Legal

Privacy & Cookie Policy

How we collect, use and safeguard your personal data when you visit enidia.ai and when you write to us.

At Enidia we are committed to protecting and respecting your privacy. This policy explains what happens to your personal data when you visit this website and when you communicate with us.

Part 1 · Website privacy policy

1. Data controller

The controller responsible for your personal data is Enidia AI, S.à r.l.-S, a company registered in Esch-sur-Alzette, Luxembourg (RCS B277442), with its registered office at 6A Avenue des Hauts-Fourneaux, L-4362 Esch-sur-Alzette.

2. What we collect and why

Direct communications. When you write to us at info@enidia.ai or through the contact form on this site, we collect your name, email address, the firm you give, the subject you select, and the content of your message. The form also carries a hidden field that stays empty for people and catches automated spam; nothing about you is recorded in it.

• Purpose: to answer your enquiry, provide support, and handle trial requests.
• Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR), or our legitimate interest in responding to communications addressed to us (Art. 6(1)(f) GDPR).

Demo bookings. When you schedule a demonstration you leave this site for a Google Calendar appointment page. The details you enter there are collected by Google under its own consumer privacy policy, not under a processing agreement with us, and are passed to us as a calendar invitation. If you would rather not use Google for this, write to info@enidia.ai and we will agree a time by email instead.

• Purpose: to arrange and run software demonstrations.
• Legal basis: performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR).

Technical and browsing data. If, and only if, you consent to analytics cookies, our analytics provider records data about your visit, including a truncated IP address, browser and device type, and the pages you view.

• Purpose: to understand traffic, improve the site, and check that it works.
• Legal basis: your consent (Art. 6(1)(a) GDPR), given through our cookie banner and withdrawable at any time.

3. Sharing and storage

We do not sell or rent your personal data. We share it only with service providers who help us operate this website and business — our website host (GitHub Pages), our form provider (Formward), our email provider (mailbox.org), and Google (Calendar scheduling and, subject to your consent, Google Analytics). Formward, mailbox.org, GitHub and Google Analytics act as our processors under data processing agreements requiring GDPR-compliant handling. The Google Calendar booking page is the exception: it runs on a personal Google account, so Google handles what you enter there as its own controller rather than on our instructions.

The typefaces used on this site are served from our own domain. No request is made to Google Fonts or to any other third party when a page loads, so no data about your visit leaves this site before you make a cookie choice.

4. International transfers

Some of our service providers (such as Google and GitHub) process data outside the European Economic Area (EEA), primarily in the United States. Whenever your personal data is transferred outside the EEA, we ensure it is protected to GDPR standards. We do this by relying on European Commission adequacy decisions (such as the EU-US Data Privacy Framework) or by putting in place Standard Contractual Clauses (SCCs) with our processors.

What you send through the contact form does not leave Europe. It is handled by Formward, whose servers are in Sweden, and reaches us at a mailbox hosted by mailbox.org in Germany.

5. Retention

We keep the contact details and correspondence relating to an enquiry for three years after our last contact with you, after which they are deleted. Where an enquiry leads to a contract, we keep the records for as long as Luxembourg commercial and tax law requires. Analytics event data is retained by our analytics provider for two months, after which it is deleted automatically.

6. Your rights

Under the GDPR you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to data portability. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out beforehand.

To exercise any of these rights, write to info@enidia.ai. We answer within one month. If you consider that your concern has not been handled properly, you may lodge a complaint with the National Commission for Data Protection (CNPD) in Luxembourg: cnpd.public.lu.

Part 2 · Cookie policy

1. What cookies are

Cookies are small text files placed on your device by your browser when you visit a website. They help a site function and tell its operator how it is being used.

2. What this site uses

Strictly necessary. A single local storage entry recording your cookie choice, so that we do not ask you again on every page. It contains no identifier and is not shared. It is strictly necessary to provide the service you asked for, so no consent is required for it (Art. 5(3) of the ePrivacy Directive, as transposed in Luxembourg).

Analytics (Google Analytics 4). Set only after you click “Accept”. They tell us visitor numbers, traffic sources, and which pages are read. If you decline, no analytics script is loaded at all — not merely blocked from reporting. Legal basis: consent.

We use no advertising, profiling, or social media cookies on this site.

3. Managing your choice

You are shown a banner on your first visit and can accept or decline. You may change your decision at any time using the cookie settings link, which is also in the footer of every page, or by clearing site data in your browser.

Changes to this policy

If we change how we handle personal data, we update this page and change the effective date at the top. Material changes are announced on the site.