Data Processing Agreement
This agreement is between you (controller) and Invenios Solutions (processor), and applies whenever personal data of third parties passes through your site — in practice, enquiries from the contact form.
In other words: the enquiries are yours. We store them on your behalf and do with them only what you tell us to.
Subject matter and roles
You decide why and how your visitors' data is processed. We process it only on your instructions and for the purposes of the service: accepting an enquiry, storing it, and notifying you by email.
What data, and about whom
Categories of data: name, phone, email address and free text, sent voluntarily by a visitor, along with an IP address and browser for spam protection. Data subjects: your site's visitors.
Our obligations
- We process data only on your documented instructions.
- We bind our staff and subprocessors to confidentiality.
- We apply appropriate technical measures: encrypted transport, access restricted to your own account, and data kept separate between sites.
- We help you respond when a visitor exercises their rights.
- We notify you without undue delay if we learn of a security breach.
- We delete enquiries after 24 months, and on contract termination — at your choice — return or delete them.
Subprocessors
We use the subprocessors listed in our privacy notice. If we change any of them, we will notify you in advance and you will have the chance to object.
Transfers outside the EU
Some of our providers are outside the European Union. We work with them under the European Commission's standard contractual clauses.
Your obligations
You are responsible for having a lawful basis to collect the data and for informing your visitors. The privacy notice we publish automatically on your site is built to help with that, but keeping it accurate remains your responsibility.