Privacy Policy

Privacy Policy

This Privacy Policy describes how xyndata s.r.o. ("xyndata", "we", "us", or "our") collects, uses, and protects personal data in connection with the xynLog manufacturing execution system and overall equipment effectiveness monitoring platform ("Service") and our website at xynlog.com.

We are committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Data Controller

The data controller responsible for your personal data is:

xyndata s.r.o. Czech Republic Email: info@xyndata.com Phone: (+420) 778 493 540

For data protection inquiries, please contact us at info@xyndata.com.

2. Categories of Personal Data We Collect

2.1 Account and Contact Information

When you register for our Service or contact us, we may collect:

• Name and job title
• Email address
• Phone number
• Company name and address
• Billing information

2.2 Service Usage Data

When you use our Service, we collect:

• Login and authentication data
• User activity logs
• Feature usage patterns
• System configuration settings

2.3 Machine and Manufacturing Data

Our Service collects operational data from connected manufacturing equipment, which may include:

• Machine identification numbers
• Production metrics and OEE data
• Equipment status and performance data
• Sensor readings and telemetry
• Production schedules and job information

This data is typically not personal data, but in some cases may be linked to individual operators or workstations.

2.4 Website Analytics Data

When you visit our website, we may collect:

• IP address (anonymized where possible)
• Browser type and version
• Device information
• Pages visited and time spent
• Referral source
• Geographic location (country/region level)

2.5 Communication Data

When you contact us, we collect:

• Email correspondence
• Support ticket content
• Phone call records
• Feedback and survey responses

3. Legal Basis for Processing

We process personal data based on the following legal grounds:

3.1 Performance of Contract

We process data necessary to provide the Service you have subscribed to, including account management, technical support, and service delivery.

3.2 Legitimate Interests

We process data for our legitimate business interests, including:

• Improving and developing the Service
• Ensuring security and preventing fraud
• Analyzing usage patterns to optimize performance
• Communicating about service updates and relevant information

3.3 Consent

Where required by law, we obtain your consent before:

• Sending marketing communications
• Using cookies for analytics and advertising
• Processing special categories of data

3.4 Legal Obligation

We process data when required by law, such as for tax compliance, regulatory reporting, or responding to legal requests.

4. How We Use Your Data

We use personal data for the following purposes:

4.1 Service Provision

• Creating and managing your account
• Providing access to the xynLog platform
• Processing and displaying machine data
• Generating reports and analytics
• Providing technical support

4.2 Service Improvement

• Analyzing usage patterns to improve features
• Developing new functionalities
• Optimizing performance and reliability
• Conducting research using anonymized data

4.3 Communication

• Sending service notifications and alerts
• Responding to inquiries and support requests
• Providing product updates and announcements
• Sending marketing communications (with consent)

4.4 Security and Compliance

• Protecting against unauthorized access
• Detecting and preventing fraud
• Enforcing our Terms of Service
• Complying with legal obligations

5. Data Sharing and Disclosure

5.1 Service Providers

We may share data with trusted third-party service providers who assist us in:

• Cloud hosting and infrastructure (data centers within the EU)
• Email and communication services
• Payment processing
• Customer support tools
• Analytics services

All service providers are contractually bound to protect your data and process it only according to our instructions.

5.2 Analytics Partners

We use Google Analytics to understand website usage. Google processes data according to their privacy policy. You can opt out of Google Analytics using their browser add-on or through our cookie consent settings.

5.3 Legal Requirements

We may disclose data when required by law or to:

• Comply with legal process or government requests
• Protect the rights, property, or safety of xyndata, our customers, or others
• Enforce our Terms of Service

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the acquiring entity.

6. International Data Transfers

6.1 Data Location

Our primary data processing takes place within the European Union. We use data centers located in the EU to store and process Service data.

6.2 Transfers Outside the EU

If data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Binding Corporate Rules where applicable

7. Data Retention

7.1 Account Data

We retain account and contact information for the duration of your subscription and for a period of five (5) years thereafter for legal and business purposes.

7.2 Machine Data

Machine and production data is retained for the duration of your subscription. After termination, you have thirty (30) days to export your data before it is deleted.

7.3 Website Analytics

Website analytics data is retained for twenty-six (26) months.

7.4 Communication Records

Support and communication records are retained for three (3) years after the last interaction.

8. Your Rights

Under the GDPR and applicable data protection laws, you have the following rights:

8.1 Right of Access

You may request a copy of the personal data we hold about you.

8.2 Right to Rectification

You may request correction of inaccurate or incomplete personal data.

8.3 Right to Erasure

You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

8.4 Right to Restrict Processing

You may request that we restrict processing of your personal data in certain circumstances.

8.5 Right to Data Portability

You may request to receive your personal data in a structured, commonly used, machine-readable format.

8.6 Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes.

8.7 Right to Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time.

8.8 Exercising Your Rights

To exercise any of these rights, please contact us at info@xyndata.com. We will respond to your request within one month. In complex cases, this period may be extended by two additional months.

8.9 Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.

9. Cookies and Tracking Technologies

9.1 Types of Cookies We Use

Necessary Cookies: Essential for the website to function properly. These cannot be disabled.

Analytics Cookies: Help us understand how visitors interact with our website. We use Google Analytics for this purpose.

Marketing Cookies: Used to track visitors across websites to display relevant advertisements.

Preference Cookies: Remember your settings and preferences for a better experience.

9.2 Managing Cookies

You can manage your cookie preferences through our cookie consent banner. You can also configure your browser to refuse cookies, though this may limit website functionality.

9.3 Google Analytics

We use Google Analytics with IP anonymization enabled. You can opt out using:

• Our cookie consent settings
• Google Analytics Opt-out Browser Add-on
• Browser privacy settings

10. Data Security

We implement appropriate technical and organizational measures to protect personal data, including:

• Encryption of data in transit and at rest
• Access controls and authentication mechanisms
• Regular security assessments and penetration testing
• Employee training on data protection
• Incident response procedures
• Secure development practices

11. Children's Privacy

Our Service is not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through:

• A notice on our website
• Email notification to registered users
• In-app notifications

We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

xyndata s.r.o. Email: info@xyndata.com Phone: (+420) 778 493 540

For data protection specific inquiries, you may also contact our Data Protection Officer at info@xyndata.com.

This Privacy Policy was last updated on January 3, 2025.