Version 1.1 – 11 Aug 2025

Controller
ALMPACT LTD (Ltd.)
Palaipafou, Nerina 5, 8041 Paphos, Cyprus
Email: [email protected]
Data Protection Officer (DPO): Robert Kopi – [email protected]

Scope
Applies to www.a-impact.io (the “Website”) and related communications (e.g., contact/demo forms, newsletters). Product‑specific processing for AI voice agents is outside this Website Policy (covered in contractual documents/DPA).

1. Categories of data

Server/network: IP address, timestamps, requested URLs, user agent, error/security logs.

Communications (forms/email): name, company, contact details, message, scheduling.

Marketing/CRM: newsletter opt‑ins, website/email interactions, campaign attribution.

Cookies/similar tech: consent‑based (except strictly necessary cookies).

2. Purposes & legal bases

Website operation & security (GDPR Art. 6(1)(f)).

Handling enquiries/scheduling (Art. 6(1)(b) or (f)).

Newsletters/marketing & tracking (Art. 6(1)(a); withdraw anytime).

Legal enforcement/compliance (Art. 6(1)(c)/(f)).

3. Recipient categories

Hosting/website delivery, email/communications, domain/DNS, CRM/marketing, advisers/legal (as needed).

4. International transfers

Primary processing within the EU/EEA (notably Germany). Any third‑country processing (e.g., US) occurs only if explicitly selected by the customer or technically required; in such cases we apply EU Standard Contractual Clauses (SCCs) and supplementary measures.

5. Cookies & consent banner

Non‑essential cookies/trackers are set only after consent. You can adjust choices anytime at /cookie‑settings.

6. Retention

Server logs: typically 30 days.

Enquiries: until completion of the conversation, max. 12 months.

Newsletter data: until withdrawal/deletion; backups: 30 days.

Cookie durations: see banner.

7. Mandatory data

Server data is technically required; form/newsletter data is voluntary but necessary to handle requests.

8. Data subject rights

Access, rectification, erasure, restriction, portability, objection (for Art. 6(1)(f)), withdrawal of consent with future effect; complaint to a supervisory authority.

9. Minors

Website is intended for adults only.

10. Security

TLS encryption, RBAC/least‑privilege, regular patching/hardening.

Contact for requests
Customers: [email protected] – Prospects: [email protected]