Privacy Policy

1. Information We Collect

• Contact form submissions: name, company name, email address, industry and message content.
• Analytics: aggregated page views via Plausible Analytics – no cookies, no personal identifiers, no cross-site tracking.
• Server logs: IP address, time of access, requested page and user agent, recorded for security and reliability.
• No payment data: this website is not a shop, takes no orders and processes no payments, so we never collect card or bank details through it.

2. Why We Use It and Our Lawful Basis

• To answer inquiries sent through the contact form – lawful basis: steps taken at your request prior to entering a contract (Article 6(1)(b)) and our legitimate interest in responding to business inquiries (Article 6(1)(f)).
• To keep the website secure and available, and to detect abuse – lawful basis: our legitimate interest in protecting our systems (Article 6(1)(f)).
• To understand how the website is used, in aggregate – lawful basis: our legitimate interest in improving it (Article 6(1)(f)).

3. Cookies

This website sets no advertising, profiling or analytics cookies, and therefore shows no consent banner. Plausible Analytics works without cookies and without personal identifiers. Only strictly necessary technical data is processed, as permitted by the Privacy and Electronic Communications Regulations.

4. Who We Share It With

We do not sell, rent or share personal data for marketing. Your data is processed on our own infrastructure: the website and mail server are hosted by Hetzner Online GmbH in Nuremberg, Germany, under a data processing agreement, and inquiry emails are delivered to our own mailbox on that server. Cloudflare Inc. serves as our CDN and security proxy and processes connection data on our behalf. Data is disclosed to authorities only where the law requires it.

5. International Transfers

Our servers are in Germany (EEA), which is covered by the UK adequacy regulations, so no additional safeguard is required. Where a processor handles data outside the UK or EEA, such as Cloudflare, the transfer is covered by the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.

6. How Long We Keep It

• Contact inquiries: up to 24 months after the exchange ends, unless a contract requires us to keep them longer.
• Server logs: up to 30 days, then deleted automatically.
• Analytics: aggregated figures only, with no personal data retained.

7. Your Rights

• Access: request a copy of the personal data we hold about you.
• Rectification: have inaccurate data corrected.
• Erasure: have your data deleted where there is no overriding reason to keep it.
• Restriction and objection: object to processing based on our legitimate interests, or ask us to restrict it.
• Portability: receive the data you gave us in a machine-readable format.
• Complaint: contact us first at [email protected]; you may also complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113). We answer requests within one month.

8. Data Security

All traffic is encrypted with HTTPS, mail is transmitted over TLS, access to the systems is restricted to named administrators using key-based authentication, and secrets are stored outside the source code.

9. Changes and Contact

We update this policy when our processing changes; the date above shows the current version. For any privacy matter, including a request to exercise your rights: PERFORMA CAPITAL · [email protected]