Data Privacy Policy

Data Controller Information

cosmovexis Ltd is the data controller for the personal data we collect and process. We are registered in Ireland with registration number CRO968574 and our registered office is located at 75 Dame Street, Cork T08 2001, Munster, Ireland.

Data We Collect

The data we collect includes personal information you provide directly to us and information collected automatically when you use our website and services. We collect the following types of personal data:

• Contact Information: Name, email address, phone number, company name, and business address when you contact us or request our services
• Website Usage Data: IP address, browser type, device information, pages visited, time spent on pages, and referral sources
• Communication Data: Records of correspondence when you contact us via email, phone, or our contact forms
• Service Data: Information related to your use of our analytics services, including project data and performance metrics you provide
• Technical Data: Cookies, log files, and other tracking technologies as detailed in our cookie policy

How We Use Your Information

We use of your data is based on legitimate business interests, contract performance, and your consent where required. We use your personal information for the following purposes:

• Service Delivery: To provide our contractor bid performance analytics services and support
• Communication: To respond to your enquiries, provide customer support, and send service-related communications
• Business Operations: To manage our business relationship with you, process payments, and maintain records
• Website Improvement: To analyse website usage and improve our online services and user experience
• Marketing: With your consent, to send you information about our services and industry insights
• Legal Compliance: To comply with legal obligations and protect our rights and interests

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please refer to our cookie policy.

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Contract Performance: When necessary to provide our services under our agreement with you
• Legitimate Interests: For business operations, website analytics, and service improvement
• Consent: For marketing communications and non-essential cookies
• Legal Obligation: When required to comply with applicable laws and regulations

Data Sharing and Disclosure

We do not sell your personal data to third parties. We may share your information with:

• Service Providers: Third-party companies that help us operate our business, such as hosting providers and analytics services
• Professional Advisors: Lawyers, accountants, and other professional service providers
• Legal Requirements: When required by law or to protect our rights and interests
• Business Transfers: In connection with any merger, acquisition, or sale of business assets

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by law. Our data retention periods are:

• Contact Information: Retained for the duration of our business relationship plus 7 years for legal compliance
• Website Usage Data: Typically retained for 26 months for analytics purposes
• Service Data: Retained for the duration of service provision plus 7 years
• Marketing Data: Until you withdraw consent or we no longer have a legitimate need

Your Rights

Under GDPR and applicable data protection laws, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Request transfer of your data to another service provider
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Access controls and user authentication
• Regular security assessments and updates
• Staff training on data protection practices
• Secure hosting and backup procedures

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA) where our service providers are located. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions by the European Commission.

Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "last updated" date.

Contact Information

If you have questions about this privacy policy or wish to exercise your rights, please contact us using the following information:

You also have the right to lodge a complaint with the Irish Data Protection Commission or your local supervisory authority if you believe we have not complied with applicable data protection laws.