1. Who is responsible
The controller for personal data handled in connection with this website and our business inquiries is:
skout, s. r. o.
Jaskovy rad 187
831 01 Bratislava
Slovakia
ID No.: 52750914
VAT ID: SK2121152935
For privacy questions or rights requests, write to the address above, marked “Lusus.AI — Privacy”. This policy covers website visits and inquiries about our services. Any future data licensing project requires a separate assessment and appropriate privacy information and agreements.
2. Information you submit
The contact form collects your company name, website (if provided), country, employee range, industry, contact email, and a description of the tools and systems you use. We send this information to our designated inquiry inbox using Resend, our email delivery provider, to review the opportunity and respond. Submitting an inquiry does not subscribe you to marketing or authorize us to access your business accounts.
Please provide high-level business information only, without confidential datasets, credentials, or sensitive personal information. We do not store form submissions in a separate website database. Copies are processed by our email delivery and mailbox providers and retained as business correspondence.
3. Other information we may process
Website requests: hosting and security infrastructure processes technical information such as IP address, requested URL, time of access, browser and device information, and request or security events to deliver and protect the website.
Direct inquiries and business relationships: if you contact us separately, we may receive your name, work contact details, role, company details, correspondence, and information you choose to provide. Where a transaction proceeds, related contract and payment information is handled for that relationship. We do not obtain access to your business tools merely because you visit this site.
4. Purposes and legal bases
- Operating and securing the site: our legitimate interests in reliable delivery, abuse prevention, and troubleshooting (Article 6(1)(f) GDPR).
- Responding to inquiries and managing business contacts: our legitimate interests in handling business communications; steps at your request before a contract, or performance of a contract, where Article 6(1)(b) applies.
- Legal obligations and disputes: compliance with applicable obligations (Article 6(1)(c)), or legitimate interests in establishing, exercising, or defending legal claims.
- Optional activities requiring consent: only with consent where required (Article 6(1)(a)); consent may be withdrawn without affecting prior lawful processing.
Providing inquiry details is voluntary, but we may be unable to respond without enough information. We do not use the contact form to make an automated decision with legal or similarly significant effects.
5. Who may receive information
The site is delivered using OpenAI Sites and Cloudflare infrastructure. Hosting and security providers may process technical request information to deliver and protect it. Where needed, authorized personnel and professional or technology service providers may handle correspondence or business records for the purposes above, subject to applicable confidentiality and data protection requirements. Information may also be disclosed where legally required or necessary to protect legal rights.
We use Resend to deliver form submissions to our business email inbox and our mailbox provider to receive and manage them. These providers process submitted details for email delivery and correspondence handling. We do not sell website visitors’ personal data or share inquiry submissions with buyers without a separately agreed scope. A potential data licensing transaction would require a separately agreed scope, rights review, and appropriate safeguards before any sharing.
6. International processing
Our providers may operate in the European Economic Area and other countries. Where personal data is transferred outside the EEA, the transfer must have an applicable legal basis and safeguards, such as an adequacy decision or European Commission standard contractual clauses, with additional measures where required. You may request information about relevant safeguards using the contact details above.
7. Retention and security
Submitted inquiries are received and retained as business correspondence. Technical information is kept only for the period needed for website delivery, security, and troubleshooting, taking account of provider settings and any incident investigation. Correspondence is kept for the inquiry and any ongoing relationship, and thereafter only as needed for legal obligations or the establishment or defence of claims. Contract and accounting records are retained for applicable statutory periods.
Retention depends on the purpose, the record type, relevant legal requirements and limitation periods, and any unresolved dispute. We use proportionate technical and organizational safeguards; no internet service can promise absolute security. Avoid sending confidential datasets or credentials through ordinary correspondence.
9. Your data protection rights
Subject to the conditions in applicable law, you may request access to, correction or erasure of, or restrictions on processing of your personal data, and data portability where applicable. You may object to processing based on legitimate interests, and to direct marketing at any time. Where processing is based on consent, you may withdraw it.
Write to us using the contact details in section 1. We may ask for proportionate information to verify identity. We normally respond within one month; where a lawful extension is needed, we will explain it. Requests are ordinarily free, subject to statutory exceptions.
You may complain to the Office for Personal Data Protection of the Slovak Republic, or another competent supervisory authority, including where you live or work. You do not have to contact us first.
10. Changes and further information
We will update this policy when the website’s data handling changes and revise the date below. New services or a data licensing engagement may require additional notices before new processing begins. Data described as anonymized must be genuinely non-identifiable; pseudonymized information remains personal data where a person can still be identified.
For more information, see the European Union’s GDPR guidance and our Terms and Conditions.