Documents
Privacy notice
We collect the minimum: your email address if you typed it in yourself, the text of your message, and an anonymous visit counter that only starts after you allow it. The data sits in Germany, we keep it for the periods named below, and we delete it as soon as you ask.
Who processes the data
ARDORIUM MANAGEMENT CONSULTANCIES — FZCO, trade licence No. 91511, Premises No. DSO-IFZA, IFZA Properties, Dubai Silicon Oasis, Dubai, UAE. The company decides which data is processed and why, which makes it the controller under the GDPR.
Data protection requests go to hello@ardorium.eu. We have no separate data protection officer: the scale of processing does not require one, and requests are read by the company manager.
Which data and from where
- Your email address and name — from the subscription form, the sign-up form and the contact form; you type them in yourself
- The text of your message and our replies — from the conversation you started
- Your answers to the questionnaire — if you filled it in
- An anonymous visit marker in a cookie — only after you press «Allow»
- Your IP address at the moment you give or withdraw consent — as proof that the consent was obtained lawfully
- Technical web server records: page address, time, response code, browser type
Why, and on which legal basis
- To answer you and keep the conversation going — performance of a contract and our legitimate interest in replying to someone who wrote first
- To send letters about sessions and materials — your consent, given by a separate tick box and withdrawn by one link in any letter
- To give access to what you paid for — performance of our contract with you
- To see which pages are useful — your consent to the counter; without it visits are counted anonymously
- To keep proof of consent and records of administrative actions — our obligations under the GDPR
For how long
- A sign-up and the email address — 730 days from your last action. The clock runs from the last contact, not from the date you signed up
- An account that was never used to sign in — 730 days; an account with active access or purchases is never touched by this rule
- The text of your message and our replies — 24 months from the last letter in the conversation
- Questionnaire answers — 24 months from the date of the answer
- A consent record — 36 months from the moment it is withdrawn; while the consent stands, the clock does not run. Your last refusal of the counter we do not delete: otherwise, three years later, the record would read as «we never asked»
- Records of administrative actions — 3 years
- The counter cookie lives in your browser for a year; you can delete it at any time in your browser
What happens when the period ends
The data is not archived, it is anonymised: the address is replaced by a placeholder, the name is wiped, and the link between events and a person is broken. What remains cannot be traced back to you.
If we forgot you because you had been silent, and you come back yourself and confirm your address through the link sent to your inbox, the letters start again. If you asked us to delete your data in person, the block stays for good and is lifted only if you ask us again.
Where the data sits
On a server in a data centre in Nuremberg, Germany — that is, inside the European Union. Backups are encrypted and never leave the EU.
Who else receives it
- Resend — sending letters; receives the recipient address and the text
- netcup GmbH — server and backups; Germany
- MamoPay and lava.top — taking payment; they receive what you type on their page. Your card details never reach us and are not stored here: we only see that the payment went through
- Nobody else: we do not sell your data and do not pass it to ad networks or list brokers
Your rights
- Get a copy of your data
- Correct data that is wrong
- Withdraw consent — by the link in any letter or on the cookie settings page; withdrawal does not undo what was lawful before it
- Ask for deletion — we anonymise every trace of your address
- Restrict the processing or object to it
- Receive your data in a machine-readable form and pass it to someone else
- Complain to the data protection authority of the country where you live
How to use these rights
Write to hello@ardorium.eu from the address in question. We answer within 30 days — that period is set by the GDPR. If the request is complex, we will say so and name a new date.
Unsubscribing is quicker: the «Unsubscribe» link sits at the bottom of every letter and works at once, without any correspondence.
No automated decisions
We make no automated decisions about you and build no profiles that would affect your rights.
Changes to this notice
Every edition of this document has a number and a date it takes effect — both are shown at the top of the page. We announce substantial changes by letter to everyone who is subscribed.