Privacy Notice

Controller

Process Song s.r.o., Company ID 27641368, registered office Rybná 716/24, Staré Město, 110 00 Praha ("we"). Privacy contact: roman.fiser@grcx.ai.

Data we process

First and last name, e-mail address, company name; and, when you use the service, technical data necessary for security (in particular IP address and sign-in records). We also store your unverified Czech phone number, consent choices and their timestamp and notice version. A necessary trial-history cookie lasts 400 days; no optional tracking runs at present.

Purposes and legal bases

Setting up and managing your 30-day trial access to the e-book. Performance of a contract (Art. 6(1)(b) GDPR).

Securing the service and preventing abuse (including verifying that the registration is not automated). Our legitimate interest (Art. 6(1)(f) GDPR).

Sending commercial communications about GRCx products. Solely based on your voluntary consent (Art. 6(1)(a) GDPR), which you may withdraw at any time without affecting your trial access.

Retention

Account data is kept for the duration of the trial and for 12 months thereafter in case of future cooperation, then deleted or anonymised. Data processed on the basis of consent is kept until the consent is withdrawn.

Recipients

Our contracted processors operating the service: identity management provider (ZITADEL, operated in the EU), hosting provider (Vercel), bot-protection provider (Cloudflare).

Your rights

Access, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interest, and withdrawal of consent at any time. You may also lodge a complaint with the Czech Office for Personal Data Protection (www.uoou.cz). To exercise your rights, contact us at roman.fiser@grcx.ai.

Automated decision-making

None.