Privacy Policy

Through the project enquiry form we may collect:

• name;
• company;
• email address;
• phone number;
• country / region;
• selected enquiry type;
• area of interest;
• project stage;
• project timing;
• information provided in the enquiry message.
• technical request data, such as IP address, request time and security or diagnostic metadata generated when the site or form is used.

The information is processed to:

• respond to enquiries;
• understand the requested project, product or technical requirement;
• communicate about potential cooperation;
• take steps requested by the user before entering into a possible business relationship.
• operate, secure and troubleshoot the website and prevent spam, misuse or other abusive activity.

TechControls relies on its legitimate interests under Article 6(1)(f) GDPR to assess, respond to and manage genuine business enquiries and to operate and protect the website, provided that these interests are not overridden by the interests, rights or freedoms of the individual concerned.

Where the individual making the enquiry would personally be a party to a potential contract, processing may also be necessary under Article 6(1)(b) GDPR to take requested steps before entering into that contract.

Name and email address are required so that TechControls can identify and respond to the enquiry. Without them, the form cannot be submitted. All other form fields are optional.

Use of Vercel, Resend and Microsoft 365 may involve processing outside the European Economic Area, including in the United States. Where required, the providers' contractual transfer safeguards apply, including the European Commission's Standard Contractual Clauses. Information about the safeguards relevant to an enquiry, including how to obtain a copy where available, may be requested from info@techcontrols.eu.

Enquiry information is reviewed and deleted when it is no longer needed to respond to the enquiry, evaluate or manage the resulting business relationship, establish or defend legal claims, or meet legal obligations. The period depends on whether the enquiry ends without follow-up, develops into an active business relationship or must be retained for a legally required period.

Technical and security data is retained according to the applicable provider settings and for no longer than needed to operate, protect and troubleshoot the website. Provider backup or deletion cycles may continue for a limited period after deletion from active systems.

Depending on the circumstances and applicable law, individuals may have the right to:

• access their personal data;
• correct inaccurate personal data;
• request deletion;
• request restriction of processing;
• object to processing;
• receive or transfer their data where data portability applies;
• lodge a complaint with the competent supervisory authority.

In Latvia, the competent supervisory authority is Datu valsts inspekcija (Data State Inspectorate).

• no marketing tracking is currently implemented;
• no analytics are currently implemented;
• the enquiry workflow does not intentionally use email open or click tracking; this setting is checked as part of the production configuration.

For privacy questions, contact info@techcontrols.eu.