PRIVACY POLICY

Effective Date: September 27, 2026

This Privacy Policy outlines how genuform.ai (hereinafter referred to as the “Website”) collects, uses, and protects personal data provided by visitors and users, in accordance with the European Union General Data Protection Regulation (GDPR – Regulation EU 2016/679) and applicable privacy laws.

1. Data Controller Information

The Data Controller is the entity that determines the purposes and means of processing personal data.

  • Name / Business Name: GenuForm AI Korlátolt Felelősségű Társaság (GenuForm AI Kft.)

  • Registered Address: 1065 Budapest, Bajcsy-Zsilinszky út 45. 1. em. 2. ajtó, Hungary

  • Tax ID / VAT Number: 32552135-2-42

  • E-mail Address: privacy@genuform.ai

  • Representative: Executive Director / Managing Director

2. Personal Data Collected, Purpose, Legal Basis, and Retention

The processing of personal data collected through the contact/inquiry form on the Website is structured as follows:

Data CollectedPurpose of ProcessingLegal BasisRetention Period

Full Name

To identify you when responding to your inquiry.

GDPR Article 6(1)(b) – Necessary for steps prior to entering into a contract, or Article 6(1)(f) – Legitimate interest.

Retained until the request is handled, or up to 1 year for follow-ups.

E-mail Address

To communicate back to you and send requested information.

GDPR Article 6(1)(b) or (f).

Retained until the request is handled, or up to 1 year.

Message Content

To understand your query, feedback, or business proposal.

GDPR Article 6(1)(f) – Legitimate interest in handling inquiries.

Retained for as long as necessary to fulfill the purpose of the message.

3. Data Processors & Third-Party Services

We do not sell, rent, or trade your personal data to third parties. However, to operate the Website efficiently, we share data with trusted service providers acting as Data Processors:

  • Hosting & Infrastructure Provider:

    • Provider Name: Amazon Web Services EMEA SARL (AWS)

    • Address: 38 Avenue John F. Kennedy, L-1855, Luxembourg

    • Purpose: Website hosting, cloud infrastructure, storage, and server log management.

All data processors are bound by contractual obligations to keep your personal data confidential and secure in compliance with GDPR standards.

4. Cookies and Analytical Tools

The Website uses basic essential cookies required for system performance, security, and routing.

  • Essential / Technical Cookies: Required for basic site navigation and security. Legal basis: GDPR Article 6(1)(f).

  • Analytics Cookies (if applicable): We currently do not use non-essential tracking cookies or third-party behavioral analytics without user consent.

5. Data Security

We implement appropriate technical and organizational measures to safeguard your personal data against unauthorized access, loss, alteration, or disclosure. These measures include:

  • HTTPS/SSL encryption for all data transmitted via forms on the Website.

  • Secure cloud infrastructure hosted on Amazon Web Services (AWS) within EU regions.

  • Restricted internal access control to incoming submissions.

6. International Data Transfers

Data stored on AWS is primarily maintained in EU data centers. In the event of data processed outside the European Economic Area (EEA), appropriate safeguards are ensured through AWS’s GDPR Data Processing Addendum (DPA) and Standard Contractual Clauses (SCCs) approved by the European Commission.

7. Your Rights under the GDPR

Under the GDPR, you have the following rights regarding your personal data:

  1. Right of Access: Request copies of your personal data.

  2. Right to Rectification: Request correction of inaccurate or incomplete data.

  3. Right to Erasure (“Right to be Forgotten”): Request deletion of your data when it is no longer necessary.

  4. Right to Restriction of Processing: Request limited processing under specific circumstances.

  5. Right to Data Portability: Request transfer of your data to another controller in a structured format.

  6. Right to Object: Object to data processing based on legitimate interests.

  7. Right to Withdraw Consent: Withdraw consent at any time (where processing is based on consent).

To exercise any of these rights, please send an email to privacy@genuform.ai.

8. Right to Lodge a Complaint

If you believe that our processing of your personal data infringes data protection laws, you have the right to lodge a complaint with a supervisory authority:

  • In Hungary:

    Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)

    Address: 1055 Budapest, Falk Miksa utca 9-11.

    Website: https://naih.hu

    Email: ugyfelszolgalat@naih.hu

  • In the EU: You may contact the local Data Protection Authority in your EU member state of residence or place of alleged infringement.

9. Updates to This Policy

We reserve the right to modify this Privacy Policy at any time. Any changes will be posted directly on this page with an updated “Effective Date”.