Legal

Privacy Policy

This page explains what personal data Flowlizard collects through this website, why, and what rights you have under the GDPR.

Who is the data controller

The controller for this website and related marketing activities is ONYX Solutions s.r.o., operating under the brand Flowlizard.

Registered address: Příkop 843/4, 602 00 Brno, Česká republika
Registration number: 24088463, spisová značka C 149104 vedená u Krajského soudu v Brně
VAT number: CZ24088463

General contact: info@onyx-software.com
Privacy contact: info@onyx-software.com
Data protection contact / DPO (if applicable): N/A

What personal data we collect and how it is collected

Depending on how you interact with the website, we may collect the following categories of personal data:

  • Identification and contact details submitted through demo or contact forms, such as name, business email, company name, phone number, and message content.
  • Technical data generated by website use, such as IP address, browser type, operating system, device information, referring URL, and server log information.
  • Consent-related data, including cookie preferences, timestamps, and proof of consent choices.
  • Newsletter subscription data, if a newsletter or similar marketing communication flow is enabled later.

We collect data in the following ways:

  • Directly from the user through forms, email, meetings, or other direct contact.
  • Automatically through website infrastructure, necessary cookies, log files, and optional analytics tools after consent.
  • From internal sales or support workflows when a user requests a demo, pricing information, or a follow-up conversation.

Purposes of processing and legal bases

Purpose of processing
Legal basis
Responding to contact requests, product questions, and demo requests
Article 6(1)(b) GDPR or Article 6(1)(f) GDPR, depending on the request context
Operating, securing, and maintaining the website
Article 6(1)(f) GDPR
Storing and honoring cookie preferences
Article 6(1)(c) GDPR and Article 6(1)(f) GDPR
Sending newsletters or marketing communications where enabled
Article 6(1)(a) GDPR
Using analytics, functional, or marketing cookies
Article 6(1)(a) GDPR

Recipients, processors, and third-party tools

We may share personal data with processors and service providers only where this is necessary for the purposes described above and under appropriate contractual safeguards.

  • The specific providers we currently use are listed below.

Hosting provider: Netlify, Inc.
Analytics tools: Google Analytics
Marketing tools: –
Functional/support tools: –

International transfers outside the EU/EEA and retention periods

Some processors or subprocessors may process data outside the EU/EEA. Where this happens, the controller intends to use appropriate safeguards such as standard contractual clauses or equivalent lawful mechanisms.

Transfer safeguards: Some processors, such as our hosting provider (Netlify, Inc.), may process data outside the EU/EEA. Where this occurs, we rely on the EU Standard Contractual Clauses (SCCs) and the data processing agreement (DPA) provided by that processor.

General retention period: 24 months from the last relevant contact, unless a longer period is required by law.
Contact requests: 24 months from submission.
Demo requests and sales follow-up: 24 months from submission.
Newsletter subscriptions: 24 months from the last activity.

Data subject rights

You may have the following rights under the GDPR, subject to the legal conditions and limitations that apply:

  • Right of access to personal data.
  • Right to rectification of inaccurate or incomplete data.
  • Right to erasure where the GDPR conditions are met.
  • Right to restriction of processing.
  • Right to data portability where applicable.
  • Right to object to processing based on legitimate interests.
  • Right to withdraw consent at any time for consent-based processing.
  • Right to lodge a complaint with the competent supervisory authority.

To exercise these rights, contact: info@onyx-software.com

Right to lodge a complaint with a supervisory authority

If you believe that your personal data has been processed in breach of applicable law, you may lodge a complaint with the competent supervisory authority.

Competent supervisory authority: Úřad pro ochranu osobních údajů (ÚOOÚ)
Website: https://www.uoou.cz

Contact form, demo request, and newsletter processing

Contact form submissions and demo requests are processed so that the controller can respond to the request, qualify business interest, and continue the requested conversation. This processing does not automatically mean consent to marketing messages.

If a newsletter or similar marketing signup is enabled, it should rely on a separate, optional consent mechanism that is not pre-selected and can be withdrawn at any time.

Data entered in forms may include name, company, email, company size, phone number, and message content, depending on which fields are enabled later.

Additional information

Providing personal data through website forms is generally voluntary, but some fields may be necessary to process your request. If required information is not provided, the controller may be unable to respond effectively.

Flowlizard does not intentionally use website data for automated decision-making or similarly significant profiling unless explicitly stated here later.

This privacy policy reflects our current data practices and is reviewed periodically to stay aligned with legal requirements and changes to the tools we use.

Your privacy choices

Flowlizard uses necessary cookies to run the site. Analytics, functional, and marketing cookies are only enabled after your consent.