What we collect, what we don’t, and your rights.

Who is responsible for your data

The data controller for this website is Ignas Tatoris, an individual established in Denmark who operates glebora. You can reach us about anything in this notice at contact@glebora.com.

What we collect, and why

There are only two ways this site collects data, and neither builds a profile of you.

• When you contact us. The inquiry form asks for your name and email address, an optional company name and a note of what you import, and your message. We use these solely to read and reply to your inquiry and to take any steps you ask for ahead of a possible engagement. Your email address is set as the reply-to on our own copy, so we can answer you directly.
• Ordinary technical data. Like any website, our infrastructure processes standard request data (such as your IP address and browser type) to serve the pages, keep the site secure, and defend against spam and abuse. Our anti-spam check (Cloudflare Turnstile) verifies that a form submission is from a person and, in doing so, processes your IP address.

Cookies: we don’t set any

glebora.com sets no cookies and uses no cross-site tracking. Our website analytics (Cloudflare Web Analytics) are cookieless and aggregate: they tell us roughly how many people visit which pages, without cookies, without fingerprinting, and without identifying you. That is why you see no cookie banner here, there is nothing to consent to.

The legal basis

Under the GDPR, we rely on:

• Taking steps at your request before a contract (Art. 6(1)(b)) : to handle your inquiry when you write to us;
• Our legitimate interests (Art. 6(1)(f)): to run and secure the website, prevent spam and abuse, and understand aggregate, non-identifying usage. We have weighed these against your rights and consider them proportionate.

Who else processes it

We keep the supplier list short and use them only to run the site and reach you. Each acts under a data-processing agreement:

• Cloudflare: website hosting, security, the Turnstile anti-spam check, and cookieless analytics.
• Resend: delivery of the inquiry email to us and the confirmation email back to you.
• Google (Gmail): the mailbox that receives and answers contact@glebora.com.

Some of these providers may process data outside the EU/EEA; where they do, the transfer is covered by the appropriate safeguards (such as the European Commission’s Standard Contractual Clauses).

How long we keep it

We keep inquiry correspondence for as long as needed to deal with your request and, if you become a client, for the duration of our relationship and any period the law requires afterwards. For inquiries that do not become an engagement, we keep the correspondence for up to 24 months, after which it is deleted. If you would like us to delete an inquiry sooner, just ask.

Your rights

Under the GDPR you have the right to:

• ask what personal data we hold about you and get a copy (access);
• have inaccurate data corrected (rectification);
• have your data deleted (erasure);
• restrict or object to certain processing;
• receive your data in a portable form; and
• lodge a complaint with a supervisory authority: in Denmark, that is the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk).

To exercise any of these, email contact@glebora.com. We’ll respond within the time the law allows.

Your supply-chain data

This notice is about the website. When you engage us to run your EUDR due diligence, the plot geolocation and supply-chain information you share is handled under your service agreement and mandate, kept siloed to your engagement, and processed only to assess your plots, file your Due Diligence Statement, and keep your audit record. The due-diligence declaration, and the legal responsibility for it, remain with you, the operator.

Changes to this notice

We may update this notice as the service or the law changes. The date at the top always shows the current version.