Privacy Policy

Introduction

urbanclarionis SARL ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website urbanclarionis.top and use our services.

This policy applies to all personal data we process as a data controller. By using our website and services, you consent to the data practices described in this policy.

Data Controller Information

The data controller for your personal information is urbanclarionis SARL, a company registered in Luxembourg with registration number RCSB379152.

Data Collection

We collect information about you in various ways when you use our website and services. The data we collect includes both information you provide directly and information collected automatically through your use of our services.

Information You Provide

We may collect personal information that you voluntarily provide to us, including:

• Name and contact information (email address, phone number)
• Company name and business information
• Messages and communications sent through our contact forms
• Service preferences and requirements
• Any other information you choose to provide

Automatically Collected Information

When you visit our website, we may automatically collect certain information, including:

• IP address and device information
• Browser type and version
• Operating system
• Pages visited and time spent on our website
• Referring website addresses
• Cookie data and similar tracking technologies

How We Use Your Information

We use the personal data we collect for various purposes based on legitimate business interests and legal obligations. How we use your information depends on the services you use and your preferences.

Primary Uses

• To provide and maintain our vendor management analysis services
• To respond to your enquiries and provide customer support
• To process and fulfil service requests
• To communicate with you about our services
• To improve our website and services
• To comply with legal obligations

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Consent: When you have given clear consent for specific processing activities
• Contract: When processing is necessary for performing our services
• Legitimate Interests: For business operations, security, and service improvement
• Legal Obligation: When required by law

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted third parties who assist in operating our website and services
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with mergers, acquisitions, or asset sales
• Consent: When you have given explicit consent for sharing

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Contact Information: Retained for 3 years after last contact
• Service Records: Retained for 5 years for business purposes
• Website Analytics: Anonymised after 26 months
• Marketing Data: Until you opt out or withdraw consent

Your Rights

Under the General Data Protection Regulation (GDPR), you have several rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of processing
• Right to Data Portability: Request transfer of your data
• Right to Object: Object to certain types of processing
• Right to Withdraw Consent: Withdraw consent at any time

To exercise any of these rights, please contact us using the contact information provided below. We will respond to your request within one month.

Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Staff training on data protection
• Incident response procedures

International Data Transfers

Your personal information may be transferred to and processed in countries other than your country of residence. When we transfer data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including:

• Adequacy decisions by the European Commission
• Standard contractual clauses approved by the European Commission
• Binding corporate rules
• Certification schemes

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date.

Contact Information

If you have any questions about this Privacy Policy or our data practices, or if you would like to exercise your rights, please contact us:

You also have the right to lodge a complaint with the Luxembourg National Commission for Data Protection (CNPD) if you believe we have not complied with applicable data protection laws.