Introduction
This Privacy Policy describes how we collect, use, and protect your personal information when you use our website and services.
Data Collection
We collect information that you voluntarily provide to us when you interact with our website, including contact forms, inquiries, and other communications.
Data Usage
We use the collected information to provide, maintain, and improve our services, to communicate with you, and to comply with legal obligations.
Cookies
We use cookies and similar technologies to enhance your experience, analyze usage, and for marketing purposes. You can manage your cookie preferences through our cookie settings.
Analytics and Tracking
We may use Google Analytics and Google Tag Manager to analyze website traffic and user behavior. These services collect anonymous usage data to help us improve our website. You can opt-out of analytics tracking through your cookie preferences.
Data Sharing
We do not sell, trade, or rent your personal information to third parties. We may share information only when required by law or to protect our rights. Analytics data is processed by Google according to their privacy policy.
Your Rights
You have the right to access, correct, or delete your personal information. You may also opt-out of certain data collection and communications, including analytics tracking.
Contact Us
If you have questions about this Privacy Policy, please contact us at [email]
Policy Updates
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our website.
Security Logs of the Administration Area
To protect the website from unauthorised access and to be able to investigate security incidents, we record access to the administration area and failed login attempts. The following data is stored: IP address, browser user agent, date and time, the username typed in the login form (even if wrong or non-existent), the outcome of the attempt, the page requested and, for authenticated administrators, the operations performed (with the values that were changed). Passwords are never recorded.
Purpose and legal basis: security of the website and prevention of abuse (legitimate interest, Art. 6(1)(f) GDPR; Art. 32 GDPR). This data is not used for profiling or marketing and is not disclosed to third parties, except to the hosting provider that stores it and to the authorities where required by law.
Retention: security logs are deleted automatically after 180 days. The temporary counters used to limit login attempts (IP address and username) are deleted within 24 hours. In the event of a security incident, the relevant data may be kept longer for the time needed to establish, exercise or defend legal claims.
Your rights: you may exercise the rights of access, objection and the other rights provided by the GDPR by writing to info@tuxxle.org. Exercise of these rights may be limited where it would compromise the security of the website.