Personal data in collaboration inquiries

Controller and contact

Cubille s. r. o., Lermontovova 911/3, 811 05 Bratislava - Staré Mesto, Slovenská republika
IČO 57 658 455

info@cubillelounge.com

What we collect and why

We collect your full name, email address and description of your proposed collaboration. If you choose to provide them, we also collect your company or brand, role, phone number, country and website or portfolio link. The form records the language in which you submit it.

We use these details to receive, assess and respond to your collaboration inquiry and to communicate with you about your proposal. Submitting the form does not subscribe you to marketing messages.

Legal basis

We process the data under Article 6(1)(f) GDPR, based on our legitimate interest in considering voluntarily submitted business collaboration proposals and responding to them. We process only details relevant to your proposal and the contact details needed to reply. You may object to processing based on this legitimate interest.

Protecting the form from spam

When you submit the form, we temporarily use your connection's IP address to create a keyed fingerprint for the current one-hour window. The attempt log contains only that fingerprint, the number of attempts and the end of the window; it does not store the IP address itself. This limits automated and excessive submissions. The legal basis is our legitimate interest in protecting the form and delivery of inquiries under Article 6(1)(f) GDPR.

After the one-hour window ends, these records are no longer used to limit submissions. Expired records are deleted on the next valid attempt to submit the form.

Who can access the data

Your inquiry is delivered to our internal collaboration mailbox. It is accessible to the people at Cubille who handle collaboration proposals. Our website and email service providers may also process the data to the extent necessary to deliver and secure the message.

Possible transfers outside the EEA

We operate the website through ChatGPT Sites. Under its data processing addendum, OpenAI Ireland Limited may transfer data outside the European Economic Area when providing the service. If it does so, OpenAI states that it relies on standard contractual clauses or a European Commission adequacy decision. You can request information about the relevant safeguards and how to obtain a copy by emailing info@cubillelounge.com.

ChatGPT Sites Data Processing Addendum

How long we keep the data

We keep the data from this inquiry while handling it and for no more than 12 months after our last reply, even if we agree to collaborate. If we do not reply, we count this period from receipt of the inquiry.

If a collaboration begins, we may process data needed for the subsequent contractual relationship separately. We will give you separate processing information before using the data for that purpose.

Your rights

You may ask us for access to, correction or erasure of your data, or restriction of processing. You may object to processing based on legitimate interests. Where the GDPR conditions are met, you also have the right to data portability.

You can exercise your rights by emailing info@cubillelounge.com. You also have the right to lodge a complaint with a supervisory authority, in particular the Slovak Data Protection Authority.

Required details and automated decisions

Providing your data is not a legal or contractual obligation. We need your name, email and proposal to handle the inquiry; without them, you cannot submit the form. All other fields are optional.

We do not make decisions about your inquiry solely by automated means or carry out profiling within the meaning of Article 22 GDPR.