01Who we are
The controller of the personal data described in this notice is:
ENOQI j.s.a.L. Dérera 4, 831 01 Bratislava, Slovak Republic
IČO: [company registration number]
Registered in the Commercial Register of the District Court Bratislava III, section […], insert no. […]
For anything to do with your personal data, write to privacy@enoqi.eu. For everything else, sales@enoqi.eu.
We have not appointed a Data Protection Officer, as we are not required to do so. Data-protection questions go to the address above and are handled by our management.
02What this notice covers
This notice applies to www.enoqi.eu and everything you can do on it: the contact form, the whitepaper request form, the website assistant, email you send us in reply, and the technical records our server keeps automatically.
It does not cover the Enoqi decarbonisation platform used by customers under a separate agreement — that processing is governed by the contract and the data processing agreement in place with the customer — nor third-party sites we link to, such as LinkedIn, which run their own notices.
03What we collect and why
We collect only what a given interaction needs. Nothing on this site requires you to create an account, and we do not buy personal data from third parties or build profiles of visitors.
3.1 Contact form
When you submit the contact form we receive your name, email address, company (optional), the subject you selected and the message you wrote. Our server also records the submission time and the sending IP address in its mail log. We use this solely to read and answer your enquiry, and to keep a record that we did.
The message field is free text. Please keep it to what we need in order to help you, and do not put sensitive personal data in it — the guidance in section 4 applies here too.
3.2 Whitepaper and other document requests
When you request a whitepaper we receive your name, email address, company and role, together with which page you requested it from. We log a truncated IP address — enough to distinguish networks and stop scripted abuse, not enough to identify you — your browser user-agent string and the referring page. We use this to email you the download link, to protect the download from automated abuse, and to understand which material is actually being read.
Requesting a document does not subscribe you to anything. If we later want to send you related material, we will ask first, and every such email carries a one-click unsubscribe.
3.3 The website assistant
If we make a chat assistant available on this site, what you type into it is personal data whenever it says something about you. Because that field is open-ended, it gets its own section — see section 4.
3.4 Technical data collected automatically
Like every web server, ours records each request: IP address, date and time, the URL requested, the HTTP status, the referring page and the user-agent. These records exist to keep the site available, to diagnose faults and to detect and block abuse. They are not used to identify individual visitors or to build behavioural profiles.
3.5 Email correspondence
If you email us, or reply to an email from us, we keep the correspondence and its metadata so that we have a record of what was discussed and can pick the thread back up later.
3.6 What we never ask for
We do not ask for, and do not want, special categories of personal data — data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, genetic or biometric data, health data, or data concerning sex life or sexual orientation — nor data relating to criminal convictions and offences. Please do not submit any of it through this website. If you do, we will delete it once we notice.
04The website assistant
This site may offer an AI-powered assistant that answers questions about Enoqi, our methodology and our published material. It is a convenience, never a requirement: every form on this site works without it, and you can always reach a person at sales@enoqi.eu.
Treat the assistant as a public-facing channel. Everything you enter is transmitted, processed and stored, and may be read by our staff. Please do not enter personal data about yourself or anyone else beyond what your question actually requires — no home addresses, identification or account numbers, payment details, passwords, health information, or confidential business information belonging to you or your employer.
You do not need to identify yourself in order to use the assistant. Ask your question in general terms; if answering it needs specifics, we will move the conversation to email or a call, where we can protect the material properly.
4.1 What is processed
- The content of your messages — including any personal data you choose to type into them — and the assistant’s replies.
- Conversation metadata: timestamps, a session identifier, the page the conversation started from, basic technical details of your browser, and your IP address for abuse prevention.
- Contact details you volunteer, if you ask us to follow up — typically a name and email address, handled from that point exactly as a contact form submission.
4.2 What we use it for
- Answering your question during the conversation.
- Following up by email, but only if you asked us to and gave us an address.
- Reviewing conversations to find where the assistant was wrong, unclear or unhelpful, and improving it and our published material accordingly. This review uses the smallest sample we need, and we strip identifying details from any example we keep.
- Detecting and preventing abuse of the service.
We do not use your conversations to advertise to you, and we do not sell them. Our AI providers process conversation content on our instructions as processors, under terms that prohibit using it to train their general-purpose models.
4.3 Accuracy, and what the assistant is not
The assistant generates its answers automatically and can be wrong, out of date or incomplete. Its answers are general information — not professional, legal, regulatory, financial or accounting advice — and they are not a contractual commitment by Enoqi. Where something matters, such as a compliance deadline, a figure or a scope boundary, check it against the cited source or ask us directly. Nothing the assistant says overrides our written agreements or this notice.
4.4 If you shared something you would rather you hadn’t
Write to privacy@enoqi.eu with roughly when the conversation happened and what you would like removed. We will delete the conversation, and we do not need you to justify the request. See also section 11.
05Legal bases
We must have a lawful basis under GDPR Article 6 for each purpose. Ours are:
| Processing | Legal basis | Note |
|---|---|---|
| Contact form | Consent — Art. 6(1)(a) | Given by ticking the box on the form; withdrawable at any time. |
| Whitepaper request | Steps at your request prior to a contract — Art. 6(1)(b) | You asked for the document; we send it. |
| Website assistant | Legitimate interests — Art. 6(1)(f) | Answering enquiries from people who chose to open it. |
| Improving the assistant | Legitimate interests — Art. 6(1)(f) | Running an accurate service; minimised, de-identified samples. |
| Server logs, security and anti-abuse | Legitimate interests — Art. 6(1)(f) | Keeping the site available and unattacked. |
| Follow-up marketing email | Consent — Art. 6(1)(a) | Only where you opted in; unsubscribe in every message. |
| Records of enquiries and documents sent | Legitimate interests — Art. 6(1)(f); legal obligation where applicable — Art. 6(1)(c) | Evidence of what was asked, sent and agreed. |
Where we rely on legitimate interests, we have weighed them against your rights and freedoms and concluded that they do not override those interests. You can ask us for that assessment, and you can object — see section 11.
06How long we keep it
We keep personal data only as long as the purpose requires, then delete it or irreversibly anonymise it.
| Data | Retention |
|---|---|
| Contact form submissions and email correspondence | 24 months after our last exchange — unless it becomes part of a customer relationship, in which case the contract’s retention terms apply |
| Whitepaper request records | 24 months from the request |
| Download tokens | Until the link expires, then removed at the next cleanup |
| Assistant conversations | 90 days — unless you asked us to follow up, in which case they are handled as an enquiry |
| De-identified samples used to improve the assistant | 12 months; no longer personal data once de-identified |
| Server and security logs | Up to 12 months |
| Marketing consent and unsubscribe records | Until you withdraw consent, plus 36 months as proof that consent was validly obtained and honoured |
| Records we must keep by law, such as accounting records | For the statutory period — currently 10 years for accounting records under Slovak law |
Where a dispute, claim or investigation is live, we keep the relevant data until it is resolved, even if the period above has run out.
07Who else sees it
We do not sell personal data and we do not share it for anyone else’s marketing. We disclose it only to:
- Enoqi staff who need it to answer you — on a need-to-know basis, under confidentiality obligations.
-
Service providers acting as processors on our documented
instructions, under Article 28 data processing agreements:
- Web hosting and server infrastructure — [provider], [country]
- Email delivery and mailbox services — [provider], [country]
- Website assistant platform and AI model provider — [provider], [country]
- Web font delivery — Google Ireland Ltd., which receives your IP address when your browser fetches our fonts
- Professional advisers — lawyers, accountants, auditors — where they need it and are bound by professional confidentiality.
- Public authorities, where we are legally required to disclose. We check every such request and disclose no more than is required.
- An acquirer, if Enoqi is ever merged, acquired or restructured, in which case this notice continues to apply until you are told otherwise.
08Transfers outside the EEA
Our infrastructure is hosted in the European Union, and we prefer EU-based providers. Some services — notably AI model providers — may process data outside the European Economic Area.
Where that happens, we transfer data only under a safeguard from Chapter V of the GDPR: an adequacy decision by the European Commission for the destination country, or the Commission’s Standard Contractual Clauses together with the supplementary technical and organisational measures that a transfer impact assessment shows are needed. You can request a copy of the safeguards we rely on at privacy@enoqi.eu.
10How we protect it
We apply technical and organisational measures appropriate to the risk, including encryption in transit (HTTPS), access control on a need-to-know basis, request logs held outside the publicly served directory, rate limiting and spam protection on public endpoints, data minimisation such as truncating IP addresses where the full address is not needed, and contractual security obligations on our processors.
No system is perfectly secure. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the Slovak supervisory authority within 72 hours of becoming aware of it, and notify you directly where the risk is high.
11Your rights
Under the GDPR you have the right to:
- Access — obtain confirmation of whether we process your data, and a copy of it (Art. 15).
- Rectification — have inaccurate or incomplete data corrected (Art. 16).
- Erasure — have your data deleted where one of the grounds in Art. 17 applies.
- Restriction — have processing paused while a dispute about accuracy or lawfulness is resolved (Art. 18).
- Portability — receive the data you gave us in a structured, commonly used, machine-readable format, and have it sent to another controller where technically feasible (Art. 20).
- Object — object at any time, on grounds relating to your situation, to processing based on legitimate interests. Where you object to direct marketing we stop, with no balancing test (Art. 21).
- Withdraw consent — at any time, where processing is based on consent. This does not affect the lawfulness of what we did before you withdrew it (Art. 7(3)).
- Complain — to a supervisory authority (Art. 77). Details in section 15.
Email privacy@enoqi.eu and tell us what you want. Plain language is fine — you do not need to cite an article or fill in a form.
We respond within one month. If a request is complex, or you have made several, we may extend that by up to two further months and will tell you why within the first month. Exercising your rights is free; we may charge a reasonable fee, or refuse, only where a request is manifestly unfounded or excessive, and we will explain our reasoning if that ever happens. We may ask for information to confirm your identity where we cannot otherwise tell that the request is yours.
12Automated decisions
We do not make decisions producing legal effects concerning you, or similarly significantly affecting you, based solely on automated processing, and we do not profile visitors for that purpose.
The website assistant generates its replies automatically, but it only provides information — it does not decide anything about you, and it does not assess, score or rank you. Any decision that matters, such as whether we take on an engagement, is made by people.
13Children
This is a business-to-business website and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, contact us and we will delete it.
14Changes to this notice
We update this notice when our processing changes — for example when we add a service or change a provider. The version number and effective date at the top of the page always tell you which version you are reading.
For material changes we will make the change visible on the site before it takes effect, and where the law requires consent for the new processing, we will ask for it rather than assume it.
15Contact and complaints
Contact us
ENOQI j.s.a. — PrivacyL. Dérera 4, 831 01 Bratislava, Slovak Republic
privacy@enoqi.eu
Complain to a supervisory authority
If you believe we have handled your personal data unlawfully, we would rather hear it from you first — but you are entitled to complain directly to a supervisory authority in the EU member state where you live, where you work, or where the alleged infringement took place. Ours is:
Úrad na ochranu osobných údajov Slovenskej republikyHraničná 12, 820 07 Bratislava 27, Slovak Republic
dataprotection.gov.sk