Privacy

Who we are

This website, averfirst.com, is operated by AverFirst (“we”). We are the controller of the personal data described here. To reach us about your data, use the contact form and choose “A privacy or data request”.

Visiting this website

This website sets no cookies, runs no analytics and loads nothing from any other website — no fonts, scripts, images or tracking pixels. It does not store anything in your browser.

To deliver pages to you, our hosting provider’s content delivery network processes the technical data every website receives: your network (IP) address, the page requested and your browser’s request headers. We have not switched on access logging for this website, so we keep no record of your visit.

When you send an inquiry

The “Request a briefing” form sends us:

• your name, work email address and company, and your role if you give it;
• the area you are interested in and your message;
• the time it arrived.

We use it only to answer you and to arrange and hold the conversation you asked for, and — if you report a vulnerability — to investigate and fix it. Our legal basis is our legitimate interest in answering requests sent to us, and taking steps at your request before any agreement (GDPR Article 6(1)(f) and 6(1)(b)).

While the form is sent, your network address is used to limit how many requests one network can send in an hour. It is held for at most that hour and is not stored with your inquiry. Our security audit log records that an inquiry arrived and its area of interest, without any of its content.

How long we keep it

We keep an inquiry for 24 months after it arrives, then delete it. Backup copies of our database follow their own retention and expire on their own schedule; they exist to recover from a failure and are not used to read or process your inquiry.

Where your data is

Inquiries are stored in the European Union, with Amazon Web Services in Frankfurt (eu-central-1), and backup copies in a second EU region (Ireland, eu-west-1). An encrypted backup copy is also kept with a storage provider outside Amazon Web Services; it is encrypted before it leaves our systems, so that provider holds no readable data.

Who else sees it

We do not sell, rent or share your data for anyone’s marketing. Our hosting and backup providers process it on our behalf, under contract, only to store and deliver it. We disclose it to anyone else only where the law requires us to.

Your rights

You may ask us for a copy of the personal data we hold about you, and to correct it, delete it, restrict its use or receive it in a portable form; you may also object to our use of it. Send your request through the contact form. We answer within one month, as the GDPR requires. You also have the right to complain to a data protection supervisory authority, in particular in the country where you live or work.

The console

The AverFirst console at app.averfirst.com is a separate service for people with an account. It uses only the cookies its sign-in needs; this page covers the public website and its inquiry form.

Changes to this page

When we change how we handle personal data, we update this page and the date at its top before the change takes effect.