Privacy policy
A comprehensive privacy notice for Apodemus's corporate website and B2B communications.
1. Controller
The controller responsible for personal data processed through this website is the legal entity operating under the Apodemus name.
Controller: Apodemus OÜ
Registered address: Sinivoore tn 7-79, Järve linnaosa, Kohtla-Järve linn, Ida-Viru maakond, 30327, Estonia
Registry code: 16211176
VAT number: EE102364165
Privacy contact: development@apodem.us
2. Data we may process
| Category | Examples | Purpose |
|---|---|---|
| Business contact data | Name, company, role, professional email, telephone number | Responding to enquiries, supplier and partner discussions, relationship management |
| Correspondence | Email content, attachments, meeting notes | Managing business discussions and maintaining appropriate records |
| Technical data | IP address, request time, browser/device information, server logs | Site delivery, security, abuse prevention, diagnostics |
| Compliance data | Records necessary to satisfy legal, tax, anti-fraud or contractual obligations | Compliance, disputes, audit trail |
3. Legal bases
Where the GDPR, UK GDPR or similar legislation applies, processing may rely on one or more of the following bases: steps taken at the request of a data subject before entering into a contract; performance of a contract; legitimate interests in operating and developing a B2B business, maintaining professional relationships, network and information security, and preventing fraud; compliance with legal obligations; and consent where consent is legally required.
4. B2B communications
Apodemus may use professional contact information to communicate with existing or prospective business contacts where permitted by applicable law. Recipients may request that non-essential business-development communications stop at any time by replying to the relevant message or contacting development@apodem.us.
5. Sources of information
Information may be provided directly by the individual, by their employer or organization, through public professional sources, at trade events, through introductions, or through legitimate business correspondence. Apodemus does not intend to collect sensitive personal information through this website.
6. Recipients and processors
Personal data may be accessible to authorized Apodemus personnel and service providers that support hosting, email, cybersecurity, document storage, professional advice and business administration, strictly to the extent needed for their functions. Data may also be disclosed where required by law, regulation, court order, competent authority, or to establish, exercise or defend legal claims.
7. International transfers
Because business communications and technology providers may operate internationally, personal data may be processed outside the country where it was collected. Where legally required, appropriate transfer mechanisms should be used, such as adequacy decisions, standard contractual clauses, the UK International Data Transfer Addendum or another recognized safeguard.
8. Retention
Personal data is retained only as long as reasonably necessary for the purpose for which it was obtained, including maintaining supplier and partner relationships, preserving business records, satisfying legal and tax requirements, resolving disputes and enforcing agreements. Retention periods may vary by record type and jurisdiction.
9. Security
Reasonable technical and organizational measures should be used to protect personal data against unauthorized access, alteration, disclosure, loss or destruction. No internet-based system can be guaranteed completely secure, and this policy does not represent an absolute security guarantee.
10. Individual rights
Depending on jurisdiction, individuals may have rights including access, correction, deletion, restriction, objection, portability, withdrawal of consent, and the right to lodge a complaint with a competent supervisory authority. Rights may be subject to statutory conditions and exceptions.
EEA / UK / Switzerland
Where applicable, requests may be made under the GDPR, UK GDPR, Swiss data-protection law or corresponding national rules.
United States
Residents of certain U.S. states may have rights to know/access, correct, delete, obtain a portable copy, and opt out of certain sale, sharing, targeted advertising or profiling activities. The website is not currently designed to sell personal information or conduct cross-context behavioural advertising.
Canada
Applicable federal or provincial privacy legislation may provide rights of access and correction and rights to challenge compliance.
11. Children
This B2B corporate website is not directed to children and is not intended to collect personal information from children.
12. Automated decision-making
Apodemus does not currently use this website to make decisions producing legal or similarly significant effects solely through automated processing.
13. Complaints and contact
Privacy questions or rights requests may be sent to development@apodem.us. If a request concerns statutory privacy rights, reasonable steps may be taken to verify identity and authority before responding.