Privacy Policy

1. Who we are

Openbiznis is operated by Launchzy s. r. o., a limited liability company (spoločnosť s ručením obmedzeným) registered in the Slovak Republic.

• Registered address: Jazernica 129, 038 44 Jazernica, Slovakia
• Company ID (IČO): 57605513
• VAT identification number (DIČ): 2122848673
• Commercial register: Obchodný register Okresného súdu Žilina, oddiel: Sro, vložka č. 91150/L
• Contact: ceo@launchzy.eu · +421 905 706 135

For the purposes of the EU General Data Protection Regulation (GDPR), Launchzy s. r. o. is the controller of personal data described in section 3, and the processor of customer data described in section 4.

We have not appointed a Data Protection Officer, as we are not required to under Article 37 GDPR. Privacy enquiries go to ceo@launchzy.eu.

2. Two different roles

It matters which hat we are wearing, because your rights differ:

• As controller — when you visit this website, contact us, book a demo, or administer an Openbiznis account, we decide why and how that data is processed.
• As processor — when your organisation uses Openbiznis and puts its own business data into it (leads, contacts, deals, call records), your organisation decides why and how. We act on its documented instructions. If you are an individual whose data sits inside a customer's Openbiznis workspace, that customer is your controller and you should direct requests to them first.

3. Data we process as controller

Website visitors

• Technical data: IP address, browser and device type, referring page, pages viewed, and timestamps.
• Purpose: serving the site, keeping it secure, and understanding aggregate usage.
• Legal basis: legitimate interests (Article 6(1)(f) GDPR) in operating and securing our own website.

Enquiries and demo bookings

• Data: name, email address, phone number, company, and whatever you choose to tell us.
• Purpose: responding to you, scheduling and running the demo, and following up about it.
• Legal basis: steps taken at your request prior to entering a contract (Article 6(1)(b)), and legitimate interests in business development (Article 6(1)(f)).

Account administration

• Data: name, work email, role, authentication data including multi-factor settings, and login and audit records.
• Purpose: providing the platform, authenticating users, enforcing permissions, supporting customers, billing, and maintaining a security audit trail.
• Legal basis: performance of a contract (Article 6(1)(b)), legal obligation for accounting records (Article 6(1)(c)), and legitimate interests in platform security (Article 6(1)(f)).

4. Data we process as processor

When a customer uses Openbiznis, we process the business data they enter or connect — for example lead and contact records, deal and pipeline data, call logs and dispositions, calendar entries, messages synced from connected channels, commission and invoice records, and files uploaded to the workspace.

We process that data only to provide, secure, and support the platform, on the customer's documented instructions. We do not sell it, we do not use it to build advertising profiles, and we do not use it to train publicly available AI models. The terms governing this are in our Data Processing Agreement.

5. Cookies and similar technologies

We use cookies that are strictly necessary to operate the site and the platform — principally session and authentication cookies — plus, where you consent, limited analytics. Full detail, including how to withdraw consent, is in our Cookie Policy.

6. Sharing and sub-processors

We share personal data only with service providers who help us run Openbiznis, and only to the extent they need it. Each is bound by a written contract with confidentiality and security obligations at least as protective as ours. The current list, with purpose and location, is published on our Sub-processors page.

We may also disclose data where we are legally required to, or to establish, exercise, or defend legal claims.

7. International transfers

We prefer EU or EEA hosting. Where a provider processes data outside the EEA, we rely on an adequacy decision by the European Commission where one exists, and otherwise on the European Commission's Standard Contractual Clauses together with any supplementary measures the transfer requires. The location of each sub-processor is stated on the sub-processors page.

8. Retention

• Website and technical logs — up to 12 months.
• Enquiries and demo records — up to 24 months from our last meaningful contact, unless you ask us to erase them sooner.
• Account and customer workspace data — for the life of the subscription. On termination we delete or return it within 30 days, except where law requires us to keep it longer.
• Security and audit records — up to 24 months.
• Accounting and tax records — for the period required by Slovak law, generally 10 years.

9. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have data erased, where the grounds in Article 17 apply;
• restrict processing in the circumstances set out in Article 18;
• receive data you gave us in a portable format, and have it transmitted to another controller;
• object to processing based on legitimate interests, including profiling; and
• withdraw consent at any time, where processing is based on consent — this does not affect processing already carried out.

Write to ceo@launchzy.eu. We respond within one month, and will tell you if we need the extension Article 12(3) allows. Exercising these rights is free; we may charge a reasonable fee only for manifestly unfounded or excessive requests.

If we process your data as a processor for a customer, we will forward your request to that customer and support them in answering it, rather than acting on it ourselves.

10. Complaints

If you think we have handled your data unlawfully, please raise it with us first. You also have the right to lodge a complaint with a supervisory authority. Ours is the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky), Hraničná 12, 820 07 Bratislava, Slovakia. If you live or work in another EU member state, you may complain to your local authority instead.

11. Security

We apply technical and organisational measures appropriate to the risk, including role-based access control enforced server-side, row-level data isolation, multi-factor authentication with step-up verification on sensitive actions, encryption in transit, and an audit trail of meaningful changes. More detail is on our Security page.

No system is perfectly secure. If a personal data breach is likely to result in a risk to your rights and freedoms, we will notify the supervisory authority within 72 hours where required, and notify affected users without undue delay where Article 34 requires it.

12. Automated decision-making

We do not make decisions producing legal or similarly significant effects about you based solely on automated processing. Openbiznis includes automation that qualifies and routes leads, but the commercial decisions that follow are made by our customers' staff.

13. Children

Openbiznis is a business tool sold to organisations. It is not directed at children and we do not knowingly collect data from anyone under 16. If you believe a child has provided us data, contact us and we will delete it.

14. Changes

We may update this policy as the product or the law changes. The "last updated" date at the top always reflects the current version. Where a change materially affects your rights, we will give account holders reasonable notice by email or in-product before it takes effect.

15. Contact

Launchzy s. r. o., Jazernica 129, 038 44 Jazernica, Slovakia
ceo@launchzy.eu · +421 905 706 135

Related documents