Privacy Policy

Last updated: 16 July 2026

1. Data controller

The ApeTerra website and related digital pages are operated by:

Mars 1982 Ltd acts as the controller of personal data collected through the ApeTerra website, unless otherwise stated in relation to a specific project, event, partner or service.

2. Scope of this Policy

This Privacy Policy explains how we collect, use, retain, share and protect personal data relating to people who:

• visit the ApeTerra website;
• submit an enquiry through a contact form;
• request information about ApeTerra;
• propose a collaboration, site, land, initiative or partnership;
• represent municipalities, public bodies, businesses, beekeepers, farmers, universities, associations or other interested organisations;
• participate or request to participate in events, educational programmes, environmental activities or local initiatives;
• subscribe, where available, to newsletters or updates;
• interact with embedded maps, videos, social media content or third-party services.

3. Personal data we collect

Depending on how you interact with ApeTerra, we may collect the following categories of personal data.

3.1 Information provided directly by you

This may include:

• your name and surname;
• email address;
• telephone number;
• company, municipality, public body, association or organisation;
• professional role;
• city, territory or geographic area;
• information contained in your communications;
• information concerning proposed collaborations, land, projects or initiatives;
• documents and attachments voluntarily submitted;
• communication preferences;
• information required for registration for an event or activity.

You should not send unnecessary personal data, information about another person without authorisation, or sensitive information unless specifically requested and supported by an appropriate legal basis.

3.2 Information collected automatically

When you use the website, we may collect:

• IP address;
• date and time of access;
• pages visited;
• referring URL;
• browser and device type;
• operating system;
• technical identifiers;
• server logs;
• security and error information;
• cookie preferences;
• website usage statistics, where consent has been provided or the processing is otherwise permitted by applicable law.

3.3 Cookies and similar technologies

The website may use cookies, pixels, local storage, tags and similar technologies.

Technologies that are not strictly necessary are used only in accordance with the choices made through the cookie banner or consent-management panel.

Further information is provided in the ApeTerra Cookie Policy.

4. Purposes and lawful bases

We process personal data for the following purposes.

Responding to enquiries

We use personal data to respond to questions, contact requests, proposals and communications.

The lawful basis may be:

• taking steps at your request before entering into a contract;
• our legitimate interest in managing communications and developing ApeTerra;
• consent, where required.

Evaluating collaborations and participation

We may process data to evaluate:

• collaboration with municipalities and public bodies;
• the availability of land or facilities;
• partnerships with companies, beekeepers, farmers and associations;
• educational, tourism, scientific or environmental activities;
• funding, sponsorship and territorial-development opportunities.

The lawful basis will generally be pre-contractual steps, performance of an agreement or legitimate interests.

Organising events and activities

Personal data may be used to manage registrations, organisational communications, admission, security and participation in ApeTerra events or programmes.

The lawful basis may be performance of an agreement, consent, a legal obligation or our legitimate interest in safely organising the relevant activity.

Sending newsletters and updates

Newsletters, promotional messages or periodic updates are sent only where a valid lawful basis exists, normally consent.

You may withdraw your consent at any time by using the unsubscribe facility or contacting us.

Operating and protecting the website

We process technical data and logs to:

• operate the website;
• prevent abuse, fraud and unauthorised access;
• diagnose technical problems;
• protect systems, information and users;
• perform maintenance and backups.

The lawful basis is our legitimate interest in ensuring security and service continuity, together with any applicable legal obligations.

Website analytics

Where permitted, we may use analytics tools to understand how the website is used and improve its content, accessibility and performance.

Where analytics technologies are not strictly necessary, they are used on the basis of consent.

Legal compliance and protection of rights

We may process and retain information to:

• comply with legal, tax or administrative obligations;
• respond to lawful requests from authorities;
• establish, exercise or defend legal rights;
• prevent or manage disputes.

The lawful basis is compliance with legal obligations or our legitimate interest in protecting our rights.

5. Requirement to provide data

Information marked as mandatory in a form is required for us to process the relevant request.

Failure to provide such information may prevent us from responding, evaluating a proposal, registering participation or providing the requested service.

Subscription to newsletters or promotional communications is optional.

6. Special-category data and children

ApeTerra does not normally request special-category data, such as medical, biometric, religious or ethnic-origin information.

Where health, disability, allergy or accessibility information is necessary for safe participation in an activity, it will be requested separately and processed only where an appropriate legal condition applies.

The website is not designed to knowingly collect personal data directly from children without the involvement of a parent, guardian, school, public body or responsible organisation.

Any ApeTerra activities intended for children or young people will be covered by specific notices, permissions and safeguarding procedures.

7. Recipients of personal data

Personal data may be processed by authorised personnel and shared, where necessary, with:

• website-hosting and infrastructure providers;
• technical maintenance providers;
• email and communication-service providers;
• form, content-management and cloud-service providers;
• security, backup and IT-support providers;
• analytics or consent-management providers, where enabled;
• legal, accounting, insurance or other professional advisers;
• project partners, municipalities, public bodies or organisations involved in a relevant initiative, where necessary and lawful;
• courts, regulators, law-enforcement bodies or other public authorities where required by law.

We do not sell users’ personal data.

Service providers processing information on our behalf are subject to appropriate contractual confidentiality, security and data-protection obligations.

8. Third-party content and services

The website may contain links to or embedded content from third parties, including:

• maps;
• videos;
• social media platforms;
• external forms;
• analytics services;
• anti-spam tools;
• partner or institutional websites.

Activating certain content may allow the relevant provider to receive technical information about the user. Where required, such content is blocked until consent has been given.

Third-party providers process personal data in accordance with their own privacy notices.

9. International transfers

Mars 1982 Ltd is established in the United Kingdom. Some service providers or partners may be located in the United Kingdom, the European Economic Area or other countries.

Where personal data is transferred outside the territory in which it was collected, we use appropriate safeguards where required, including:

• adequacy decisions or regulations;
• standard contractual clauses;
• the UK International Data Transfer Agreement or UK Addendum;
• supplementary technical, organisational or contractual measures.

Further information about applicable safeguards may be requested by contacting us.

10. Retention periods

We retain personal data only for as long as necessary for the purposes for which it was collected.

As a general guideline:

• general enquiries and correspondence: up to 24 months after the last interaction;
• unsuccessful project proposals, partnerships and collaborations: normally up to 3 years after the last interaction;
• contracts and administrative documents: for the duration of the relationship and thereafter for the legally required period, normally up to 6 years;
• newsletter information: until consent is withdrawn or the user unsubscribes;
• suppression information: for as long as necessary to ensure that no further marketing messages are sent;
• technical and security logs: normally up to 12 months, unless required for security, investigation or legal purposes;
• dispute-related information: until final resolution and expiry of the applicable limitation periods.

Information may be deleted or anonymised earlier where it is no longer required.

11. Security

We use reasonable technical and organisational measures designed to protect personal data against:

• unauthorised access;
• accidental loss or destruction;
• unlawful disclosure;
• alteration;
• misuse.

However, no system connected to the Internet can guarantee absolute security.

12. Your rights

Subject to the conditions and exemptions in the GDPR, UK GDPR and other applicable laws, you may have the right to request:

• confirmation that your personal data is being processed;
• access to your personal data;
• correction of inaccurate data;
• completion of incomplete data;
• erasure;
• restriction of processing;
• data portability;
• objection to processing based on legitimate interests;
• withdrawal of consent at any time;
• information about safeguards used for international transfers;
• protection from solely automated decisions producing legal or similarly significant effects, where applicable.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

To exercise your rights, contact info@apeterra.com.

We may request reasonable information to verify your identity.

13. Complaints

You have the right to lodge a complaint with the relevant data-protection authority.

In the United Kingdom, the supervisory authority is the Information Commissioner’s Office – ICO.

Individuals located in the European Union may also complain to the supervisory authority in their country of residence, place of work or place of the alleged infringement.

We encourage you to contact us first so that we have an opportunity to investigate and address your concerns.

14. Automated decision-making

Unless specifically stated otherwise, ApeTerra does not use solely automated decision-making processes that produce legal or similarly significant effects on users.

15. Changes to this Policy

We may update this Privacy Policy to reflect legal, technical or operational changes.

The updated version will be published on the website and will state the date of its latest revision.

16. Contact details

For privacy questions or to exercise your rights: