Personal Data Processing Notice (GDPR)

Survey: GenAI Governance and Enterprise Data Protection

This notice explains how Talmur ("Controller", "we") collects, uses, and protects data for this market-research survey.

1. Data Controller

  • Company: Talmur
  • Privacy / DPO contact: kretes.technologies@gmail.com

2. Data Collected and Purposes

We collect data for two separate purposes and apply data minimization.

  • A. Research Data (anonymous / non-identifying): role category, opinions on AI policy, prevention controls, and adoption blockers.
  • Purpose: market research, aggregate analysis, and product development (B2B product discovery).
  • Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
  • B. Contact Data (optional): email address and/or phone number.
  • Purpose: contact you about your responses and product updates (lead generation / sales follow-up).
  • Legal basis: explicit consent (Art. 6(1)(a) GDPR), given by voluntary contact entry and dedicated checkbox opt-in.

Warning for free-text fields: do not submit personal data, special category data (Art. 9 GDPR), or highly confidential company information in open text fields.

3. Data Retention

  • Research data (without contacts): anonymized and aggregated; statistical retention may be indefinite.
  • Contact data and linked responses: retained for up to 24 months from collection, or until consent is withdrawn.

4. Security, Recipients, and Data Transfers

Data is securely transmitted and stored in a cloud database managed through Supabase.

  • Access: restricted internally via role-based controls (RLS) and security policies.
  • Cross-border transfer: data is hosted in Supabase infrastructure in the EU (or protected through Standard Contractual Clauses where applicable). Talmur does not sell personal data to third parties.

5. Your Rights (Arts. 15-22 GDPR)

You may, at any time:

  • access your personal data;
  • request correction or deletion;
  • restrict or object to processing;
  • withdraw consent for follow-up contact at any time, without affecting processing lawfulness before withdrawal.

To exercise your rights: kretes.technologies@gmail.com