This policy explains how Cognitelligence SHPK (Republic of Kosovo), trading as Xctrl (“we”, “us”), handles personal data collected through this website, xctrl.ai.
It covers this marketing website only. Our product, soshctrl, has its own separate privacy policy on soshctrl.com. We are the data controller for the data described here, and we follow the EU General Data Protection Regulation (GDPR) and Kosovo’s data protection law.
1. What we collect
- When you contact us through our contact form: your name, email address, and whatever you choose to write to us.
- Server and security logs: your IP address, browser type, and the pages you request. These are generated automatically whenever any website is visited.
- Strictly necessary cookies and cookieless analytics. See our Cookie Notice. We do not use advertising or cross-site tracking cookies.
We do not collect sensitive personal data, and this site does not process payments.
2. Why we use it, and our lawful basis
| Purpose | Our basis |
|---|---|
| Reply to your enquiry and correspond with you | Our legitimate interest in responding to you |
| Protect the contact form against spam and abuse | Our legitimate interest in preventing abuse |
| Operate and secure the website, and measure aggregate usage | Our legitimate interest in a secure, working site |
| Meet our legal and tax obligations | Compliance with the law |
We do not sell your data, and we do not use automated decision-making or profiling.
3. Who we share it with
We share personal data only with the service providers who help us run this website, each under a data-protection agreement:
- Cloudflare hosts the website, delivers it, and protects it against abuse. This includes the Turnstile spam check on the contact form and privacy-friendly, cookieless visitor analytics.
- Resend delivers the email from our contact form to us.
We may also share data where the law requires it or to protect our rights.
4. International transfers
Cloudflare and Resend operate partly from the United States, so some data (such as your IP address or the content of your message) may be processed there under recognised European data-transfer safeguards. Because we are based in Kosovo, your data is also handled by us there. To ask for more detail on these safeguards, email hello@xctrl.ai.
5. How long we keep it
- Contact messages: up to 24 months after our last correspondence, then deleted, unless we need them longer to comply with the law or resolve a dispute.
- Server and security logs: kept for as long as our hosting provider (Cloudflare) retains them, then removed on their schedule.
6. Your rights
You can ask us to give you a copy of your personal data, to correct it, to delete it, or to restrict or object to how we use it, and to receive it in a portable format. To do any of these, email hello@xctrl.ai.
You can also complain to the Agency for Information and Privacy of the Republic of Kosovo at aip.rks-gov.net, or, if you are in the EU or EEA, to your national data-protection authority.
7. Cookies
This site uses only strictly necessary cookies plus cookieless analytics. Full details are in our Cookie Notice.
8. Children
This website is not directed at children under 16, and we do not knowingly collect their personal data.
9. Changes
We may update this policy; the “Last updated” date at the top shows the latest version. Material changes will be posted on this page.
10. Contact
Cognitelligence SHPK (trading as Xctrl)
Prishtinë 10000, Republic of Kosovo
Email: hello@xctrl.ai