Privacy Policy

1. Data Controller

The controller responsible for the processing of personal data under Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation or “GDPR”) and Act No. 110/2019 Coll. on Personal Data Processing of the Czech Republic is:

2. Core Principles and Scope

Coranor Labs builds macroeconomic simulation and autonomous agent containment infrastructure for enterprise institutions. We do not sell personal data, license user profiles to third parties, or run consumer behavioral tracking.

All data handling follows the fundamental tenets of Article 5 GDPR: lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

3. Categories of Data Processed

• Application and Inquiry Data: Full name, professional work email, institution name, job title, and stated research objectives submitted via our Application Form (/apply) or direct correspondence.
• Technical and System Logs: IP address, browser user-agent, operating system, and timestamp data necessary to maintain network integrity, prevent denial-of-service attempts, and ensure cyber security under Art. 6(1)(f) GDPR.
• Simulation Environment Data: Any synthetic macroeconomic parameters or simulated portfolio exposures uploaded by authenticated enterprise accounts are treated as confidential operational payloads subject to bilateral non-disclosure agreements.

4. Legal Bases for Processing

We process your personal data exclusively under the following legal grounds provided by Article 6(1) GDPR:

• Art. 6(1)(b) GDPR (Contractual measures): Evaluating and executing institutional pilot applications for The Lighthouse Program.
• Art. 6(1)(f) GDPR (Legitimate interests): Securing our infrastructure, maintaining deterministic runtime safety, and conducting technical diagnostics.
• Art. 6(1)(c) GDPR (Legal obligations): Complying with accounting, tax, and statutory retention requirements under Czech and European law.

5. Your Rights as a Data Subject

Under Chapter III of the GDPR, you have the following irrevocable rights:

• Right of Access (Art. 15 GDPR): Confirmation of whether your data is processed and a copy thereof.
• Right to Rectification (Art. 16 GDPR): Immediate correction of inaccurate personal data.
• Right to Erasure (“Right to be Forgotten”, Art. 17 GDPR): Deletion of your personal records where statutory retention does not apply.
• Right to Restriction of Processing (Art. 18 GDPR): Limiting the scope of active processing.
• Right to Data Portability (Art. 20 GDPR): Receiving your provided data in a structured, commonly used, machine-readable format.
• Right to Object (Art. 21 GDPR): Objecting at any time to processing based on legitimate interests.

To exercise any of these rights, please write directly to privacy@coranorlabs.com. You also have the right to lodge a formal complaint with the supervisory authority: