ElevateX Global s.r.o. is the data controller for this website and for client engagements. This notice explains what is collected, why, and how to make it stop. There is no advertising network, no data sale and no third-party tracking pixel on this site.
The free tools on this site run entirely in your browser. Inputs are never transmitted to a server, never stored, and disappear when you close the tab.
Standard server logs record IP address, browser type and pages requested for security and availability purposes. These are retained for thirty days and then deleted.
No advertising cookies, no cross-site tracking, no session recording, no fingerprinting.
If you email or book a call, we process your name, email address, company and whatever you choose to tell us, in order to respond and, if relevant, to prepare a proposal.
The lawful basis is legitimate interest in responding to a business enquiry, and performance of a contract once an engagement begins.
Enquiry records are kept for twenty-four months from last contact, then deleted.
Calls are booked through a third-party scheduling provider, which processes your name, email and chosen time slot on our behalf under a data processing agreement.
Business email is hosted by a standard European provider. Data is stored within the EEA.
During an engagement we may be given access to your CRM, call recordings and commercial data. For that data, you remain the controller and ElevateX acts as processor under the terms of the engagement letter and a data processing agreement where required.
Access is read-only where practical, limited to the individuals delivering the work, and revoked on completion. Working copies are deleted within ninety days of engagement end unless you ask for them sooner.
A small number of processors: email hosting, scheduling, accounting and cloud storage. Each is bound by contract, and none are permitted to use your data for their own purposes.
Data is not sold, rented or shared for advertising under any circumstances.
Data is stored within the European Economic Area wherever possible. Where a processor transfers data outside the EEA, it is done under Standard Contractual Clauses or an adequacy decision.
Under GDPR you can request access to your data, correction, erasure, restriction of processing, portability, and you can object to processing based on legitimate interest.
To exercise any of these, email contact@elevatexglobal.eu. We respond within thirty days and will not ask you to justify the request.
If you are unhappy with the response, you can complain to the Czech Office for Personal Data Protection or to your local supervisory authority.
Access to systems is protected by multi-factor authentication and a password manager. Devices are encrypted. Client credentials are never stored in plain text or shared over chat.
If this notice changes materially, the updated version is published here with a new date. Anyone in an active engagement is notified by email.
Data protection questions: contact@elevatexglobal.eu, or write to ElevateX Global s.r.o., IČO 23377364, Prague, Czech Republic.