Privacy Policy
SmartBotCrafters S.A. R.L.-S (“SmartBotCrafters”, “we”, “us”, or “our”) operates this website to share information about our services and provide a way to contact our team. This Privacy Policy describes how we handle personal data when you browse our site or submit a message through our contact form. We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Luxembourg data protection laws.
Personal data we collect
We only collect personal data that is relevant to the enquiry you send us:
- Contact details. Your name, email address, company name, and any other information you include in the form.
- Message content. Project goals, timelines, or other context you share in the free-text field.
- Technical data. The Formspark contact form captures your IP address and browser metadata to protect against abuse and deliver the submission. We do not otherwise track visitors or run analytics cookies.
How we use personal data
We use the data you provide for the following purposes:
- Responding to your enquiry and preparing proposals or statements of work.
- Maintaining an internal record of leads, clients, and project opportunities.
- Managing our relationship with you, including scheduling calls and sharing updates related to your request.
- Complying with legal obligations, such as bookkeeping or documenting consent.
Legal bases for processing
Our processing activities are grounded in Article 6 GDPR. Depending on the context, we rely on one or more of the following bases:
- Legitimate interest (Art. 6(1)(f)) to operate our business, evaluate opportunities, and respond to messages directed to us.
- Consent (Art. 6(1)(a)) when you voluntarily provide personal data and request that we contact you.
- Legal obligation (Art. 6(1)(c)) when we must retain certain records under applicable commercial or tax law.
When we share personal data
We do not sell or rent personal data. We may share it with carefully selected recipients for the purposes described above:
- Formspark. Our contact form is powered by Formspark (Formspark BV, Netherlands). The service stores submissions and forwards them to us securely. Their privacy notice is available at formspark.io/privacy.
- Cloud hosting and productivity providers. We may store enquiries in our cloud email, document, or CRM tools, all of which are bound by data processing agreements.
- Professional advisors and authorities. We may disclose data if required to comply with law, enforce agreements, or respond to lawful requests from regulators.
International transfers
Our core operations are based in Luxembourg, but some service providers (including Formspark’s infrastructure) may process data outside the European Economic Area. When transfers occur, we ensure appropriate safeguards such as EU Standard Contractual Clauses or equivalent measures provided by the service provider.
Data retention
We keep enquiry records for up to 18 months after our last interaction, unless a longer period is required to pursue a project, comply with legal obligations, or resolve disputes. We delete or anonymise data when it is no longer needed.
Security
We take reasonable technical and organisational measures to protect personal data, including limiting access to authorised team members, enforcing strong authentication, and using encrypted channels for data in transit. Despite these efforts, no internet transmission is completely secure, so we encourage you to avoid sharing sensitive information in the contact form.
Your rights
If you are located in the EEA or UK, you have the rights to access, correct, delete, restrict, or object to our processing of your personal data, as well as the right to data portability. Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.
To exercise these rights, contact us at hello@sbc.lu (please include “Privacy” in the subject) or use the details below. We may need to verify your identity before completing your request.
Complaints
You can lodge a complaint with your local supervisory authority. In Luxembourg, the competent authority is the Commission nationale pour la protection des données (CNPD), cnpd.public.lu.
Contact us
SmartBotCrafters S.A. R.L.-S
Luxembourg
Email: hello@sbc.lu