Who we are
Adverant Limited is the controller of the personal data described in this notice. We are a company registered in Ireland, company number [company number], with our registered office at [registered office address], Dublin, Ireland.
Write to us at privacy@adverant.ai. You can reach our data protection officer at dpo@adverant.ai.
What this notice covers
This notice covers adverant.ai, the forms on it (briefings, contact, job applications), our emails to you, and our dealings with people at our customers, partners and suppliers.
It does not cover the data our customers put into Adverant Nexus. That is governed by each customer's contract with us and its data processing agreement. See Data in Nexus.
What we collect
What you give us
- Briefing and contact forms: your name, work email, company, role, industry, where you would like Nexus to run, and what you write to us.
- Job applications: your name, email, the links you send, where you would like to work from and your message.
- Emails and calls: what you tell us when you write or speak to us.
- Preferences: whether you want updates from us, and your cookie choices.
What we collect automatically
- Technical data: IP address, browser and device type, pages visited and the site that sent you, kept in server logs to run and protect the site.
- Analytics: how pages are used, only if you accept analytics cookies. See the cookie notice.
- Site settings: your theme and language choices, stored in your own browser, not sent to us.
We do not ask for special category data, such as health or political views, through this site. Please do not send it to us.
Why we use it, and on what basis
| What we do | Legal basis under the GDPR |
|---|---|
| Arrange and hold a briefing, answer your message, and follow up on it | Steps you asked for before a possible contract (Art. 6(1)(b)), and our legitimate interest in answering enquiries (Art. 6(1)(f)) |
| Send you occasional updates about Nexus | Your consent (Art. 6(1)(a)). You can withdraw it at any time. |
| Consider you for a role | Steps you asked for before a possible contract (Art. 6(1)(b)). Keeping your application for later roles is based on your consent (Art. 6(1)(a)). |
| Run, secure and fix the site | Our legitimate interest in a working, secure website (Art. 6(1)(f)) |
| Understand how the site is used | Your consent to analytics cookies (Art. 6(1)(a), and the Irish ePrivacy Regulations) |
| Manage our relationship with customers, partners and suppliers | Performing a contract (Art. 6(1)(b)) and our legitimate interests (Art. 6(1)(f)) |
| Meet legal duties, such as tax and responding to authorities | Legal obligation (Art. 6(1)(c)) |
Where we rely on legitimate interests, we have weighed them against your rights. You can ask us for that assessment and you can object at any time.
We do not make decisions about you based only on automated processing that have legal or similarly significant effects. A person reads every briefing request and every job application.
Data in Nexus
When an organisation uses Adverant Nexus, it decides what data goes in and what happens to it. For that data, the customer is the controller and Adverant acts as its processor, under a data processing agreement. We process customer content only to provide the service, on the customer's instructions.
We do not use customer content to train models without that customer's explicit agreement. Customers choose where Nexus runs: our EU cloud, their own data centre, fully offline or in the field. If you have a question about data a customer holds about you, please contact that customer first. We will help them answer you.
Who we share it with
We do not sell your personal data, and we do not share it for advertising. We share it only with:
- Service providers who host the site, send email, store our records and, if you agree, measure site use. They act on our instructions under written contracts. [List of current providers to be added.]
- Professional advisers, such as lawyers and auditors, under duties of confidence.
- Authorities, when the law requires it.
- A buyer or successor, if Adverant's business is sold or merged, under the same protections.
Transfers outside the EEA
We aim to keep personal data in the European Economic Area. If a provider handles it outside the EEA, we rely on an adequacy decision of the European Commission (such as the EU–US Data Privacy Framework for certified companies) or on the Commission's standard contractual clauses, with extra safeguards where needed. Ask us for a copy of the relevant safeguards.
How long we keep it
| Data | How long |
|---|---|
| Briefing and contact requests | [24 months] after our last contact, unless you become a customer |
| Job applications | Until the role is filled, or up to 12 months if you agree we can keep it for other roles |
| Update emails | Until you unsubscribe. We keep a record of the opt-out so we do not write again. |
| Server logs | Up to one year |
| Cookie choices and analytics | See the cookie notice |
| Customer and supplier records | For the contract, then as long as tax and company law require |
Your rights
Under the GDPR you can ask us to:
- give you a copy of your personal data (access);
- correct data that is wrong or incomplete;
- delete your data, where there is no good reason to keep it;
- limit how we use it while a question is sorted out;
- give you your data in a machine-readable form, or send it to someone else (portability);
- stop using it where we rely on legitimate interests, and always for direct marketing (objection).
Where we rely on your consent, you can withdraw it at any time. This does not affect what we did before.
Write to privacy@adverant.ai. We reply within one month. If a request is complex we may need up to two more months, and we will tell you why. We may ask you to confirm who you are. Using your rights is free.
Complaints
Please tell us first and we will try to put it right. You also have the right to complain to a data protection authority. Our lead authority is the Data Protection Commission in Ireland: 21 Fitzwilliam Square South, Dublin 2, D02 RD28, dataprotection.ie. You can also complain to the authority where you live or work.
If you live outside the EU
We give everyone the rights in this notice. Your own country's law may give you more, for example the UK GDPR, the California Consumer Privacy Act, Thailand's Personal Data Protection Act, Japan's Act on the Protection of Personal Information or Korea's Personal Information Protection Act. Write to us and we will apply them. We do not sell or share personal information as those terms are used in California law.
How we protect it
We use encryption in transit and at rest, access limited to the people who need it, logging of access, and regular testing. See the trust centre for more, and report a security issue if you find one.
Children
This site is for businesses and is not aimed at children. We do not knowingly collect data from anyone under 18. If you think we have, tell us and we will delete it.
Changes to this notice
We will update this notice when our practices change and change the date at the top. If a change matters to you, we will tell you before it takes effect, for example by email.