Privacy Policy
Last updated: 09.11.2026
This Privacy Policy explains how AutiHD S.à r.l. processes personal data when you visit autihd.com, contact us, subscribe to our newsletter or do business with us, in accordance with Regulation (EU) 2016/679 (GDPR) and the Luxembourg Law of 1 August 2018 on the organisation of the CNPD.
This policy does not cover the AutiHD platform. If you use the platform through your employer, the Platform Privacy Notice available in the platform applies.
1. Who we are
The controller is AutiHD S.à r.l., 9, rue du Laboratoire, L-1911 Luxembourg, RCS Luxembourg B289997 (“AutiHD”, “we”). Contact for privacy questions: support@autihd.com.
2. What we process and why
| Purpose | Data | Legal basis (GDPR) | Retention |
|---|---|---|---|
| Operating and securing the website | IP address, browser and device data, pages requested, date and time | Legitimate interest in a secure, working website (Art. 6(1)(f)) | [30] days in server logs, longer only to investigate a specific security incident |
| Demo requests and contact form | Name, work email, message, plan and team size (price requests), the page you sent the form from, and how you reached our website (referring site and campaign tags, if any) | Steps at your request before a contract (Art. 6(1)(b)) or our legitimate interest in answering business enquiries (Art. 6(1)(f)) | 24 months after the last contact if no contract follows |
| Newsletter | Email address, subscription date, opens and clicks [if tracked] | Your consent (Art. 6(1)(a)) | Until you unsubscribe; proof of consent kept 3 years after |
| Correspondence and support requests | Name, contact details, content of the message | Legitimate interest in handling requests (Art. 6(1)(f)) | 24 months after the request is closed |
| Business development with professional contacts | Name, job title, company, professional email and phone, from you or from public professional sources such as company websites and professional networks | Legitimate interest in B2B outreach (Art. 6(1)(f)); you can object at any time | Until you object, or 24 months without any interaction |
| Customer and supplier contracts, invoicing | Contact persons’ names, roles, contact details, contract and billing data | Contract (Art. 6(1)(b)); legal obligation for accounting records (Art. 6(1)(c)) | Contract term; accounting documents 10 years from the end of the financial year (Art. 16 Luxembourg Commercial Code) |
| Analytics and advertising cookies | See Cookie Policy | Your consent (Art. 6(1)(a) and Art. 4(3)(e) of the Law of 30 May 2005) | See Cookie Policy |
| Legal claims and compliance | Data relevant to the matter | Legitimate interest in establishing or defending legal claims (Art. 6(1)(f)); legal obligation (Art. 6(1)(c)) | Until the end of the applicable limitation period |
Providing personal data through our forms is voluntary. Fields marked * are needed to answer your request; without them we cannot respond.
3. Who receives your data
We share personal data only with: service providers acting on our instructions (processors) under Article 28 GDPR agreements; our professional advisers (accountants, lawyers, auditors) under confidentiality duties; public authorities where the law requires it; and a buyer or investor in the event of a merger, acquisition or financing, under confidentiality and only to the extent needed.
| Provider | Service | Data location |
|---|---|---|
| Vercel Inc. | Website hosting | EU |
| Google Workspace | Email, and the spreadsheet where website enquiries are stored | EU |
| Mailchimp | Newsletter | EU |
| Google Ireland Ltd | Analytics and advertising (see Cookie Policy) | EU |
| Meta Platforms Ireland Ltd | Advertising (see Cookie Policy) | EU |
4. Transfers outside the EEA
Some providers may process data in the United States. We rely on an adequacy decision, including the EU–US Data Privacy Framework for certified companies, or on the European Commission’s Standard Contractual Clauses. You can request a copy of the relevant safeguards at support@autihd.com.
5. Your rights
You have the right to access your data, have it corrected or erased, restrict its processing, receive it in a portable format. Where processing is based on consent, you can withdraw it at any time without affecting earlier processing. You can unsubscribe from the newsletter through the link in every email.
Right to object. You can object at any time, on grounds relating to your particular situation, to processing based on our legitimate interest. You can object to direct marketing at any time, without giving reasons, and we will then stop using your data for that purpose.
To exercise your rights, write to support@autihd.com or to AutiHD S.à r.l., 9, rue du Laboratoire, L-1911 Luxembourg. We answer within one month; this can be extended by two months for complex requests. We may ask you to confirm your identity.
6. Complaints
You can lodge a complaint with the Commission nationale pour la protection des données (CNPD), 15, Boulevard du Jazz, L-4370 Belvaux, cnpd.lu, or with the supervisory authority where you live or work.
7. Changes
We may update this policy. The date at the top shows the current version.