Last updated: September 26, 2026

CM Resilience Consultants (“we,” “us,” “our”) is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, and safeguard information when you visit https://cmresilienceconsultants.eu/ (the “Website”) or otherwise interact with us, in accordance with the EU General Data Protection Regulation (GDPR) and applicable national data protection laws.

1. Who We Are

CM Resilience Consultants is a resilience and advisory consultancy with a European presence across Greece, Malta, Cyprus, Montenegro, and Brussels.

Data Controller: CM Resilience Consultants
Contact email: Info@cmresilienceconsultants.eu
Website: https://cmresilienceconsultants.eu/

[Insert registered company name, registration number, and registered address once finalized — required for full GDPR compliance.]

If you have questions about this policy or how your data is handled, you can contact us using the details above.

2. What Data We Collect

Depending on how you interact with our Website, we may collect the following categories of personal data:

  • Contact information — name, email address, phone number, company/organization name, job title
  • Communication data — messages, inquiries, or documents you submit via contact forms or email
  • Technical data — IP address, browser type, device information, operating system, referral source
  • Usage data — pages visited, time spent on the Website, click patterns, collected via cookies and analytics tools
  • Marketing preferences — if you subscribe to newsletters or updates

We do not knowingly collect sensitive personal data (e.g., health, political opinions, biometric data) through this Website unless voluntarily provided by you in correspondence.

3. Why We Collect It

We collect and process personal data for the following purposes, and under the following GDPR legal bases:

Purpose Legal Basis (GDPR Art. 6)
Responding to inquiries and providing information Consent / Legitimate interest
Delivering advisory or consulting services Performance of a contract
Sending newsletters or marketing communications Consent
Improving Website functionality and user experience Legitimate interest
Complying with legal and regulatory obligations Legal obligation

4. How We Use It

We use the data we collect to:

  • Respond to your inquiries and requests
  • Provide, manage, and improve our advisory and consulting services
  • Communicate updates, insights, or marketing content (where you have opted in)
  • Analyze Website traffic and performance to improve user experience
  • Maintain the security and integrity of our Website
  • Comply with applicable legal, tax, and regulatory requirements across our operating jurisdictions

We do not sell, rent, or trade your personal data to third parties.

5. Who Has Access

Your data may be accessed by:

  • Authorized personnel within CM Resilience Consultants on a need-to-know basis
  • Service providers and processors who support our operations (e.g., website hosting, email services, analytics providers, IT support), bound by data processing agreements
  • Professional advisors (e.g., legal, accounting) where necessary
  • Regulatory or governmental authorities, where required by law

Where data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions, in accordance with GDPR requirements.

6. How Long We Keep It

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, including:

  • Inquiry/contact data — retained for [Insert period, e.g., 12–24 months] unless further engagement occurs
  • Client/contract data — retained for the duration of the engagement plus any applicable legal or tax retention period (e.g., [Insert period, e.g., 5–10 years])
  • Marketing data — retained until you withdraw consent or unsubscribe
  • Technical/analytics data — retained per our cookie policy and analytics provider settings

Once data is no longer needed, it is securely deleted or anonymized.

7. Your Rights (GDPR)

Under the GDPR, if you are located in the EU/EEA, you have the following rights regarding your personal data:

  • Right to access — request a copy of the personal data we hold about you
  • Right to rectification — request correction of inaccurate or incomplete data
  • Right to erasure (“right to be forgotten”) — request deletion of your data, subject to legal exceptions
  • Right to restrict processing — request that we limit how we use your data
  • Right to data portability — request your data in a structured, machine-readable format
  • Right to object — object to processing based on legitimate interest or for direct marketing purposes
  • Right to withdraw consent — where processing is based on consent, at any time, without affecting prior lawful processing
  • Right to lodge a complaint — with your national data protection authority if you believe your data has been mishandled

To exercise any of these rights, contact us at Info@cmresilienceconsultants.eu. We will respond within the timeframes required under GDPR (generally one month).

8. How to Contact Us About Data

For any questions, concerns, or requests regarding your personal data or this Privacy Policy, please contact:

CM Resilience Consultants
European Presence: Greece · Malta · Cyprus · Montenegro · Brussels
📧 Info@cmresilienceconsultants.eu
🌐 https://cmresilienceconsultants.eu/

[If applicable, insert Data Protection Officer (DPO) contact details here.]

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational reasons. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review this policy periodically to stay informed about how we protect your data.