We process personal data only to the extent necessary for:

• providing services electronically,
• handling inquiries and communicating with users,
• fulfilling legal obligations,
• ensuring the security of the service,
• conducting statistical analysis and improving services (to the extent permitted by law).

Depending on how you use the service, we may process:

• identification data (e.g. name, if provided),
• contact data (e.g. email address),
• technical and operational data (e.g. IP address, device information, system logs),
• data related to activity on the service.

Providing data is voluntary in principle, but may be necessary to use certain features.

We process personal data in accordance with the GDPR, in particular on the basis of:

• Art. 6(1)(b) GDPR — where processing is necessary for the performance of a contract or to take steps prior to entering into a contract,
• Art. 6(1)(c) GDPR — where processing is necessary to comply with a legal obligation,
• Art. 6(1)(f) GDPR — where processing is necessary for the legitimate interests of the controller,
• Art. 6(1)(a) GDPR — based on consent (where required).

Data may be transferred to entities cooperating with us that support the provision of services, such as:

• hosting and IT infrastructure providers,
• analytics tool providers,
• communication service providers,
• accounting and legal service providers (where required).

These entities process data under appropriate agreements and solely in accordance with our instructions, unless they act as independent data controllers.

If the use of external services results in data being transferred outside the European Economic Area, such transfers are made with appropriate legal safeguards as required by the GDPR (e.g. standard contractual clauses).

We retain data for the period necessary to fulfil the purposes of processing, and then for the period required by law or until claims become time-barred.

Where processing is based on consent — until consent is withdrawn, unless another legal basis for continued processing exists.

You have the right to:

• access your data,
• rectify your data,
• erase your data,
• restrict processing,
• data portability,
• object to processing,
• withdraw consent at any time (where processing is based on consent),
• lodge a complaint with a supervisory authority.

The service may use cookies and similar technologies for the purposes of:

• ensuring the proper functioning of the service,
• maintaining user sessions,
• analytics and statistics,
• remembering preferences.

Detailed information is available in our Cookie Policy.

As a rule, we do not make decisions with legal effects based solely on automated processing, including profiling, unless required by applicable law or the user has given explicit consent.

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction or unauthorised modification.

This Privacy Policy may be updated periodically, in particular in the event of legal or organisational changes. The current version is published on this page along with the date of the last update.

For matters relating to personal data, please contact us:

• Disaster Limited (operating as Struxa)
• 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ
• privacy@struxa.cloud