← NORMEXA

DRAFT — LEGAL REVIEW PENDING

Privacy Policy

This preview is a counsel-review draft, not an approved or published policy. Publication date pending.

1. Who is responsible for this website

Normexa AI s.r.o., Lidická 700/19, Veveří, 602 00 Brno, Czech Republic, IČO 24101915 is responsible for the personal data we process through this website and our own business correspondence. Privacy contact: hello@normexa.eu, or write to our registered office.

This notice covers the public website, enquiries and booking-related information that we receive as a business. It does not replace any separate privacy or data-processing agreement for a client engagement.

2. What information we process

  • Visiting the website: server and security logs may include network and technical data such as IP address, time of request, requested URL, browser and device information, and operational error information. Exact hosting/logging inventory and retention: pending legal verification.
  • Website usage statistics: Plausible Analytics provides aggregate page visits and actions. Code sends a 'meeting_link_clicked' event with brand and placement, not a name or email address.
  • Contacting us: when you send an email or business enquiry, we may process your name, business details, role, contact details and the information you provide. There is no functioning Normexa-hosted contact form.
  • Booking a meeting: when you use the external Google Calendar booking page, you may provide your name, email, appointment time and other fields displayed by Google. We also receive booking details needed to prepare for and manage the meeting.
  • Business engagements: proposal, onboarding and contract data are handled under the relevant client and service documentation.

3. Purposes and legal bases

Website delivery and security: to operate and secure the website, prevent abuse, diagnose faults and retain proportionate operational logs; normally legitimate interests, Article 6(1)(f) GDPR, where appropriate.

Enquiries and meetings: to reply to requests, evaluate the proposed engagement, organise meetings and follow up; legitimate interests, Article 6(1)(f), and Article 6(1)(b) where necessary for steps requested by an individual prior to entering a contract.

Contractual and accounting duties: Article 6(1)(b) and/or Article 6(1)(c), depending on the affected person and exact legal duty.

Aggregate website analytics: used to understand which content is useful and how visitors reach our website. Applicable legal assessment for deployed configuration: pending counsel review.

We do not treat a meeting booking as consent to unrelated marketing. Any later newsletter, advertising or direct-marketing programme requires its own assessment.

4. Plausible Analytics

Code loads Plausible only on normexa.eu and www.normexa.eu. Plausible is designed for cookieless aggregate analytics and does not retain raw IP addresses or User-Agent strings in its analytics database. Its service processes request information to derive short-lived, website-specific analytics; its provider reports website visitor data are processed within the EU. An action event indicates which booking link was clicked, not that an appointment was booked. We do not intentionally send names, email addresses or sensitive data as event properties.

Provider information: https://plausible.io/data-policy and https://plausible.io/privacy. Final data-flow assessment: pending legal verification.

5. Google Calendar booking

Meeting links lead to an external Google Calendar booking page. Google operates its own service and presents its own privacy information. Normexa receives the meeting details necessary to manage your enquiry and appointment. Google Calendar is not embedded on this website.

The current booking page displays a personal identity rather than the required Normexa corporate identity. Corporate booking destination: pending owner approval. Google privacy information: https://policies.google.com/privacy.

6. Other providers and external requests

This website is built and hosted through the Lovable project/hosting stack. Contracting entity, host, CDN and subprocessors: pending verification.

The site uses locally hosted Archivo and IBM Plex Mono font files. Runtime error-reporting hooks and server-side diagnostic logging exist; actual production error destinations and data contents: pending verification. Additional providers require final browser/network/vendor review.

7. Disclosures and international transfers

Information is accessible to personnel and service providers who need it for these purposes, subject to appropriate arrangements. Depending on provider configuration, data may be transferred to or accessed from outside the EEA. Transfer destinations and safeguards: pending legal verification.

8. Retention

We retain personal information only as long as needed for the relevant purpose and applicable legal obligations. Hosting/security logs, non-contract enquiries, calendar meeting information and contractual/accounting records: actual periods or determinable criteria pending legal verification. Analytics retention follows actual Plausible account and provider settings, subject to agreed arrangements.

9. Your rights

Subject to applicable requirements, you may request access, rectification, erasure, restriction, data portability where available, or object to processing based on legitimate interests. Where we rely on consent, you may withdraw it without affecting processing already carried out. You may complain to the Czech supervisory authority, Úřad pro ochranu osobních údajů (https://uoou.gov.cz/), or another competent authority.

10. Automated decisions

We do not use information collected on this website to make solely automated decisions about visitors that produce legal or similarly significant effects. Final site configuration: pending verification.

11. Changes and contact

We may update this notice when the website or its providers change; an approved publication date will identify the operative version. Privacy email: hello@normexa.eu, or write to the registered office above.