controller of your choice.

Right to lodge a complaint

Do you think that the rights listed above are inadequate from your point of view? Or that we are infringing your rights in any way? You can lodge a complaint with the supervisory authority. You can lodge a complaint through the contact for the Office for Personal Data Protection (Úřad pro ochranu osobních údajů) available at https://www.uoou.cz/.