Privacy Policy

Aenze s.r.o. ("Aenze", "we", "us", or "our") respects your privacy and is committed to protecting personal data in accordance with applicable data protection laws, including Regulation (EU) 2016/679 ("GDPR").

This Privacy Policy explains how we collect, use, disclose, store, and protect personal data when you visit our website, use our services, contact us, or interact with applications, integrations, or tools provided by Aenze, including services that may use Meta platforms or APIs.

1. Controller of personal data

The controller of your personal data is:

Aenze s.r.o.
Moskevská 1842
272 04 Kladno
Czech Republic

Company ID No.: 28534395
Registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, File No. 148584

For any privacy-related questions or to exercise your rights, please contact us at: [email protected]

2. What personal data we may collect

Depending on how you interact with us, we may collect and process the following categories of personal data:

• identification data, such as your name, username, company name, or profile identifier
• contact data, such as your email address, phone number, or correspondence details
• account and login data, such as credentials, authentication tokens, or connected account identifiers
• communication data, such as messages, support requests, and related correspondence
• technical data, such as IP address, browser type, device information, operating system, timestamps, log files, and usage diagnostics
• transaction or service-related data, such as records of orders, subscriptions, invoices, or service requests
• marketing preference data, such as newsletter preferences, consent records, and campaign interactions
• social platform or Meta-related data, where applicable, such as public profile information, account ID, email address, profile name, or other data made available to us through permissions you grant via Meta services

We do not intentionally collect special categories of personal data unless this is necessary, lawful, and appropriately protected.

3. How we collect personal data

We may collect personal data:

• directly from you when you fill in a form, contact us, subscribe, register, or use our services
• automatically when you use our website or applications, including through logs, cookies, and similar technologies
• from third parties acting on your instructions, for example when you connect a Meta, Facebook, Instagram, or other third-party account to our services
• from service providers, business partners, or publicly available sources where permitted by law

4. Purposes of processing

We process personal data for the following purposes:

• to provide, operate, maintain, and improve our website, applications, and services
• to create and manage user accounts and connected integrations
• to respond to inquiries, provide support, and communicate with you
• to authenticate users and protect the security of our systems
• to perform contracts and manage business relationships
• to comply with legal and regulatory obligations
• to send service-related notices and, where permitted, marketing communications
• to analyze usage, prevent abuse, detect fraud, and improve performance
• to enable integrations with third-party platforms, including Meta services, where requested by the user

5. Legal bases for processing

Under the GDPR, we rely on one or more of the following legal bases, as applicable:

• performance of a contract or pre-contractual steps at your request
• compliance with a legal obligation
• our legitimate interests, for example operating and securing our services, managing communications, preventing misuse, and improving our products, provided those interests are not overridden by your rights
• your consent, where consent is required by law, including certain cookies or marketing communications

6. Meta platform data and connected services

If you choose to connect or use a service that relies on Meta platforms or APIs, including Facebook Login, Instagram integrations, WhatsApp-related services, or other Meta developer tools, we may process the data that is made available to us through those integrations and permissions.

Such data may include:

• your Meta or platform user ID
• your public profile information
• your name
• your email address
• profile or account metadata
• content or messages that you intentionally submit through the connected service
• technical and usage information required to operate the integration

We process this data only for the purposes clearly described in this Privacy Policy and only to the extent necessary to provide the relevant functionality requested by you.

7. Data sharing

We do not sell personal data.

We may share personal data only when necessary and lawful, including with:

• hosting and cloud infrastructure providers
• IT, security, analytics, and communication service providers
• accounting, legal, tax, and administrative advisors
• payment, invoicing, or business software providers, where relevant
• Meta or other third-party platform providers, where you have chosen to use such integration
• public authorities, courts, regulators, or law enforcement, where required by law or necessary to protect legal rights

Where third parties act on our behalf, we require them to process personal data under appropriate safeguards.

8. International transfers

Some of our service providers or technology partners may process personal data outside the European Economic Area.

Where personal data is transferred outside the EEA, we will ensure that appropriate safeguards are in place, for example:

• an adequacy decision by the European Commission
• Standard Contractual Clauses
• other lawful transfer mechanisms recognized under applicable law

9. Data retention

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy, or as long as required by law.

Retention periods may vary depending on the type of data and the purpose of processing. In general:

• contact and inquiry data are kept for as long as necessary to respond and follow up
• account and service data are kept for the duration of the relationship and a reasonable period afterward
• contract and billing data are retained for the period required by applicable accounting, tax, and legal rules
• technical logs are retained for a limited period necessary for security, troubleshooting, and system integrity
• marketing data are retained until you withdraw consent or object, or until the data are no longer needed

10. Your rights

If the GDPR applies to you, you may have the following rights:

• the right to be informed
• the right of access
• the right to rectification
• the right to erasure
• the right to restriction of processing
• the right to data portability
• the right to object
• rights related to automated decision-making and profiling
• the right to withdraw consent at any time, where processing is based on consent
• the right to lodge a complaint with a supervisory authority

To exercise your rights, please contact: [email protected]

We may need to verify your identity before acting on your request.

11. Right to complain

If you believe your personal data has been processed unlawfully, you have the right to lodge a complaint with the competent supervisory authority.

Office for Personal Data Protection
Úřad pro ochranu osobních údajů
Pplk. Sochora 27
170 00 Praha 7
Czech Republic

12. Data deletion requests, including Meta-related requests

You may request deletion of your personal data at any time by contacting us at: [email protected]

Please include enough information for us to identify your request, such as:

• your full name
• the email address associated with your account or request
• the service or app you used
• where relevant, your Meta, Facebook, or Instagram account identifier connected to our service

If you request deletion, we will delete or anonymize your personal data unless we are legally required or otherwise lawfully permitted to retain certain information.

For users of applications or services connected to Meta platforms, this section constitutes our data deletion information for purposes of Meta platform requirements.

13. Cookies and similar technologies

Our website may use cookies and similar technologies for essential functionality, security, analytics, preferences, and, where applicable, marketing.

Where required by law, we will request your consent before placing non-essential cookies on your device. You can also manage cookies through your browser settings or our cookie banner, where available.

14. Security

We implement appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or unauthorized access.

While no system can guarantee absolute security, we take reasonable steps to protect the information we process.

15. Children

Our website and services are not directed to children under the age required by applicable law for independent consent to data processing. We do not knowingly collect personal data from children without an appropriate legal basis or required parental authorization.

16. Automated decision-making

We do not make decisions based solely on automated processing, including profiling, that would produce legal effects or similarly significant effects on individuals, unless explicitly stated otherwise and lawfully permitted.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, technical, or business developments. The updated version will be published on this page together with the revised "Last updated" date.

18. Contact

Aenze s.r.o.
Moskevská 1842
272 04 Kladno
Czech Republic
[email protected]