CipherPath Europe / Information
Privacy Notice
Last updated: 24 October 2026
1. Who is responsible
The business identified below is the controller of personal data processed through this website and enquiries.
- Legal entity / controller
- [Registered legal name], trading as CipherPath Europe
- Registered office
- [Street, postcode, city], Estonia
- Registry code
- [Estonian registry code] · Estonian Commercial Register
- Business contact
- [Business email address]
- Data protection contact
- Dataprotection@CipherPath.eu
- VAT number
- [VAT number, if applicable]
2. Data we use and why
Enquiries: name, work email, optional company, service interest and your message. We use these to assess and respond to requests, discuss services and prepare proposals. Required fields allow us to identify and respond to your request; without them we may be unable to assist. Providing details is voluntary and does not create a contract.
Where you request steps towards a contract with you, the legal basis is GDPR Article 6(1)(b). For business representatives and other correspondence, we rely on Article 6(1)(f): our legitimate interest in communicating with prospective customers and managing business enquiries.
Technical security: when visiting, your IP address, requested URL, request time, browser information and response status may be processed by the selected hosting provider. The application temporarily counts enquiry attempts using the connection IP address to limit abuse. The legal basis is Article 6(1)(f): keeping the website available and protecting it against misuse.
Legal obligations: where records must be retained or disclosed under applicable law, the basis is Article 6(1)(c). Enquiries do not subscribe you to marketing.
3. Contact form operation
When you click “Send enquiry”, the information in the form is sent to our website server and forwarded to contact@CipherPath.eu through our hosting mail service or configured SMTP provider. A successful response means the mail service accepted the message for delivery. An error preserves the form so you can try again. Enquiries do not subscribe you to marketing.
4. Recipients and international transfers
Authorised personnel and contracted hosting and email providers may process information only as needed for these purposes, subject to appropriate data protection arrangements. Information may also be disclosed to professional advisers or public authorities where legally necessary. We do not sell personal data.
Hosting provider and processing location: [Provider and locations]. Email delivery and mailbox providers: [Providers and locations]. Any transfers outside the EEA, applicable adequacy decisions or Article 46 safeguards, and how to obtain a copy of safeguards must be specified here before those providers process enquiries: [Transfer details or confirmation of no third-country transfers].
5. How long we keep data
We keep enquiry correspondence while responding and while follow-up is reasonably necessary, then delete or anonymise it unless it becomes part of a client relationship or must be retained for a legal obligation or legal claim. The adopted routine enquiry retention period is [Confirm period and review procedure]. Hosting log retention is [Confirm provider log period]. The form uses hashed connection identifiers to select a shared abuse-control bucket. These counters reset after 15 minutes; expired bucket files are overwritten when reused. No message content or raw IP address is stored in these counters.
6. Your rights
Subject to the GDPR’s conditions, you can request access, correction, erasure, restriction and portability. You can object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it at any time without affecting earlier lawful processing. We do not use consent as the legal basis for ordinary enquiry handling.
For data protection requests, email Dataprotection@CipherPath.eu. We may request proportionate information to verify your identity. We normally respond within one month, with any lawful extension explained to you. You may complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or the supervisory authority in the EU/EEA country where you live or work or where an alleged infringement occurred.
7. Automated decisions and security
We do not make decisions producing legal or similarly significant effects solely by automated processing, and we do not profile visitors. Automated abuse checks may reject form requests. We use proportionate safeguards, but no transmission or storage system is completely secure. Do not send passwords, special-category data or confidential access credentials through this form.
8. Cookies and changes
We store your privacy preference on this device only after you choose a setting, for up to six months. You can reopen Privacy settings in the footer at any time. See our Cookie Notice. We may update this notice when our processing changes. The date below identifies this version.