Privacy Policy

Raising Sun ("we," "us," or "our") operates r-sun.ai (the "Site"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site or use our services. This policy complies with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Data Controller Information

The data controller responsible for your personal data is:

2. Information We Collect

2.1 Personal Data You Provide

When you contact us through our contact form, we collect:

• Full Name: To identify and address you properly
• Company Name: To understand your business context
• Email Address: To respond to your inquiry and maintain communication
• Message Content: To understand your needs and provide relevant information

2.2 Automatically Collected Data

When you visit our Site, we automatically collect:

• IP Address: For security, fraud prevention, and rate limiting
• Browser Type and Version: To optimize site performance
• Device Information: To ensure compatibility and improve user experience
• Page Views and Navigation Patterns: To understand how visitors use our Site
• Timestamps: To analyze traffic patterns and prevent abuse
• Referral Source: To understand how visitors find our Site

2.3 Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Site and remember preferences. Optional measurement is split into separate banner toggles: Google Analytics (traffic and Google Ads conversion measurement), LinkedIn (LinkedIn Insight Tag for advertising measurement), and Functional (preference cookies, including storing your consent choices). Google Analytics and LinkedIn do not load until you confirm in the banner with Accept All or Save Preferences (see our Cookie Policy, sections 2.5 and 4.1).

In Customize, optional toggles are pre-selected when the banner first appears or after we update our cookie policy; uncheck any service you do not want before saving. The Cookie Policy is the authoritative place for categories, storage mechanisms, and representative identifiers.

3. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

• Consent (Article 6(1)(a) GDPR): When you submit our contact form, you provide explicit consent for us to process your data for that inquiry. Where you enable optional cookies through our cookie banner, we rely on that consent for Google Analytics, Google advertising or conversion measurement, and the LinkedIn Insight Tag as described in our Cookie Policy.
• Legitimate Interests (Article 6(1)(f) GDPR): We process certain data for security and fraud prevention (for example IP addresses).
• Contract Performance (Article 6(1)(b) GDPR): When we enter into service agreements, we process data necessary to fulfill our contractual obligations

4. How We Use Your Information

We use the collected information for the following purposes:

• Respond to Inquiries: To answer your questions and provide information about our AI solutions
• Business Communications: To send you information about our services, case studies, and updates (only if you've opted in)
• Improve Our Services: To analyze user behavior and improve our Site and services
• Web analytics where consented: Google Analytics and related measurement when you enable Google Analytics in our cookie banner
• LinkedIn advertising measurement where consented: Conversion tracking and audience insights via the LinkedIn Insight Tag when you enable LinkedIn in our cookie banner
• Security and Fraud Prevention: To protect against spam, abuse, and security threats
• Legal Compliance: To comply with applicable laws and regulations
• Analytics and marketing measurement: To understand site performance, user engagement, and the effectiveness of our marketing (including conversion measurement), where permitted by your choices

5. Data Sharing and Disclosure

5.1 Third-Party Service Providers

We may share your data with trusted third-party service providers who assist us in operating our Site and services:

• Email Service Providers: For sending and receiving emails (e.g., SMTP services)
• Hosting Providers: For website hosting and data storage
• Analytics and measurement providers: For example Google (site analytics, attribution, and conversion or advertising measurement when you enable Google Analytics) and LinkedIn Ireland Unlimited Company (LinkedIn Insight Tag for advertising measurement and conversion tracking when you enable LinkedIn)

All third-party providers are contractually obligated to protect your data and use it only for the purposes we specify.

5.2 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5.3 No Sale of Personal Data

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Contact Form Submissions: Retained for up to 2 years from the date of last communication
• Client Data: Retained for the duration of the business relationship plus 7 years for legal and accounting purposes
• Analytics Data: Anonymized after 26 months
• Security Logs: Retained for 90 days unless required for ongoing investigations

After the retention period expires, we securely delete or anonymize your data.

7. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access (Article 15): Request a copy of the personal data we hold about you
• Right to Rectification (Article 16): Request correction of inaccurate or incomplete data
• Right to Erasure (Article 17): Request deletion of your data ("right to be forgotten")
• Right to Restriction (Article 18): Request limitation of data processing
• Right to Data Portability (Article 20): Receive your data in a structured, machine-readable format
• Right to Object (Article 21): Object to processing based on legitimate interests
• Right to Withdraw Consent (Article 7): Withdraw consent at any time using Manage cookies in the site footer or by clearing site data (does not affect prior processing where lawful)
• Right to Lodge a Complaint (Article 77): File a complaint with your local data protection authority

To exercise any of these rights, contact us at: hi@r-sun.ai. We will respond within 30 days.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption: Data in transit is encrypted using TLS/SSL
• Access Controls: Strict access controls and authentication mechanisms
• Rate Limiting: Protection against brute-force attacks and spam (max 3 requests per hour per IP)
• Input Validation: All user inputs are validated and sanitized to prevent injection attacks
• Regular Security Audits: Periodic reviews of our security practices
• Employee Training: Regular data protection training for our team

While we strive to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

9. International Data Transfers

Our servers and service providers may be located outside the European Economic Area (EEA). When we transfer your data internationally, we ensure adequate protection through:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions by the European Commission
• Other appropriate safeguards as required by GDPR

10. Children's Privacy

Our Site and services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately, and we will delete such information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on this page with a new "Effective Date." Material changes to optional tracking may also trigger a cookie banner re-prompt under our Cookie Policy. We encourage you to review this policy periodically.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Supervisory Authority (Slovakia):
Office for Personal Data Protection of the Slovak Republic
Hraničná 12, 820 07 Bratislava
Website: dataprotection.gov.sk