§ — Privacy policy

Privacy.

This privacy policy is a template drafted on a GDPR basis. Before going live, have it reviewed by qualified counsel and adapt it to the actual data-processing activities of the ARETEUM entity operating this website.

1. Controller

The controller responsible for processing personal data on this website is [ARETEUM Legal Entity Name], [full address], reachable at info@areteum.eu.

2. Data protection officer

You can reach our data protection officer at dpo@areteum.eu or by post at the address above, marked "Attn. DPO".

3. Categories of data we process

When you visit our website, our servers automatically log technical information (IP address in truncated form, browser type, operating system, referrer, access time). When you use the contact form, we process the data you voluntarily provide (name, email, organisation, enquiry text).

4. Purposes and legal bases

Provision of the website and technical security (Art. 6(1)(f) GDPR — legitimate interest). Handling your enquiry and follow-up communication (Art. 6(1)(b) GDPR — pre-contractual measures, or Art. 6(1)(a) GDPR — consent). Newsletter dispatch, where applicable, is based on your consent under Art. 6(1)(a) GDPR and can be withdrawn at any time.

5. Recipients

We use carefully selected processors (hosting, email delivery, CRM). They act only on our documented instructions under Art. 28 GDPR. A list of current processors is available on request.

6. International transfers

Where personal data is transferred to third countries outside the EEA, the transfer is based on adequacy decisions or EU standard contractual clauses under Art. 46 GDPR together with supplementary measures where required.

7. Storage period

Server logs are deleted or anonymised after 14 days. Enquiry data is retained as long as necessary to handle the request and thereafter for the statutory retention period.

8. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You may also lodge a complaint with a supervisory authority.

9. Cookies

We use only the cookies necessary for the operation of the website. Any non-essential cookies are set exclusively on the basis of your prior consent, which you can manage or withdraw via the cookie preferences link in the footer.

10. Contact

For any questions relating to the processing of your personal data, please write to dpo@areteum.eu.