Privacy Notice

Purpose: Secure and optimal operation of the website, statistical analysis.

Legal basis: Legitimate interests of the Controller [GDPR Art. 6(1)(f)].

Data processed: IP address, browser type, operating system, time of visit.

Duration: Depending on cookie type (until end of session or max. 1 year).

For detailed information about cookies and tracking technologies, see Section 4.

Purpose: Responding to enquiries, providing information about services.

Legal basis: Voluntary consent of the data subject [GDPR Art. 6(1)(a)].

Data processed: Name, email address, phone number, message content.

Duration: Until purpose is fulfilled (until matter is closed) or until consent is withdrawn.

Purpose: Presenting AI, compliance and related professional advisory services to relevant business decision-makers.

Legal basis: Legitimate interests of the Controller [GDPR Art. 6(1)(f)]. The Controller has conducted a legitimate interest assessment, considering the professional nature of the services and the business activities of recipients.

Data processed: Name, job title, business email address, company details.

Source: Publicly available business databases, professional profiles (LinkedIn).

Duration: Until objection (unsubscribe) or maximum 2 years.

Purpose: Fulfilling advisory contracts, project management.

Legal basis: Performance of a contract [GDPR Art. 6(1)(b)].

Data processed: Data of representatives of contracting parties, contact details, project-specific data.

Duration: 5 years following termination of the contractual relationship (civil law limitation period).

Purpose: Fulfilling statutory obligations, invoicing.

Legal basis: Compliance with a legal obligation [GDPR Art. 6(1)(c)].

Data processed: Name / Company name, billing address, tax number.

Duration: Retention period for accounting documents (8 years).

When a client organisation uses the AI Work Fluency Academy, Rebelframes Kft. processes the data of that organisation's employees as a processor, on behalf of and on the documented instructions of the client organisation (as controller), pursuant to a data processing agreement.

Data processed: name, email address, selected area of expertise, quiz answers and scores, completion timestamps, and the IP address verifying the authenticity of completion.

Purpose: providing the AI literacy training mandated under Article 4 of the EU AI Act, and producing documented evidence of compliance for the client organisation.

Legal basis: the legal basis of the controller (client organisation) for fulfilling Article 4 obligations [GDPR Art. 6].

Duration: for the duration of the subscription, and for 3 months following termination of the contract (unless a longer retention period is required by law); thereafter the data is deleted or anonymised. Before termination, the record can be exported as CSV. The IP address verifying the authenticity of completion is retained for a maximum of 90 days from completion, after which it is automatically and irreversibly deleted.

Data subject rights: employees exercise their rights primarily through their employer (the controller); requests may also be submitted to privacy@aiworkfluency.com, which we process within 30 days.

What it is: the Supabase authentication (login) session cookie, and the cookie-consent setting that stores your cookie choice.

Purpose: maintaining logged-in status and remembering your cookie preference.

Legal basis: strictly necessary for the provision of the service [GDPR Art. 6(1)(b)]. These cannot be declined, as core functionality (e.g. login) depends on them.

Google Tag Manager: a tag management system responsible for loading scripts that collect traffic and behavioural data. Provider: Google.

Microsoft Clarity: a web analytics tool that performs session recording and heatmap analysis (clicks, scrolling, movement) to understand and improve user experience. Provider: Microsoft.

Legal basis: voluntary consent of the data subject [GDPR Art. 6(1)(a)].

Important: these technologies are only loaded in your browser if you select "Accept" on the cookie banner. If you select "Necessary only" (or dismiss the banner), no analytics or tracking script runs.

Changing your decision: you can clear the locally stored data (localStorage) for this website in your browser settings; the cookie banner will then reappear on reload, allowing you to change your choice.