Privacy Policy

Lutadix OÜ (“Lutadix”, “we”, “us”, or “our”) is a private limited company registered in the Republic of Estonia. Lutadix OÜ is the data controller responsible for the processing of personal data collected through this website.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal data when individuals interact with our website and services. It is prepared with reference to the EU General Data Protection Regulation (Regulation (EU) 2016/679) (the “GDPR”) and applicable Estonian data-protection legislation.

We collect only the personal data necessary to operate this website and respond to business inquiries:

• Contact details you provide — such as your name, business email address, phone number, and organization — when you submit an inquiry through our contact form or contact us directly.
• Inquiry content — the subject and contents of the messages and communications you send us.
• Technical information — limited information processed automatically when you visit the website, such as IP address, browser and device type, and website usage and security logs generated by our hosting infrastructure.

We do not knowingly collect special categories of personal data through this website, and we ask that you do not include such information in your inquiries.

We process personal data only for defined purposes, each with an applicable legal basis under the GDPR:

• Responding to inquiries and communicating with you — processing necessary to take steps at your request before entering into a contract (Art. 6(1)(b) GDPR), and our legitimate interest in responding to business communications (Art. 6(1)(f) GDPR).
• Delivering our services — performance of a contract with you or your organization (Art. 6(1)(b) GDPR).
• Operating, maintaining, and securing the website — our legitimate interest in ensuring the availability, performance, and security of our website and systems (Art. 6(1)(f) GDPR).
• Complying with legal obligations — for example, accounting, tax, and record-keeping requirements (Art. 6(1)(c) GDPR).

We do not sell personal data. Personal data may be processed on our behalf by trusted categories of service providers, strictly as needed to operate the website and deliver our services, including:

• Website hosting and infrastructure providers
• Email and communication providers
• IT and security providers
• Professional advisers, such as accountants and legal counsel

Where service providers process personal data on our behalf, they do so under appropriate contractual confidentiality and data-protection obligations. We may also disclose personal data where required by law or to protect our legal rights.

As we serve organizations internationally, personal data may, where necessary, be processed in countries other than your own. Where personal data subject to the GDPR is transferred outside the European Economic Area, we use an applicable lawful transfer mechanism or safeguard — such as an adequacy decision or standard contractual clauses — where required by law.

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, and to satisfy applicable legal, contractual, accounting, security, or compliance requirements. Where a specific retention period has not been established, we determine the appropriate period based on the nature and sensitivity of the data, the purpose of the processing, and our legal and operational obligations.

We apply appropriate technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is fully secure, and we cannot guarantee absolute security.

Where the GDPR applies, you have the following rights in relation to your personal data, subject to the conditions and limitations set out in applicable law:

• The right of access to your personal data
• The right to rectification of inaccurate or incomplete data
• The right to erasure of your personal data
• The right to restriction of processing
• The right to object to processing
• The right to data portability
• The right to withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal

To exercise any of these rights, or for any request concerning your personal data, please contact us at info@lutadix.com.

You have the right to lodge a complaint with a competent data-protection supervisory authority. For Lutadix OÜ, the competent authority in Estonia is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), www.aki.ee.

This website does not use cookies, analytics tools, tracking technologies, third-party embeds, or marketing technologies. We do not store functional or preference data in your browser. If this changes in the future, this Privacy Policy will be updated accordingly and, where required, your consent will be requested before such technologies are used.

We do not use personal data collected through this website for profiling or automated decision-making, including decisions that produce legal or similarly significant effects.

We may update this Privacy Policy when our practices, services, technologies, or applicable legal requirements change. The latest version will always be available on this page with a revised date.

If you have questions about this Privacy Policy or our data practices, or wish to exercise your data-protection rights, please contact us at info@lutadix.com or by post at our registered address above.