Privacy Policy
Last updated: July 2026
1. Data Controller
CxMaestro processes personal data as part of providing the commissioning platform to your firm ("Customer"). Where CxMaestro processes personal data on behalf of a Customer, CxMaestro acts as a data processor under the EU General Data Protection Regulation (GDPR), and the Customer acts as the data controller.
2. What We Collect
We collect account information (name, email, role), project data you enter (ITR records, deficiencies, witness test attendees and signatures, equipment photos), and standard technical logs (IP address, browser, timestamps) required to operate and secure the service.
3. Legal Basis for Processing
We process personal data on the basis of contract performance (Art. 6(1)(b) GDPR) for account and project data, and legitimate interest (Art. 6(1)(f) GDPR) for security logging and service improvement.
4. Data Retention
Project data is retained for the duration of the Customer's contract plus any period required by applicable commissioning or construction record-keeping obligations. Data is deleted or anonymized upon written request, subject to legal retention requirements.
5. Data Location & Transfers
Customer data is hosted within the EU by default. On-premise and private-cloud deployments are available for customers with specific data residency requirements.
6. Your Rights
Under the GDPR you have the right to access, rectify, erase, restrict, or port your personal data, and to object to certain processing. To exercise these rights, contact us via the contact page.
7. Contact
For privacy inquiries or to reach our data protection contact, please use the contact form linked above.