Privacy Notice

1. Who we are

Atrium Capital S.R.L., trading as Atrium Infrastructure, is the controller of personal data described in this notice.

2. Personal data we collect

We may collect and use the following categories of personal data:

• your email address when you request access to an Atrium Research paper;
• the paper requested, request date, delivery status, and the dates and counts of online reads and downloads;
• your name, contact details and the contents of correspondence if you contact us; and
• limited technical and security information processed by our hosting and security providers, including information required to prevent abuse and verify the Cloudflare Turnstile security check.

Our research database does not store your IP address or create a browser fingerprint.

3. Why we use personal data

We process personal data to provide the research material you request, administer secure links, understand readership, respond to enquiries, protect the website and comply with legal obligations.

Our legal bases are our legitimate interests in providing and improving Atrium’s research and protecting our services; taking steps at your request before entering into a possible business relationship; and compliance with applicable legal obligations. Where the law requires consent, we will request it separately.

We do not add research-request email addresses to a marketing list. We do not use this information for automated decision-making or profiling that produces legal or similarly significant effects.

4. Recipients and service providers

Personal data may be processed for us by carefully selected providers that support the website and communications, including Cloudflare for hosting, storage, security and Turnstile; Resend for transactional email delivery and delivery-status reporting; and Microsoft 365 for business correspondence. We may also disclose data where required by law, to professional advisers under duties of confidentiality, or in connection with a corporate transaction.

Some providers may process data outside the European Economic Area. Where this occurs, we rely on an applicable adequacy decision or contractual and organisational safeguards required by data-protection law.

5. Retention

We retain research-request and engagement records for up to seven years. Correspondence and related business records may also be retained for up to seven years, or longer where required to establish, exercise or defend legal claims or comply with law. Security records may be kept for shorter periods determined by the relevant service provider. We delete or anonymise personal data when it is no longer required.

6. Cookies and similar technologies

We do not use advertising cookies. Cloudflare may use strictly necessary cookies or similar technologies to provide security, prevent abuse and operate Turnstile. These technologies are required for the research-request function to work. We do not currently use non-essential advertising or marketing technologies. If we introduce them, we will provide the required information and consent controls before using them.

We use Cloudflare Web Analytics to obtain aggregated information about website visits, pages viewed, approximate country, referring websites, devices, browsers and page performance. Cloudflare describes this service as privacy-focused and states that Web Analytics does not collect or use visitors’ personal data. We use these aggregated statistics to understand and improve the website.

7. Your rights

Subject to applicable law, you may ask us for access to your personal data, correction, deletion, restriction, portability or to object to processing based on legitimate interests. You may withdraw consent at any time where consent is the legal basis. These rights can be subject to legal exceptions.

To exercise a right, email info@atriuminfrastructure.com. We may request information reasonably necessary to verify your identity.

You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) or another competent supervisory authority in the EU member state of your habitual residence, place of work or the alleged infringement. Information is available at dataprotection.ro.

8. Security and changes

We use appropriate technical and organisational measures designed to protect personal data. No internet service can be guaranteed to be completely secure.

We may update this notice to reflect changes to our processing or legal requirements. The effective date at the top of this page identifies the current version.