Privacy Policy

1. Website operator

2. Data collection

We collect personal data only when you voluntarily provide it to us — for example, by sending an email or filling out a contact form. We do not use web analytics, tracking pixels or advertising cookies by default.

The types of personal data we may process include your name, email address, company name, job title and any information you include in your message.

3. Contact form

If we add a contact form to this website in the future, the data you enter will be processed solely to respond to your enquiry. We will not use your information for marketing purposes without your explicit consent.

4. Email communication

When you email us, we process your email address and the content of your message to handle your enquiry. Emails are stored in our regular business mailbox for as long as necessary to fulfil your request or as required by law.

5. Server log files

Our hosting provider automatically collects technical information when you access this website, such as your IP address, browser type, operating system, referring URL, date and time of access, and the pages visited. This data is used to ensure the security, stability and functionality of the website.

6. Cookies

This website does not currently use cookies. If we introduce cookies in the future — for example, to remember preferences, enable analytics or support third-party services — we will update this policy and obtain consent where required by law.

7. Hosting

This website is hosted by Lovable. Hosting infrastructure may process technical log data as described above. We have chosen providers that meet appropriate data protection standards.

8. Legal basis under GDPR

We process personal data on the basis of Article 6(1)(f) GDPR (legitimate interest) for technical operation and security, and Article 6(1)(b) GDPR (contractual necessity) or Article 6(1)(a) GDPR (consent) when you contact us or use a form.

9. Data retention

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by legal, tax or accounting obligations.

10. Your rights under GDPR

Under the General Data Protection Regulation, you have the following rights with regard to your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure — "right to be forgotten" (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent at any time (Art. 7(3) GDPR)

To exercise your rights, please contact us at info@refinery.one.

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin, Germany.

11. Data security

This website uses SSL/TLS encryption. You can recognise an encrypted connection by the "https://" prefix and the lock symbol in your browser's address bar. When encryption is active, the data you transmit to us cannot be read by third parties.

We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

12. Automated decision-making

We do not use automated decision-making or profiling within the meaning of Article 22 GDPR.

13. Links to LinkedIn

This website contains links to LinkedIn profiles operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. No data is transferred to LinkedIn merely by visiting our website. If you follow one of these links, you leave our website and LinkedIn processes your data under its own responsibility. Details can be found in LinkedIn's privacy policy: linkedin.com/legal/privacy-policy.

14. Future services

We may add third-party services to this website in the future, such as scheduling tools (Calendly), CRM platforms (HubSpot), analytics (Google Analytics), advertising tags (LinkedIn Insight Tag), newsletters or AI chatbots. Each service will be listed here with its specific purpose, data processed and legal basis before it is activated.

15. Contact regarding privacy

If you have any questions about this Privacy Policy or how we handle your data, please contact us at info@refinery.one.