This policy explains how Cognitelligence SHPK (Republic of Kosovo), trading as Xctrl (“we”, “us”), handles personal data collected through this website, xctrl.ai.
It covers this marketing website only. Our product, soshctrl, has its own separate privacy policy on soshctrl.com. We are the data controller for the data described here, and we follow the EU General Data Protection Regulation (GDPR) and Kosovo’s data protection law.
1. What we collect
- When you email us: your name, email address, and whatever you choose to write to us. This site has no contact form; the only way to reach us is to write to the address below.
- Server and security logs: your IP address, browser type, and the pages you request. These are generated automatically whenever any website is visited.
- No cookies. This site sets none at all and runs no analytics. See our Cookie Notice.
We do not collect sensitive personal data, and this site does not process payments.
2. Why we use it, and our lawful basis
| Purpose | Our basis |
|---|---|
| Reply to your enquiry and correspond with you | Our legitimate interest in responding to you |
| Operate and secure the website | Our legitimate interest in a secure, working site |
| Meet our legal and tax obligations | Compliance with the law |
We do not sell your data, and we do not use automated decision-making or profiling.
3. Who we share it with
We share personal data only with the service providers who help us run this website, each under a data-protection agreement:
- Netlify hosts this website and delivers its pages to your browser.
- Cloudflare provides the domain name service for xctrl.ai and routes email addressed to us.
We may also share data where the law requires it or to protect our rights.
4. International transfers
Netlify and Cloudflare operate partly from the United States, so some data (such as your IP address or the content of your message) may be processed there under recognised European data-transfer safeguards. Because we are based in Kosovo, your data is also handled by us there. To ask for more detail on these safeguards, email hello@xctrl.ai.
5. How long we keep it
- Contact messages: up to 24 months after our last correspondence, then deleted, unless we need them longer to comply with the law or resolve a dispute.
- Server and security logs: kept for as long as our hosting provider (Netlify) retains them, then removed on their schedule.
6. Your rights
You can ask us to give you a copy of your personal data, to correct it, to delete it, or to restrict or object to how we use it, and to receive it in a portable format. To do any of these, email hello@xctrl.ai.
You can also complain to the Agency for Information and Privacy of the Republic of Kosovo at aip.rks-gov.net, or, if you are in the EU or EEA, to your national data-protection authority.
7. Cookies
This site uses only strictly necessary cookies plus cookieless analytics. Full details are in our Cookie Notice.
8. Children
This website is not directed at children under 16, and we do not knowingly collect their personal data.
9. Changes
We may update this policy; the “Last updated” date at the top shows the latest version. Material changes will be posted on this page.
10. Contact
Cognitelligence SHPK (trading as Xctrl)
Prishtinë 10000, Republic of Kosovo
Email: hello@xctrl.ai

