Privacy Policy
Last updated: 30/03/2026
1. Data controller
Enverium is the controller of personal data processed through this website and related business communications. For data protection enquiries, contact us through the channels provided on this site.
2. Scope
This policy describes how Enverium collects, uses, and protects personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable national data protection legislation within the European Union and European Economic Area.
3. Personal data we collect
Depending on your interaction with us, we may process the following categories of personal data:
- Identity and contact data — name, email address, company name, job title, and phone number
- Message content — information you provide through contact or demo request forms
- Technical and usage data — IP address, browser type, pages visited, and interaction timestamps
- Cookie data — information collected through cookies and similar technologies (see Section 5)
4. Purposes and legal bases
We process personal data for the following purposes, each paired with its GDPR legal basis:
- Responding to enquiries and demo requests — pre-contractual steps (Art. 6(1)(b))
- Operating, securing, and improving the website — legitimate interest (Art. 6(1)(f))
- Managing customer and prospect relationships — legitimate interest (Art. 6(1)(f))
- Sending communications where you have opted in — consent (Art. 6(1)(a))
- Meeting legal and regulatory obligations — legal obligation (Art. 6(1)(c))
5. Cookies and similar technologies
This site uses cookies necessary for basic functionality and analytics cookies to understand how visitors use the site. You may manage cookie preferences through your browser settings. Where applicable, a cookie consent mechanism is presented on first visit.
6. Recipients and data sharing
We may share personal data with the following categories of recipients when necessary for the purposes described above:
- Hosting and infrastructure service providers
- Analytics services
- Professional advisers (legal, audit, accounting)
- Competent authorities where required by law
We do not sell personal data.
7. International transfers
Where personal data is transferred outside the European Economic Area, we ensure appropriate safeguards under GDPR Chapter V, such as EU Standard Contractual Clauses or reliance on an adequacy decision by the European Commission.
8. Retention
Personal data is retained only for as long as necessary for the purposes described in this policy, after which it is securely deleted or anonymised. Specific retention periods depend on the nature of the data, contractual requirements, and applicable legal retention obligations.
9. Your rights
Under the GDPR, you have the right to:
- Access your personal data (Art. 15)
- Rectify inaccurate data (Art. 16)
- Request erasure (Art. 17)
- Restrict processing (Art. 18)
- Data portability (Art. 20)
- Object to processing based on legitimate interests (Art. 21)
- Withdraw consent at any time, where processing is consent-based (Art. 7(3))
To exercise these rights, contact us through the channels provided on this site.
10. Supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority in the EU/EEA member state of your habitual residence, place of work, or place of the alleged infringement.
11. Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, loss, or destruction.
12. Changes to this policy
We may update this policy from time to time. The date shown at the top of this page indicates the most recent revision.
National supplementary rules
The GDPR applies as a directly applicable regulation across all EU and EEA member states. In specific areas — such as employment data processing, the minimum age for digital consent, and certain sector requirements — member states may adopt supplementary national rules under GDPR opening clauses. This policy reflects the EU-wide GDPR baseline. Where our processing activities are subject to additional national requirements, those are observed accordingly.