Legal
Privacy Policy
Last updated: April 2026
This Privacy Policy explains how Verumt collects, uses, and protects your personal data when you use our website or engage our services. We are committed to handling your data transparently and in accordance with the General Data Protection Regulation (GDPR) and applicable EU privacy law.
1. Who we are
Verumt is an EU AI Act compliance consultancy. References to "Verumt," "we," "us," or "our" in this policy refer to Verumt and its team members.
Contact: contact@verumt.com
2. What data we collect
We collect data you provide directly when you:
— Fill out a contact or inquiry form on our website
— Send us an email
— Engage us for consulting services
This may include your name, work email address, company name, job title, and the content of your communications with us.
We may also collect standard technical data automatically: IP address, browser type, referring URL, pages visited, and time spent. This data is collected via server logs and analytics tools.
3. How we use your data
We use data we collect to:
— Respond to inquiries and provide consulting services
— Communicate with you about your engagement
— Improve our website and services
— Comply with legal obligations
We do not sell, rent, or share your personal data with third parties for marketing purposes.
4. Legal basis for processing (GDPR)
For individuals in the EU, we process your personal data on the following legal bases under GDPR Article 6:
— Contractual necessity: to perform services you have requested
— Legitimate interests: to respond to inquiries and improve our services
— Legal obligation: where required by applicable law
— Consent: where you have provided it explicitly (e.g., newsletter subscription)
5. Data retention
We retain your data for as long as necessary to provide our services and meet our legal obligations. Contact inquiry data is retained for up to 3 years. Client engagement data is retained for 7 years in accordance with applicable financial record-keeping requirements.
You may request deletion of your data at any time by contacting contact@verumt.com.
6. Your rights under GDPR
If you are located in the EU, you have the following rights regarding your personal data:
— Right of access: request a copy of your data
— Right to rectification: correct inaccurate or incomplete data
— Right to erasure: request deletion of your data ("right to be forgotten")
— Right to restriction: limit how we use your data
— Right to data portability: receive your data in a structured, machine-readable format
— Right to object: object to processing based on legitimate interests
To exercise any of these rights, contact us at contact@verumt.com. We will respond within 30 days.
7. Cookies
We use essential cookies for website functionality and analytics cookies to understand how visitors use our site. See our Cookie Policy for full details.
8. Third-party services
We may use third-party services including analytics providers. These providers process data in accordance with their own privacy policies. We ensure any third-party data processing agreements comply with GDPR requirements.
9. International transfers
Where we transfer data outside the European Economic Area, we ensure appropriate safeguards are in place in accordance with GDPR Chapter V, including standard contractual clauses where required.
10. Changes to this policy
We may update this policy from time to time. The date at the top of this page reflects when the policy was last updated. Continued use of our website or services after changes constitutes acceptance of the updated policy.
11. Contact and complaints
For any questions about this policy or to exercise your rights, contact us at contact@verumt.com.
If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.
Questions about this policy?
Contact us at contact@verumt.com