Privacy policy

This policy explains what happens to personal data when you visit this website or contact us. It covers this site only.

What we collect and why

Server logs. Our hosting provider records the request: IP address, time, the page requested, referrer and browser string. These are written automatically, are needed to deliver the site and to detect abuse, and rest on our legitimate interest in operating a secure service under Article 6(1)(f) GDPR. They are kept for 30 days.

Contact and proposal forms. When you submit a form we receive the name, email address, company, website, market and message you entered, together with the problems you selected. The submission goes from this site to our own mail relay, which sends it on to our inbox; no form provider sits in between. We use what you wrote to answer you and, if it goes further, to prepare a proposal. The basis is Article 6(1)(b) GDPR for steps taken at your request before entering a contract. We keep enquiries for 24 months, then delete them.

Filling a form in is entirely up to you. You are under no statutory or contractual obligation to give us any of it, and nothing on this site is withheld if you do not. The only consequence is the obvious one: without a way to reach you we cannot answer.

Cookies and your choice

Nothing but what the site needs to work runs before you choose. There is no analytics, no advertising and no embedded map or video on first load.

The banner asks you separately about three purposes, because they are three different things and one blanket yes would not be an informed choice:

• Analytics, to see which pages are read and where visitors leave.
• Advertising, to measure our ads and show them again.
• External media, so maps and videos may load from Google.

Every box starts empty. Accepting all and allowing only the essentials sit side by side in the banner and take the same single press, and nothing in the site reads your choice as a yes until you make one. Where these purposes involve reading from or writing to your device, the basis is your consent under Article 6(1)(a) GDPR.

You can change your mind at any time through Cookie settings in the footer, which reopens the banner. Withdrawing takes effect immediately and does not affect what was lawful beforehand.

Your decision itself is kept in your browser’s local storage under elevalo-consent-v2, not in a cookie, so remembering that you said no needs no consent of its own. Stored with it are the moment you made it and the version of this policy it was made under, so the record shows what was agreed to and when. It stays until you clear your browser data. We hold no copy of it on our side, which also means it does not follow you to another browser or device.

Tag management

We use Google Tag Manager to load and configure the tags described below. Tag Manager itself sets no cookies and builds no profile; it is the container the other tools arrive in. Because it is what loads them, the container is not requested from Google until you have granted analytics or advertising. Before that, your visit reaches Google nowhere.

Analytics

We use Google Analytics 4 to understand how the site is used, on the basis of your consent. Google Consent Mode v2 is set to deny every storage type before the Google tag runs, so no analytics cookies are written before you accept. IP addresses are shortened by Google before any further processing. Once accepted, Google Analytics sets cookies that live up to 24 months, and Google keeps the event data for the retention period set on our property, which is at most 14 months.

Advertising

Google Ads. When you accept advertising, we measure which campaigns lead to an enquiry and may show you our ads again on Google’s network. The cookies involved live up to 90 days. Until you accept, Consent Mode keeps ad storage and ad personalisation denied.

Meta pixel. Consent Mode does not reach Meta, so the pixel is not loaded at all until you accept advertising. Once loaded it tells Meta that a browser visited this site, so we can measure and target ads on Facebook and Instagram. For that collection and transmission we and Meta Platforms Ireland Limited are joint controllers under Article 26 GDPR; what Meta does with the data afterwards is Meta’s own responsibility and is described in Meta’s privacy policy. The substance of what we agreed with Meta is Meta’s controller addendum, published at facebook.com/legal/controller_addendum.

LinkedIn Insight Tag. The Insight Tag works the same way and is likewise not loaded until you accept advertising. It lets us see which campaigns lead to an enquiry and address professional audiences on LinkedIn. LinkedIn reports audiences to us only in aggregate, never as named people. The cookies involved live up to 6 months, and LinkedIn Ireland Unlimited Company is the controller for what it does with the data on its own platform.

Maps and videos

Where a page offers a map or a video, the frame is not in the page until you allow it. Until then you see a placeholder with a button. Loading it contacts Google and hands over your IP address, which is why it waits for your consent, given either in the banner under external media or by pressing the button on that one embed. Videos run through youtube-nocookie.com, which serves the same video without the tracking cookies on first play.

Links to our profiles

The social icons in the footer are ordinary links. Following one takes you to that network, which is the point at which it learns anything about you; the icons themselves send nothing while you stay here.

Search Console

Google Search Console shows us how this site appears in Google’s results: which queries it was shown for, and how often people clicked. It works on Google’s own aggregated figures, sets nothing on your device and receives nothing from your visit. We cannot identify anyone from it.

Who processes data for us

Cloudflare, Inc. hosts this site, serves it from a network of edge locations and runs the code that takes your form submission, which is where the request logs described above arise.

Hostinger International Ltd. runs the server that relays a form submission and hosts the mailbox it lands in.

Google Ireland Limited provides Google Analytics, Google Ads, Google Maps and YouTube.

Meta Platforms Ireland Limited provides the pixel, as joint controller for the step described above.

LinkedIn Ireland Unlimited Company provides the Insight Tag and the advertising platform it reports to.

Cloudflare, Hostinger and Google act as processors under a data processing agreement. We do not sell personal data, and we do not use it for automated decision making or profiling that produces legal effects for you.

International transfer

We are a company established in the United States, so personal data you send us is processed there. Where you are in the European Economic Area, Switzerland or the United Kingdom, that is a transfer to a third country. We rely on the standard contractual clauses and, where a processor participates in it, on the EU-US Data Privacy Framework. Write to us and we will send you a copy of the clauses that cover a particular transfer.

Your rights

You have the following rights at any time, free of charge:

• Access. What we hold about you, where it came from, who receives it and why we process it. If it went to a third country, you may ask what safeguards cover that.
• Rectification. Correction of anything inaccurate and completion of anything partial.
• Erasure. Deletion of your data where the conditions for it are met.
• Restriction. A stop on further processing while something is being checked.
• Portability. Your data handed to you in a common machine-readable format, or sent to another controller.
• Objection. An objection to processing that rests on our legitimate interests, which covers the server logs described above.
• Withdrawal of consent. Withdrawal at any time, with effect for the future and without affecting what was lawful before.

Write to the address at the end of this page. We answer within one month. You also have the right to complain to a supervisory authority in the country where you live or work.

Changes

We update this policy when the site changes. The date at the top of the page says when it last did.