Privacy Policy
This page explains what personal data Flowlizard collects through this website, why, and what rights you have under the GDPR.
Contents
Last updated
2026-08-26
Who is the data controller
The controller for this website and related marketing activities is ONYX Solutions s.r.o., operating under the brand Flowlizard.
Registered address: Příkop 843/4, 602 00 Brno, Česká republika
Registration number: 24088463, spisová značka C 149104 vedená u Krajského soudu v Brně
VAT number: CZ24088463
General contact: info@onyx-software.com
Privacy contact: info@onyx-software.com
Data protection contact / DPO (if applicable): N/A
What personal data we collect and how it is collected
Depending on how you interact with the website, we may collect the following categories of personal data:
- Identification and contact details submitted through demo or contact forms, such as name, business email, company name, phone number, and message content.
- Technical data generated by website use, such as IP address, browser type, operating system, device information, referring URL, and server log information.
- Consent-related data, including cookie preferences, timestamps, and proof of consent choices.
- Newsletter subscription data, if a newsletter or similar marketing communication flow is enabled later.
We collect data in the following ways:
- Directly from the user through forms, email, meetings, or other direct contact.
- Automatically through website infrastructure, necessary cookies, log files, and optional analytics tools after consent.
- From internal sales or support workflows when a user requests a demo, pricing information, or a follow-up conversation.
Purposes of processing and legal bases
Recipients, processors, and third-party tools
We may share personal data with processors and service providers only where this is necessary for the purposes described above and under appropriate contractual safeguards.
- The specific providers we currently use are listed below.
Hosting provider: Netlify, Inc.
Analytics tools: Google Analytics
Marketing tools: –
Functional/support tools: –
International transfers outside the EU/EEA and retention periods
Some processors or subprocessors may process data outside the EU/EEA. Where this happens, the controller intends to use appropriate safeguards such as standard contractual clauses or equivalent lawful mechanisms.
Transfer safeguards: Some processors, such as our hosting provider (Netlify, Inc.), may process data outside the EU/EEA. Where this occurs, we rely on the EU Standard Contractual Clauses (SCCs) and the data processing agreement (DPA) provided by that processor.
General retention period: 24 months from the last relevant contact, unless a longer period is required by law.
Contact requests: 24 months from submission.
Demo requests and sales follow-up: 24 months from submission.
Newsletter subscriptions: 24 months from the last activity.
Data subject rights
You may have the following rights under the GDPR, subject to the legal conditions and limitations that apply:
- Right of access to personal data.
- Right to rectification of inaccurate or incomplete data.
- Right to erasure where the GDPR conditions are met.
- Right to restriction of processing.
- Right to data portability where applicable.
- Right to object to processing based on legitimate interests.
- Right to withdraw consent at any time for consent-based processing.
- Right to lodge a complaint with the competent supervisory authority.
To exercise these rights, contact: info@onyx-software.com
Right to lodge a complaint with a supervisory authority
If you believe that your personal data has been processed in breach of applicable law, you may lodge a complaint with the competent supervisory authority.
Competent supervisory authority: Úřad pro ochranu osobních údajů (ÚOOÚ)
Website: https://www.uoou.cz
Contact form, demo request, and newsletter processing
Contact form submissions and demo requests are processed so that the controller can respond to the request, qualify business interest, and continue the requested conversation. This processing does not automatically mean consent to marketing messages.
If a newsletter or similar marketing signup is enabled, it should rely on a separate, optional consent mechanism that is not pre-selected and can be withdrawn at any time.
Data entered in forms may include name, company, email, company size, phone number, and message content, depending on which fields are enabled later.
Additional information
Providing personal data through website forms is generally voluntary, but some fields may be necessary to process your request. If required information is not provided, the controller may be unable to respond effectively.
Flowlizard does not intentionally use website data for automated decision-making or similarly significant profiling unless explicitly stated here later.
This privacy policy reflects our current data practices and is reviewed periodically to stay aligned with legal requirements and changes to the tools we use.