PRIVACY
Transparent operation.
Information for visitors to www.retconeurope.eu.
Updated: 19 October 2026
Controller and contact
Retcon Europe Limited, Portnaquin, Killashandra, County Cavan, H12A313, Ireland. Company number: 765256. Privacy enquiries: [email protected].
Website delivery and security
The website is served from the operator’s computer through Cloudflare. Technical data such as IP address, requested page, time and browser information are processed to deliver content and prevent abuse. The legal basis is the controller’s legitimate interest in operating and protecting the website under GDPR Article 6(1)(f).
Enquiries
The form opens a prepared email in your own mail application; the website does not send or separately store its contents. If you send it, your supplied name, email, phone number and message are used to respond. The legal basis is pre-contractual steps for an individual’s contractual enquiry (GDPR Article 6(1)(b)), or legitimate interest in responding to business correspondence (Article 6(1)(f)).
Retention
The local web server does not keep a persistent visitor access log. Local technical request processing lasts as needed to serve the request; Cloudflare handles security data under its service and processing terms. Correspondence is retained as necessary to resolve the enquiry, carry out resulting contractual tasks and handle any legal claims.
Service providers and transfers
Rackhost Zrt. is the domain registrar; Cloudflare, Inc. provides traffic delivery and security. Cloudflare operates an international network; its processing terms describe safeguards for processing and transfers outside the EEA. Sending an email also involves your and the recipient’s email providers. Cloudflare DPA ↗
Cookies and external content
The website uses no analytics or advertising cookies, external fonts or embedded maps. Partner sign-in uses a necessary session cookie with HttpOnly, Secure and SameSite=Strict protection, scoped to /partnerportal/. The client token is held only in the current page memory, never in localStorage. Necessary Cloudflare security checks may use technical cookies.
Client and partner portals
The portals connect to the locally hosted Retcon CRM over HTTPS through Cloudflare. Access requires a previously created and enabled account; there is no public registration. Clients see the profile and change requests assigned to their own account. The partner portal applies CRM permissions for staff, leaders and administrators. Processing supports contractual collaboration and authorised work, based on performance of a contract with the individual, or legitimate interests in secure service delivery and work organisation for business and staff contacts. Sessions last up to 8 hours and expire after 1 hour of inactivity. Login attempt controls use a 15-minute window; CRM records successful sign-ins and security-related account actions in an audit trail. Account data is retained while access is authorised; related client records and audit data are retained as necessary for contractual, accounting and legal claim purposes. Contact the address above to request access termination or further retention information.
Personal Google Calendar subscription
Staff, leaders and administrators with calendar read permission may create a private subscription link for their own account, valid for one year. Adding it to Google Calendar lets Google fetch and store event times, status and generic labels for the past 30 days and next 365 days. NAV deadlines and original event titles are optional; original titles may contain client names or business information. Notes, attachments and separate contact fields are excluded. Anyone holding the link can read the selected data, so it must be kept confidential. CRM stores only a hash of the access key and the settings, timestamps and event revisions needed to operate the subscription. Staff must use accounts and transfers authorised by their organisation; enabling the feature is a technical choice and does not replace an applicable processing legal basis. The user can revoke the link or replace it. Loss of permission and expiry also stop further fetches, but data already cached by Google must be removed separately in the Google account. Changes may be delayed by Google’s refresh schedule.
Online appointments
Your name, email, optional phone number, selected topic and time are saved in the Retcon CRM calendar to arrange the consultation. The public interface shows only available slots and does not expose calendar entries or other people’s details. The legal basis is pre-contractual steps for an individual’s contractual enquiry, or legitimate interest in arranging appointments with business contacts. Personal booking details in the active CRM are automatically anonymised 90 days after the appointment; records for any separate engagement are handled independently. An IP-derived technical identifier and request counter are used in windows of up to one hour to prevent abuse. The private management link is included in the downloadable calendar file; its holder can view the appointment time and cancel before it starts. Keep this link confidential. When automatic confirmations are enabled, booking and cancellation messages are sent from [email protected] through Rackhost to the address provided. Booking messages include a calendar attachment and a private management link. The local CRM encrypts queued content and contact details; queued content is removed after successful SMTP handoff, and contact details expire within 90 days after the appointment. Confirmation also appears on the website.
Your rights
Where applicable, you may request access, rectification, erasure, restriction or portability, and object to processing based on legitimate interests. Send requests to the email above. You may complain to the Irish Data Protection Commission or the competent supervisory authority where you live. The website does not carry out automated decision-making or profiling. Data Protection Commission ↗
Job applications and HR
Your name, email, optional phone and message, selected position, PDF CV and any separately uploaded cover letter or references are used to assess your application and contact you. They are stored encrypted in Retcon CRM on the operator’s computer and are accessible to leaders and administrators. No automated recruitment selection decision is made. The legal basis for pre-contractual steps requested by the applicant is GDPR Article 6(1)(b). Limited retention after closure is based on legitimate interest in documenting the recruitment process and handling related enquiries under Article 6(1)(f). Closed applications and attachments are automatically deleted after 180 days from closure in the active CRM. Backups are handled under the retention information in this notice. Do not upload health information, identity documents or sensitive information unnecessary for the application. Privacy requests can be sent to the contact email above.