GDPR Compliance

Last updated: March 2026

1. Data Controller

Fluxiq SRL acts as the data controller for personal data collected through our website and services. Our registered office is located in Romania, and we are committed to complying with the General Data Protection Regulation (EU) 2016/679 (GDPR).

For all data protection inquiries, you may contact our data protection team at hello@fluxiq.ro.

2. Legal Basis for Processing

We process your personal data based on one or more of the following legal bases: your consent (e.g., when you submit a contact form), performance of a contract (e.g., when we deliver automation services), our legitimate interests (e.g., improving our services and website security), and compliance with legal obligations.

Where we rely on consent, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out before the withdrawal.

3. Data Processing Activities

We process personal data for the following purposes: responding to contact form submissions, managing booking and scheduling of discovery calls, delivering contracted AI automation services, processing webhook data for client integrations, and analyzing website usage to improve our services.

When delivering automation services, we may process client business data (including webhook payloads, API responses, and integration data) as a data processor on behalf of our clients, governed by a separate data processing agreement.

4. International Data Transfers

Your personal data is primarily stored and processed within the European Economic Area (EEA). In cases where data transfer outside the EEA is necessary (for example, when using third-party meeting platforms), we ensure appropriate safeguards are in place.

These safeguards include Standard Contractual Clauses (SCCs) approved by the European Commission, adequacy decisions, or your explicit consent for specific transfers.

5. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. Contact form submissions are retained for 12 months. Booking records are retained for 24 months after the scheduled date. Client project data is retained for the duration of the contract plus 5 years for legal compliance.

When data is no longer required, it is securely deleted or anonymized. You may request earlier deletion of your data by contacting us, subject to any legal retention requirements.

6. Your Rights Under GDPR

As a data subject, you have the following rights: right of access to your personal data, right to rectification of inaccurate data, right to erasure ("right to be forgotten"), right to restrict processing, right to data portability, and right to object to processing.

To exercise any of these rights, please contact us at hello@fluxiq.ro. We will respond within 30 days of receiving your request. If you are unsatisfied with our response, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) or your local supervisory authority.

7. Cookie Policy

Our website uses strictly necessary cookies for core functionality, including session management and language preference storage. These cookies do not require consent as they are essential for the website to function.

We do not use advertising cookies, social media tracking cookies, or any third-party analytics cookies that track individual users across websites. Our approach minimizes data collection in line with the data minimization principle of GDPR.

8. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without verified parental consent, we will take steps to delete that information promptly.

If you believe we have inadvertently collected data from a minor, please contact us immediately at hello@fluxiq.ro.

9. Policy Updates

We may update this GDPR compliance page from time to time to reflect changes in our practices or applicable regulations. Significant changes will be communicated via our website, and we will update the "Last updated" date at the top of this page.

We encourage you to review this page periodically to stay informed about how we protect your personal data. Your continued use of our services after any changes constitutes acceptance of the updated policy.