Privacy Policy
Last updated: 2026-10-30
1. Data Controller
The data controller is UnderUndre (activity classification: EU NACE Rev. 2, code 62.01). Contact for privacy matters: underundre+contact@outlook.com.
2. What data we collect
Via the brief form (/api/lead) we process: your work email; a contact handle (messenger, phone — optional); your project description; arbitrary form metadata (e.g. bottleneck type, team size). We do not collect payment data or special categories of personal data.
3. Purposes & lawful basis
Data is used solely to respond to your inquiry, prepare a fixed-scope commercial proposal, and subsequently perform the contract. Lawful basis: legitimate interest (Art. 6(1)(f) GDPR) during B2B communication and contract performance (Art. 6(1)(b) GDPR) once concluded.
4. Retention
Data is retained for no longer than 12 months from the last communication, then deleted unless a contract has been concluded with you.
5. Your rights
You have the right to access, rectification, erasure, restriction of processing and objection. To exercise any right, email underundre+contact@outlook.com — we respond within 30 days. You may also lodge a complaint with your local supervisory authority.
6. Automated decision-making
We do not make legally significant decisions based solely on automated processing of your data.
7. Data recipients
Data is shared only with notification-delivery services required to process your request (messenger alerts and, if configured, the operator's CRM webhook). Data is never sold or shared with third parties for marketing purposes.