Who is responsible
The controller for personal data processed through this website is , . Contact: .
What we collect
This website does not use analytics, advertising, tracking pixels or social media plugins, and it loads no content from third-party servers. Fonts are served with the page.
We process personal data only when you contact us, for example through the briefing request, a job application or an email. This may include your name, work email, organization, role, country and the content of your message.
Our hosting provider processes technical connection data, such as IP address and request time, as needed to deliver the site securely.
Why and on what basis
- Responding to your request and preparing a briefing: steps prior to entering into a contract and our legitimate interest in answering business enquiries (GDPR Art. 6(1)(b) and (f)).
- Assessing job applications: steps prior to an employment contract (Art. 6(1)(b)).
- Operating and securing the website: legitimate interest (Art. 6(1)(f)).
- Meeting legal obligations, including export control and sanctions screening: legal obligation (Art. 6(1)(c)).
How long we keep it
Enquiries are kept for up to 24 months after our last contact unless a business relationship follows. Unsuccessful applications are deleted after 6 months unless you agree to a longer period. Technical logs are kept for no more than 30 days unless needed to investigate a security incident.
Who receives it
Only staff who need it, and service providers who process data on our behalf under a data processing agreement. We do not sell personal data. Where data is transferred outside the European Economic Area, we use an adequacy decision or the European Commission's standard contractual clauses.
Your rights
You may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest. Where processing is based on consent, you may withdraw it at any time. Write to . You also have the right to lodge a complaint with a data protection supervisory authority.
Security
We protect personal data with access control, encryption in transit and at rest, and the minimum retention needed.