Privacy Policy

This Privacy notice relates to all Users of the website www.aqxt.com (data subjects) (“You”, “Your”), whose personal data is processed by the controller AQX Technologies (“we”, “us”, “our”), established in the European Union (“the Union”).

In terms with the application ofRegulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR”), we therefore inform You how we collect and process Your personal data through the website www.aqxt.com (“the Website”).

Identification and contact details information
About the Controller
AQX Technologies
20 Zlaten Rog Str., 1407 Sofia, Bulgaria
+359 2 439 6570
info@aqxt.com
ww.aqxt.com

What personal data we process. Purpose and legal basis.
We collect Your personal data as follows:
Directly, whenever you fill Your personal data in forms on the Website;
indirectly, browsing the Website;

The below Table 1 lists the categories of your personal data, that we collect and process through the Website, for what purpose and on what legal basis:

Logging information:

We collect:

Internet (IP) address;
Web browser information;
Session history;

Why we collect:

To maintain our Website and prevent it from cyberthreats including DDoS and botnet attacks;

Legal basis for processing:

Legitimate interest (Art. 6(1)(f) GDPR).

Contact form information

We collect:

First and Last name;
E-mail address;
Phone number;
Company;
Any personal data you provide within the message.

Why we collect:

To answer your questions and provide relevant information to You in timely manner.

Legal basis for processing:

Legitimate interest (Art. 6(1)(f) GDPR).

Personal data and logging information

To maintain our Website and prevent it from cyber threats such as DDoS and botnet attacks, we log every visit to the Website including IP addresses and other technical information (web browser information). As stated by CJEU, your IP address sometimes may constitute personal data. That is why, we treat all IP addresses as personal data under GDPR all the time. Therefore, your IP address is personal data for us and is processed us every time you interact with the Website.

Personal data and filling out the Contact form

We encourage you to provide only accurate and limited to what is necessary volume of information within the Contact form. This means that in all free-form text fields only the necessary information should be provided to us. Sometimes this may be personal data as in other cases non-personal data is required such as company name, company email, etc. Where filling in a field is not required it is up to you to provide us relevant information. Without providing all required information including personal data we may not be able to process your inquiry and/or get back to you.

Automated individual decision-making

You are not object to a decision based solely on automated processing, including profiling, while visiting and interacting with the Website.

Recipients of your personal data

We may share your personal data with recipients including third parties when:

We are subject to legal obligation to do that;
It is necessary for the proper operation of the Website; or
We have legitimate interest to do so (necessary for the establishment, exercise or defense of legal claims).

The processors we engage are not allowed to process your personal data for their own purposes. The processors we engage process your personal data only:

For specified purposes defined by us; and
In accordance to our instructions.

Transfer of Your personal data to third countries

We do not transfer your personal data in the context of Chapter V of GDPR.

Security of Your personal data

Your personal data are secured by the latest state of the art technologies. We have implemented adequate technical and organizational measures for security to prevent from accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to.

Nevertheless, the access to Your personal data is strictly limited to persons that are related and authorized to access to Your personal data. They process Your personal data in accordance with our instructions and are under confidentiality obligation. Your personal data is fully encrypted and secured.

We have implemented strict procedures for dealing with any supposed data breach, related to personal data, and will notify You and the competent data protection authority (DPA) in case of data breach, when we are obliged to do so.

Storage period

We store your personal data until the Website is running or 3 years after the data is collected.

We may store Your personal data a longer period if necessary, for the establishment, exercise or defense of legal claims.

Exercise Your data subject rights

As a data subject You can exercise any of the following rights:

Right of access. You have the right to access to your personal data we process and inspect how we process them;
Right to rectification. You have the right to have your incomplete personal data completed, including by means of providing a supplementary statement;
Right to erasure. You have the right to obtain the erasure of your personal data concerning without undue delay and we have the obligation to erase personal data without undue delay where certain grounds apply;
Right to restriction of processing. You have the right to obtain restriction of processing Your personal data where a certain ground applies;
Right to data portability*. You have the right to receive the Your personal data in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance if technically feasible in case of processing based on point (b) of Article 6(1).
Right to object*. You have the right to object at any time to processing of personal data concerning him or her which is based on point (f) of Article 6(1), including profiling based on those provisions.

Where we have reasonable doubts concerning your identity when making a Data Subject Request (“the Request”), we may request the provision of additional information necessary to confirm your identity. This precautionary measure guarantees that any of your personal data will not be exposed before unauthorized party.

You can make the Request emailing privacy@aqxt.com your Data Subject Request that should include the following mandatory information:

Your personal Identification details – First and last name;
Contact details – email and/or mailing address;
Subject matter of the Request;
Preferable means of receiving the information.

Right to lodge a Complaint with a supervisory authority

You have the right at any time to lodge a Complaint with a supervisory authority (Data Protection Authority) in particular in the Member State of Your habitual residence, place of work or place of the alleged infringement if the You consider that the processing of personal data relating to You infringes GDPR.

Contact details of Data Protection Authorities as follows:https://edpb.europa.eu/about-edpb/board/members_en

Update of this Privacy Policy

We may update this Privacy Notice from time to time based on any changes regarding the processing of Your personal data and/or updates of the Website.

‍