Privacy Policy

Introduction

morlexanti.top AG ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, and protect your personal information when you visit our website morlexanti.top or use our services.

As a company registered in Austria and operating within the European Union, we comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Data Controller Information

The data controller responsible for your personal data is:

Data Collection

We collect various types of personal data when you interact with our website and services. The data we collect includes:

Information You Provide Directly

• Contact information (name, email address, phone number, company name)
• Communication data when you contact us through forms, email, or phone
• Professional information relevant to our business relationship
• Any other information you choose to provide when requesting our services

Information We Collect Automatically

• Website usage data (pages visited, time spent, click patterns)
• Technical information (IP address, browser type, device information)
• Cookies and similar tracking technologies (see our Cookie Policy)
• Referral information (how you found our website)

How We Use Your Information

We use the personal data we collect for the following purposes, based on legitimate legal grounds under GDPR:

Service Provision (Legal Basis: Contract Performance)

• Providing operational risk assessment services
• Responding to your enquiries and service requests
• Managing our business relationship with you
• Processing payments and maintaining accounts

Communication (Legal Basis: Legitimate Interest)

• Responding to your contact requests and enquiries
• Providing customer support and assistance
• Sending service-related communications
• Notifying you of important changes to our services

Website Improvement (Legal Basis: Legitimate Interest)

• Analysing website usage to improve user experience
• Troubleshooting technical issues
• Ensuring website security and preventing fraud

Marketing (Legal Basis: Consent)

With your explicit consent, we may use your information for:

• Sending newsletters and marketing communications
• Providing information about our services and industry insights
• Inviting you to relevant events and webinars

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about our use of cookies, please review our Cookie Policy.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your data in the following limited circumstances:

Service Providers

We may share data with trusted third-party service providers who assist us in operating our website and providing services, such as:

• Web hosting and technical infrastructure providers
• Email communication services
• Analytics and marketing platforms
• Professional advisors (lawyers, accountants, consultants)

Legal Requirements

We may disclose your information when required by law, regulation, or legal process, or to protect our rights, property, or safety.

Business Transfers

In the event of a merger, acquisition, or sale of assets, personal data may be transferred as part of the transaction, subject to appropriate safeguards.

International Data Transfers

As we operate within the European Union, your personal data is primarily processed within the EU/EEA. If we transfer data to countries outside the EU/EEA, we ensure appropriate safeguards are in place, such as:

• European Commission adequacy decisions
• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules (BCRs)
• Certification schemes

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Our general data retention periods are:

• Contact enquiries: 3 years from last contact
• Client relationship data: 7 years after contract termination
• Marketing communications: Until you unsubscribe or withdraw consent
• Website analytics: 26 months
• Legal and compliance records: As required by applicable law

When personal data is no longer needed, we securely delete or anonymise it in accordance with our data retention procedures.

Your Rights

Under GDPR and applicable data protection laws, you have the following rights regarding your personal data:

Right of Access

You can request information about the personal data we hold about you and receive a copy of this data.

Right of Rectification

You can request correction of inaccurate or incomplete personal data.

Right of Erasure

You can request deletion of your personal data in certain circumstances.

Right to Restrict Processing

You can request limitation of processing of your personal data in certain situations.

Right to Data Portability

You can request transfer of your personal data to another controller in a structured, commonly used format.

Right to Object

You can object to processing of your personal data based on legitimate interests or for marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you can withdraw your consent at any time.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication procedures
• Employee training on data protection
• Incident response procedures

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to protecting your data using industry-standard practices.

Children's Privacy

Our services are not directed to individuals under the age of 16, and we do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us:

We will respond to your enquiry within 30 days of receiving your request.