§ — Privacy policy
Privacy.
This privacy policy is a template drafted on a GDPR basis. Before going live, have it reviewed by qualified counsel and adapt it to the actual data-processing activities of the ARETEUM entity operating this website.
1. Controller
The controller responsible for processing personal data on this website is [ARETEUM Legal Entity Name], [full address], reachable at info@areteum.eu.
2. Data protection officer
You can reach our data protection officer at dpo@areteum.eu or by post at the address above, marked "Attn. DPO".
3. Categories of data we process
When you visit our website, our servers automatically log technical information (IP address in truncated form, browser type, operating system, referrer, access time). When you use the contact form, we process the data you voluntarily provide (name, email, organisation, enquiry text).
4. Purposes and legal bases
Provision of the website and technical security (Art. 6(1)(f) GDPR — legitimate interest). Handling your enquiry and follow-up communication (Art. 6(1)(b) GDPR — pre-contractual measures, or Art. 6(1)(a) GDPR — consent). Newsletter dispatch, where applicable, is based on your consent under Art. 6(1)(a) GDPR and can be withdrawn at any time.
5. Recipients
We use carefully selected processors (hosting, email delivery, CRM). They act only on our documented instructions under Art. 28 GDPR. A list of current processors is available on request.
6. International transfers
Where personal data is transferred to third countries outside the EEA, the transfer is based on adequacy decisions or EU standard contractual clauses under Art. 46 GDPR together with supplementary measures where required.
7. Storage period
Server logs are deleted or anonymised after 14 days. Enquiry data is retained as long as necessary to handle the request and thereafter for the statutory retention period.
8. Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You may also lodge a complaint with a supervisory authority.
9. Cookies
We use only the cookies necessary for the operation of the website. Any non-essential cookies are set exclusively on the basis of your prior consent, which you can manage or withdraw via the cookie preferences link in the footer.
10. Contact
For any questions relating to the processing of your personal data, please write to dpo@areteum.eu.