Privacy and Cookie Policy of the oneAI Finance website
Version 1.0 of 6 November 2026. This policy applies from the day it is published on this website.
UNA CLAVIS s.r.o., identification number 300 89 158, registered office Jindřišská 941/24, Nové Město, 110 00 Praha 1, Czech Republic, entered in the commercial register kept by the Municipal Court in Prague, section C, insert 457133 (“we”), is the controller of the personal data described in this policy. oneAI Finance is a brand we use.
You can reach us about data protection at support@oneaifinance.com, or by post at our registered office.
This policy covers this website only. When you use the oneAI Finance app, the privacy information shown in the app applies.
In this policy, “GDPR” means Regulation (EU) 2016/679.
Visiting the website. When you open the website, our hosting provider automatically records the technical data your browser sends: your IP address, the date and time of access, the page requested, the referring page, and your browser and operating system. We use these data to deliver the website and to keep it secure, for example to detect and stop misuse. The legal basis is our legitimate interest in a working and secure website (Article 6(1)(f) GDPR).
Your cookie choice. When you choose in the cookie banner, we store your choice on your device and keep a record of it with its date and time and the version of the banner, so that we respect your choice and can show that you gave or refused consent. The legal basis is our legal duty to obtain demonstrable consent (Article 6(1)(c) GDPR together with section 89(3) of Act No. 127/2005 Coll.).
Updates and newsletter. When you subscribe to our updates, we process your e-mail address and, if you give it, your name, to send you news, tips and offers about oneAI Finance and its launch. The legal basis is your consent (Article 6(1)(a) GDPR). You can withdraw it at any time through the link in each e-mail or by writing to us, without affecting the lawfulness of what was done before. We keep a record of when and how you subscribed and unsubscribed, on the basis of our legitimate interest in being able to show your choice (Article 6(1)(f) GDPR). Until this policy was published, this website was operated by One Finance Limited. If you subscribed to updates before then, you receive our updates only after you have confirmed your subscription with us.
Writing to us. When you e-mail us or use our contact form, we process your e-mail address, your name, the content of your message and any other details you choose to give us, in order to deal with your message. Where your message concerns a contract with us or steps you ask us to take before entering into one, the legal basis is Article 6(1)(b) GDPR. Otherwise it is our legitimate interest in answering messages addressed to us (Article 6(1)(f) GDPR).
Analytics and page variants, only with your consent. If you allow it in the cookie settings, we measure how the website is used, and we show and compare different versions of pages, to improve the website. For this we use Google Analytics and Webflow Optimize (section 3). These tools process your IP address, an online identifier stored on your device, your device and browser data, and how you use the website. The legal basis is your consent (Article 6(1)(a) GDPR). Without your consent these tools store nothing on your device, read nothing from it and receive no data about your visit.
Links to social media and other websites. The website contains links to our pages on social media and to other websites. They are plain links: no data is sent to those platforms until you click a link. After that, the operator of the other website is responsible for what it processes.
Legal duties and claims. We process data where a law that applies to us requires it (Article 6(1)(c) GDPR), and where we need it to establish, exercise or defend legal claims (Article 6(1)(f) GDPR).
What they are. Cookies are small text files that a website stores on your device. Similar technologies, such as local storage, work the same way. Under Article 5(3) of Directive 2002/58/EC and section 89(3) of the Czech Electronic Communications Act (Act No. 127/2005 Coll.), we may store or read such information on your device only with your consent, unless it is strictly necessary to provide the website you asked for.
Your choice. When you first visit the website, a banner asks for your choice. You can accept all, reject all, or choose by category. Rejecting is as easy as accepting. You can change or withdraw your choice at any time through the “Cookie settings” link at the bottom of every page.
Fonts, images and videos are delivered by the website and its hosting provider. The website uses no advertising cookies and no social media plugins.
Our providers process the data on our behalf and only on our instructions, under a data processing agreement concluded with us (Article 28 GDPR). In Google Analytics we have switched off the settings that would let Google use the data for its own purposes.
- hosting, the website platform and our contact form: Webflow, Inc., USA;
- analytics, only with your consent: Google Ireland Limited, Ireland, and Google LLC, USA;
- page variants, only with your consent: Webflow, Inc., USA;
- e-mail and the sending of our updates: our e-mail and newsletter providers.
Beyond that, we disclose personal data only where the law requires it, for example to a court or a public authority. We do not sell personal data.
Webflow, Inc. and Google LLC are based in the United States, and personal data may be processed there. Both are certified under the EU-U.S. Data Privacy Framework, so transfers to them rest on the European Commission’s adequacy decision of 10 July 2023 for that framework (Article 45 GDPR). Where a provider, one of its subprocessors, or a person working for us or for a provider accesses personal data from another country outside the European Economic Area that has no adequacy decision, we allow it only on the standard contractual clauses adopted by the European Commission (Article 46(2)(c) GDPR). You can ask us for a copy using the contact details in section 1.
- Server log data: kept by our hosting provider only as long as it needs them to deliver and protect the website, under its data processing terms. Where a log entry is needed to investigate a specific security incident, it is kept until the investigation is closed.
- Your cookie choice: on your device for up to 12 months. Our record of your choice: 3 years after you made it, so that we can show it.
- Updates and newsletter: until you unsubscribe. The record of your consent and of your withdrawal is kept for 3 years after you unsubscribe.
- E-mails and contact form messages: up to 3 years after your matter is closed, so that we can answer a claim about it, or longer where a law requires it.
- Analytics data: at most 14 months in Google Analytics.
- Page variant data: kept by Webflow under its data processing terms. The entries on your device are described in section 3.
The 3-year periods follow the general limitation period under Czech law (section 629(1) of Act No. 89/2012 Coll.).
Your right to object. Where we process your data on the basis of our legitimate interest (server logs, the record of your newsletter choice, answering your messages, legal claims), you can object at any time on grounds relating to your particular situation. Write to us at support@oneaifinance.com. We then stop, unless we show compelling legitimate grounds that override your interests, rights and freedoms, or we need the data to establish, exercise or defend legal claims (Article 21(1) GDPR).
Under the GDPR you also have the right to:
- access the personal data we hold about you (Article 15);
- have inaccurate data corrected (Article 16) and have data erased (Article 17);
- have the processing restricted (Article 18);
- receive your data in a portable format, where the conditions of Article 20 are met;
- withdraw your consent at any time, without affecting the lawfulness of the processing before the withdrawal (Article 7(3)).
To exercise any of these rights, write to us using the contact details in section 1. We answer without undue delay and at the latest within one month. Where the complexity and number of requests make it necessary, this period may be extended by two further months; we tell you within the first month, with the reasons (Article 12(3) GDPR).
You also have the right to lodge a complaint with a supervisory authority, in particular in the EU country where you live or work or where you believe your rights were infringed. In the Czech Republic this is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, www.uoou.gov.cz.
You are not obliged to give us personal data. Without your e-mail address, however, we cannot send you updates or answer you. We take no decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you (Article 22 GDPR).
If we change how we process personal data, we update this policy first. The current version is always available on this website with its date.
Stores your cookie choice and protects the website against overload and misuse.