Kaycoo Privacy Notice

1. Introduction
Welcome to Kaycoo SARL ("we,""our," or "us"). We are committed to protecting your privacy and ensuring that your personal data is handled in compliance with Luxembourgish commercial law and EU privacy regulations, including the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679). 
‍
2. Data Controller
Regulation overview:
According to GDPR Article 4(7), the data controller is responsible for determining how and why personal data is processed.

Data Controller Details:
Kaycoo SARL
27, rue Henri Koch
4354 Esch-Sur Alzette
Luxembourg
info@kaycoo.ai 

3. What Data We Collect
Regulation overview:
Under GDPR Article 13, we must inform you about the categories of personal data collected. We may collect and process the following personal data:
- Name, email address, phone number, and company details.
- Technical data such as IP address, browser type, and device information.
- Any other information you provide when contacting us or using our services. 

4. Purpose of Data Processing
Regulation overview:
Under GDPR Article 5, personal data must be processed for specific, legitimate purposes. We process personal data for the following purposes:
- Providing and improving our IT services.
- Communicating with clients and responding to inquiries.
- Ensuring compliance with legal obligations under Luxembourgish law and EU regulations. 

5. Legal Basis for Processing
Regulation overview:
Under GDPR Article 6, data processing must be based on one or more legal grounds. We process personal data based on:
- Contractual necessity (to provide services).
- Legal obligations (compliance with Luxembourgish and EU laws).
- Legitimate interests (business operations and security).
- Consent (where applicable). 

6. Data Sharing and Transfers
Regulation overview:
GDPR Chapter V regulates international data transfers, ensuring adequate protection. We do not sell or rent personal data. However, we may share data with:
- Third-party service providers assisting in IT operations.
- Regulatory authorities when required by law.
- International transfers in compliance with GDPR safeguards. 

7. Data Retention
Regulation overview:
Under GDPR Article 5(1)(e), data must not be stored longer than necessary. We retain personal data only as long as necessary for the purposes outlined above or as required by law. 

8. Your Rights
Regulation overview:
GDPR Chapter III outlines the data subject's rights. Under GDPR, you have the right to:
- Access your personal data (Article 15).
- Rectify inaccurate information (Article16).- Erase your data ("right to be forgotten") (Article 17).
- Restrict processing (Article 18).
- Object to processing (Article 21).
- Data portability (transfer your data)(Article 20).
- Withdraw consent at any time (Article7(3)). 

To exercise your rights, contact us at:
info@kaycoo.ai

You may also lodge a complaint with the data protection authority in Luxembourg, the Commission Nationale pour la Protection des Données (the "CNPD"), or with your local data protection authority if you do not reside in Luxembourg.
The CNPD can be contacted as follows: 
Telephone: (+352) 26 10 60 - 1
Website: https://cnpd.public.lu/en.htmlWeb
form: https://cnpd.public.lu/en/particuliers/faire-valoir/formulaire-plainte.html
Address: 1, avenue du Rock’n’Roll, L-4361 Esch-sur-Alzette, Luxembourg 

9. Security Measures
Regulation overview:
GDPR Article 32 requires implementation of appropriate technical and organizational security measures. We implement safeguards to protect personal data from unauthorized access, loss, or misuse. 

10. Disclaimer: Data Processing & Customer Rights
Depending on the circumstances, Kaycoo S.A.R.L may act as either a data controller or a data processor:
- Data Controller: when we determine the purpose and means of personal data processing, we act as a data controller in accordance with GDPR Article 4(7).
- Data Processor: when we process persona data on behalf of a customer, we act as a data processor, following the guidelines of GDPR Article 4(8). 
‍
Business Purpose
We collect and store customer data only in response to inquiries and for legitimate business purposes, such as providing IT services or responding to requests. 

Customer Rights
Under GDPR Chapter III, customers have the right to:
- Request information about the data we store and its processing purpose (Article 15).
- Request correction of inaccurate data (Article 16).- Request deletion of personal data when legally permitted (Article 17).

To exercise these rights, customers may contact us at: info@kaycoo.ai 

11. Contact Information
Regulation overview:
Under GDPR Article 12, individuals must have a way to contact the data controller for inquiries. For any privacy-related inquiries or to exercise your rights, contact us at: info@kaycoo.ai 

12. Updates to This Privacy Notice
Regulation overview:
Under GDPR Article 13(2), we must inform users of changes to the privacy policy. We may update this notice periodically. Changes will be posted on our website.