Privacy Policy

Effective Date: 17 November 2025
Contact: contact@enbinfra.com

1. Introduction

This Privacy Policy explains how ENBI Holding Company S.R.L. (“we”, “us”, “our”) processes personal data when you use our website (the “Site”). We collect and process personal data in accordance with the EU General Data Protection Regulation (“GDPR”) and applicable local laws.

2. Data Controller

ENBI Holding Company S.R.L.
Email: contact@enbinfra.com
We act as the Data Controller for all personal data processed through the Site.

3. Personal Data We Process

As our Site does not include user registration or login, we only process the following:

3.1 Data You Provide Voluntarily
If you contact us via form or email, we may process:

  • Name
  • Email address
  • Company and role (if provided)
  • Message content and attachments

3.2 Automatically Collected Data (Server Logs & Analytics)
When you browse the Site, our servers may automatically collect:

  • IP address
  • Browser type and version
  • Device information
  • Pages visited, date and time of access
  • Referring URL

3.3 Cookies and Tracking Technologies
We may use strictly necessary cookies to operate the Site and optional analytics cookies only with your consent. A cookie banner will allow you to accept or reject non-essential cookies.

4. Legal Bases for Processing (Art. 6 GDPR)

We process personal data based on:

  • Art. 6(1)(b) – to respond to your enquiries
  • Art. 6(1)(f) – legitimate interests such as Site security, performance monitoring, and improvement
  • Art. 6(1)(a) – your explicit consent (e.g., analytics cookies) We do not perform automated decision-making or profiling.

5. How We Use Personal Data

We process personal data to:

  • Operate and maintain the Site
  • Respond to enquiries
  • Improve performance and user experience
  • Detect and prevent security incidents
  • Comply with legal obligations

We do not sell personal data or use it for marketing without consent.

6. Sharing of Personal Data

We only share data with:

  • Technical service providers (e.g., hosting, analytics), bound by GDPR-compliant agreements
  • Professional advisers when legally required
  • Public authorities when mandated by law

We never share data with third parties for advertising or commercial resale.

7. International Transfers

If any service providers operate outside the European Economic Area (EEA), transfers are made under:

  • Adequacy Decisions (Art. 45 GDPR), or
  • Standard Contractual Clauses (Art. 46 GDPR)

8. Data Retention

We retain personal data only as long as necessary:

  • Contact enquiries: 12–24 months
  • Server logs: up to 12 months
  • Analytics data: according to your cookie preferences

Data may be retained longer if required for legal obligations or to establish or defend legal claims.

9. Your GDPR Rights

You have the right to:

  • Access your personal data (Art. 15)
  • Rectify inaccuracies (Art. 16)
  • Request erasure (Art. 17)
  • Restrict processing (Art. 18)
  • Object to processing based on legitimate interests (Art. 21)
  • Withdraw consent at any time (Art. 7(3))
  • Request data portability (Art. 20)

To exercise your rights, contact: contact@enbinfra.com
You may also lodge a complaint with your local Data Protection Authority.

10. Security Measures

We implement appropriate technical and organisational measures—including encryption, access controls, and secure hosting—to protect personal data. While no system is entirely secure, we continually work to maintain a high level of protection.

11.Children’s Data

The Site is not intended for individuals under 16 years. We do not knowingly collect personal data from children.

12.Changes to This Policy

We may update this policy periodically. Any changes will be posted on this page with an updated “E"ective Date.”