Privacy notice · GembaOS

This website, gembaos.dev, is operated by Lux Mentis Limited. It collects personal data in one place only, the contact form. This notice says what is collected, why, where it goes, how long we keep it and how to have it removed.

What does the website itself collect?

Nothing that identifies you. The site sets no cookies, uses no local storage and loads no third-party script that profiles visitors. Traffic may be measured with Cloudflare Web Analytics, which sets no cookies, does not fingerprint the browser and gives us aggregate page counts only. Our web server keeps an access log (IP address, requested address, time, browser type) for 14 days for security and fault diagnosis, then deletes it.

What does the contact form collect, and why?

Field	Why we ask for it
What you are interested in	To route the request: consultation, whitepaper or design partner application
Work email	To reply to you
Full name and company	To know who we are replying to
Job title or department	To prepare the right conversation
Primary use case	To prepare the right conversation
Your note (optional)	Whatever you choose to tell us
Language of the page, time received	To reply in your language and keep the record in order

The purpose is to answer your request and, where you ask for it, to prepare a consultation, send the whitepaper or assess a design partner application. Where a legal basis is required, it is your request (steps taken before a contract) and our legitimate interest in answering it.

Where does it go?

The entry is stored on a server we operate at a hosting provider in the European Union (Hetzner Online GmbH).
A notification with the same content is sent to our team by email through Amazon Web Services (Amazon SES, United States) and, when configured, to our internal team chat.
Nobody else receives it. It is not sold, not shared for advertising and not used for any automated decision.

How long do we keep it?

Until your request is closed and at most 12 months after our last exchange with you, unless a pilot or a contract follows, in which case that agreement governs the retention.

What are your rights?

You can ask what we hold about you, have it corrected or deleted, or object to its use. Use the contact form, choose “Other” as the use case and say what you would like us to do; we answer from the address you gave. Where the Personal Data (Privacy) Ordinance of Hong Kong, the Act on the Protection of Personal Information of Japan, the GDPR or the UK GDPR applies to you, these rights follow those laws, and you may also complain to your supervisory authority.

Changes

We update this page when the processing changes and put the date at the top.