PRIVACY NOTICE

1. Controller and contact

The controller is BITLUX s. r. o. Contact for data protection and exercising rights: contact@amlum.com. Full identification details are provided on the Website operator page.

2. Data, purposes and legal bases

To handle business enquiries and acknowledge receipt, we process the full name, email address, company name and telephone number you provide in the form or subsequent correspondence. The form cannot be submitted without completing the required fields.

If you request a contract in your own name as an individual, the legal basis is Article 6(1)(b) GDPR. For representatives of legal entities and general enquiries, the basis is our legitimate interest in handling the requested communication under Article 6(1)(f) GDPR.

To operate and protect the website and form, we process necessary technical data, in particular IP addresses, access times and session identifiers. Turnstile also evaluates technical browser and connection characteristics. Our processing is based on our legitimate interest in secure operation and preventing abuse under Article 6(1)(f) GDPR.

We handle requests to exercise data protection rights to meet legal obligations under Article 6(1)(c) GDPR.

We process necessary records for establishing or defending claims based on our legitimate interest in protecting our rights under Article 6(1)(f) GDPR; we meet specific legal obligations under Article 6(1)(c) GDPR.

3. Recipients and transfers

Websupport s.r.o. provides website hosting and business email as our processor. Acknowledgements also pass through the provider of the email address you supply. We disclose data to competent authorities where required by law.

Cloudflare, Inc. (USA) protects the form. It is a processor for website security and an independent controller for improving bot detection. Details: Turnstile Privacy Addendum, https://www.cloudflare.com/turnstile-privacy-policy/.

Cloudflare also processes data outside the EEA, including the USA. Its terms provide for relevant transfers under the EU–US Data Privacy Framework or Standard Contractual Clauses; safeguards are available in its DPA: https://www.cloudflare.com/cloudflare-customer-dpa/.

4. Retention

We retain business enquiries that did not lead to a contract for no more than 30 days after we finish handling them. After this period, we erase the data. Necessary contractual correspondence is retained during the contract and then until a specific legal obligation is fulfilled or the limitation period for the relevant claim expires; where proceedings are involved, until their final conclusion. Rights requests are retained until handled, then only necessary evidence of compliance is kept for the applicable review period or until related proceedings are finally concluded.

Form content in the delivery system is erased once delivery is resolved or the enquiry is securely taken over; this does not erase necessary business email. Delivery metadata is retained for 7 days after enquiry closure, our operational records for 7 days after creation and minimal erasure records for 30 days after erasure. Session and protective data is erased during regular cleanup after expiry: sessions after 30 minutes of inactivity and protective identifiers after no more than 24 hours.

Websupport retention follows the service term and relevant purpose; its processing terms are in Article 16.11 of its terms: https://www.websupport.sk/obchodne-podmienky/. Its standard hosting documentation describes a 14-day overwrite cycle for file, email and database backups: https://www.websupport.sk/podpora/kb/hosting/. For processing on our behalf, Cloudflare uses contract termination or the earlier end of processing needed to perform it as its DPA criterion. For its own detection improvement, retention depends on purpose, data nature and sensitivity, risks and legal requirements; details and rights: https://www.cloudflare.com/privacypolicy/.

5. Your rights

Subject to GDPR conditions, you have rights of access, rectification, erasure, restriction and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation.

Exercise your rights at contact@amlum.com. You have the right to lodge a complaint with the competent supervisory authority; in Slovakia, the Office for Personal Data Protection of the Slovak Republic.

6. Technical cookies

The Cookies and local storage document explains the session cookie and technical form verification. This notice covers the marketing website and business communications; processing within the separate AML service is covered by its own information and contracts.