GDPR Statement

The company obtains information directly from clients or application users to provide services. Data is obtained on a daily basis, ensuring the smooth functioning of our services.

We perform various processes against the data, including collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

Retention lasts until withdrawal of consent or the expiry of the limitation period for claims arising from contractual agreements. The company maintains procedures for secure deletion per GDPR standards.

Enterprise clients can select server geographic locations. We implement appropriate network perimeter IT security protection measures, such as firewalls, intrusion prevention systems (IPS), email/web filtering, DMZ, VLANs, and electronic backups using Google Cloud infrastructure. Internal protections include antivirus software and restricted access.

Vendor procedures comply with GDPR. The vendor maintains formal Data Privacy and Information Security Policies and executes compliant data processing agreements.

We have established procedures for handling data subject rights requests in accordance with GDPR provisions. Breach procedures ensure notification to controllers within 24 hours. There were no incidents reported in the last 12 months.

Transfer occurs via email or via a dedicated API connection, with regulated electronic transfer and control mechanisms.

The organization implements regular security testing, defined responsibilities, and data protection by design and default by implementing privacy-friendly pre-settings and processing only necessary personal data.

StarlixAI's commitment to GDPR compliance and protecting personal data is of utmost importance. We regularly review and update our practices to align with changes in legislation, industry best practices, and our commitment to data protection and privacy.