Privacy notice
What this notice covers
This notice covers personal data collected through this website. Data processed inside a client engagement is governed by the contract and the data processing agreement for that engagement, not by this page.
Eorbitt is the data controller for the information described here. Questions go to info@eorbitt.com.
What is collected
The contact form collects your name, company, work email, region, budget range and the description you write. Nothing else is collected from it.
Aggregate page analytics are collected without cookies and without any identifier that could single you out. No profile is built and nothing is sold or shared for advertising.
Why, and on what basis
Contact details are processed to reply to your enquiry and, if it becomes an engagement, to run it. The lawful basis is legitimate interest in responding to a business enquiry, and performance of a contract once one exists.
Analytics are processed on the basis of legitimate interest in understanding which pages are useful, using data that cannot identify an individual.
How long it is kept
Enquiries that do not become engagements are deleted within 24 months. Engagement records are kept for as long as the contract and applicable accounting law require, then deleted.
You can ask for earlier deletion at any time, and it will be done unless a legal obligation requires otherwise.
Who else sees it
The hosting provider serving this site, and the email or CRM service that carries your message. Each is bound by a data processing agreement, and the current list is available on request.
No third party receives your data for its own purposes.
Your rights
You can ask for a copy of what is held about you, ask for it to be corrected or deleted, object to processing, or ask for it in a portable format. Requests are answered within 30 days.
If the answer does not satisfy you, you can complain to the supervisory authority in your country.
International transfers
Where data moves between regions, it does so under the transfer mechanisms the relevant law provides, such as standard contractual clauses. The mechanism in use for a given engagement is stated in that engagement's data processing agreement.