Privacy Policy

1. Who We Are

Fluidika s.r.o. ("we", "us", or "our") is a company registered in the Czech Republic. We are the data controller responsible for the personal data collected through this website, during general enquiries, and for the delivery and support of our software products.

If you have any questions about how we handle your personal data, you can contact us at info@fluidika.com.

2. Our Role: Controller vs. Processor

Data protection law draws a strict line between a "Controller" (who decides why data is collected) and a "Processor" (who handles data on someone else's behalf). It is important to understand our role in relation to your data:

• As a Controller: We act as a Controller for the data of our website visitors, individuals who submit enquiries, and customers who purchase our standalone engineering software products. This Privacy Policy covers these activities.

• As a Processor: We act as a Processor when we provide Manufacturing Execution Systems (MES) and Industrial AI services to our B2B clients. Any production, operator, or employee data processed within those systems is strictly governed by the Data Processing Agreement (DPA) signed alongside the service contract. This Privacy Policy does not apply to data processed within our clients' MES environments.

3. What Data We Collect, Why, and For How Long

We only collect personal data when necessary. Below is an inventory of what we collect and our legal basis for doing so:

4. Where Your Data Comes From

In most cases, we collect data directly from you when you fill out a form, request a demo, or contact support. When you purchase our software products, we receive your licensing and contact information from our Merchant of Record, FastSpring. We do not buy or acquire personal data from third-party data brokers.

5. Who We Share Your Data With

We do not sell your personal data. We only share it with trusted processors who provide necessary operational services under strict contractual agreements:

• FastSpring: Handles all e-commerce transactions, payment processing, and tax compliance for our software products.

• HubSpot: Used for customer relationship management (CRM) and routing website contact forms.

• Hosting & Infrastructure Providers: Secure EU-based servers used to host our website and email services.

• Analytics Providers: Google Analytics (only if you consent via our cookie banner).

6. International Transfers

Fluidika is based in the European Union, and the majority of our data processing occurs within the EU/EEA. Where we use global service providers (such as FastSpring or HubSpot) that may process data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

7. Security

We implement robust technical and organizational measures to protect your personal data against unauthorized access, loss, or alteration. Access to personal data is restricted to Fluidika personnel who require it to perform their duties.

8. Your Data Protection Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access: You can request a copy of the data we hold about you.

• Right to Rectification: You can ask us to correct inaccurate or incomplete data.

• Right to Erasure (Right to be Forgotten): You can request the deletion of your data, subject to legal retention requirements.

• Right to Restriction: You can ask us to suspend the processing of your data.

• Right to Data Portability: You can request your data in a structured, machine-readable format.

• Right to Object & Withdraw Consent: You can object to processing based on legitimate interests or withdraw your consent for cookies/marketing at any time.

To exercise any of these rights, please email info@fluidika.com. We will respond within 30 days. If you believe we have mishandled your data, you have the right to lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů - www.uoou.cz).