Last updated:
Controller and scope
The company identified on this page is the controller of information received through its website. For privacy enquiries or rights requests, use the email, postal address or contact form listed here.
Information we process
The form asks for your name, email, subject and message. A telephone number and attachments are optional. Information needed to operate and protect the service, such as IP addresses, request times, browser information and session identifiers, is also processed.
Provide only information and documents relevant to your enquiry. Do not include unnecessary health information, national identification numbers, identity documents or other sensitive information. You need a lawful basis to disclose information about other people.
Purposes and legal bases
We answer enquiries and manage correspondence under the legitimate interest in business communication and administration, Article 6(1)(f) GDPR. Article 6(1)(b) may apply where an individual requests steps towards their own contract. Specific legal retention or reporting duties rely on Article 6(1)(c) when applicable.
Delivering the website, securing submissions and preventing abuse serve the legitimate interest in security and availability. Acknowledging the notice is not marketing consent. The form does not subscribe you to advertising or enable advertising profiling or solely automated decisions with legal or similarly significant effects.
Who may receive information
Access is intended for authorised staff handling the enquiry and necessary technical providers: IT administration, ROMARG hosting and message transmission through Zoho Mail EU. Authorities may receive information where there is a lawful basis.
Uploaded documents are emailed as attachments to the team handling company enquiries. The form does not automatically publish them in the document centre.
Email services and access outside the EEA
Zoho states that its EU-centre services store data in the EU, while support access from India may occur. Its privacy documentation describes standard contractual clauses and supplementary safeguards. You can ask the company for details of applicable safeguards and how to obtain a copy.
Retention
Messages and attachments are kept to handle the enquiry. Any further retention depends on a contractual relationship, applicable archiving duties, funding-file requirements and a proportionate need to establish, exercise or defend legal claims. Information no longer needed must be deleted or anonymised.
Uploads are processed temporarily on the server without a public archive of submitted files. Copies delivered by email and providers' recovery copies follow the retention rules applicable to those systems. Cookie and local-preference lifetimes are explained in the cookie policy.
Your rights
Subject to GDPR conditions, you may request access, correction, erasure or restriction, object to processing based on legitimate interests, and obtain portability where legally applicable. Legal retention duties may limit some requests.
Requests are normally handled within one month. Complex requests may require up to two further months, with notice during the first month. We may request only proportionate information needed to verify identity; do not send identity-document copies unsolicited.
Complaints and remedies
You may complain to ANSPDCP or the competent supervisory authority where you live, work or believe an infringement occurred. Your right to seek a remedy before a competent court is unaffected.
Security and optional information
The website uses HTTPS, session and submission protections, file-type and size checks, and abuse controls. No system is infallible; avoid sending unnecessary information.
The form cannot process an enquiry without its required fields. Telephone numbers and attachments may be omitted. Public information and documents remain accessible without completing the form.