Legal
Privacy Policy
Last updated: July 2026
1. Data controller
The controller of data collected through this site is aNota S.r.l., registered office at Via Marconi 45, 40122 Bologna, Italy. For any request: info@getanota.com.
2. What this notice covers
It concerns only data processed when you browse getanota.com, request a demo, or contact the team; for this data aNota is the controller. Clinical and operational data processed inside the aNota product (voice recordings, transcripts, handovers, resident data) is not covered here: in that context the client facility is the controller and aNota is the processor under Art. 28 GDPR, per the DPA signed with each client.
3. What data we process
- Browsing data: IP address, browser/device type, operating system, pages visited, date and time, approximate location (country level, inferred from IP), diagnostics.
- Aggregate statistics: traffic measured in aggregate, anonymous form via the analytics built into our hosting platform (Lovable). No profiling cookies, no cross-site tracking, no individual profiles.
- Demo requests and contact: data you provide via the Google Calendar appointment link or by email (name, email, any message), managed in our Notion workspace.
4. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Serve the site, security and operation | Legitimate interest (Art. 6(1)(f)) |
| Aggregate, anonymous statistics | Legitimate interest (Art. 6(1)(f)) |
| Respond to demo/contact requests | Pre-contractual measures / handling (Art. 6(1)(b) / 6(1)(f)) |
| Legal obligations, where applicable | Legal obligation (Art. 6(1)(c)) |
5. Cookies
The site uses only strictly-necessary, first-party technical cookies. No profiling, third-party analytics, or advertising cookies. Therefore, under Art. 122 of Italian Legislative Decree 196/2003 and the Garante's guidelines of 10 June 2021, no consent banner is required.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| __cf_bm | Security and bot mitigation (Cloudflare) | ~30 min | Technical |
| __dpl | Routing to the correct site build/version | Session | Technical |
| session-id | Browsing-session management | Session | Technical |
Cookies can be managed/deleted from your browser settings; disabling technical cookies may affect the site's operation.
6. Who we share data with
Data is neither disclosed publicly nor sold. It is processed by the controller's authorised staff and the following Art. 28 GDPR processors:
- Lovable — development, website hosting, aggregate traffic analytics.
- Cloudflare — CDN, security, bot mitigation.
- Google — demo appointment handling (Google Calendar).
- Notion Labs — internal organisation of requests and leads.
Data may be disclosed to competent authorities where required by law.
7. Transfers outside the EU
Some suppliers (Google, Notion, Cloudflare) are US-based or may process data outside the EEA. Such transfers rely on appropriate safeguards under Chapter V GDPR: Standard Contractual Clauses (Implementing Decision (EU) 2021/914) and/or, for certified suppliers, the EU-US Data Privacy Framework.
8. Retention
- Browsing data and technical logs: time strictly necessary for security and diagnostics, in any case no longer than 12 months.
- Aggregate statistics: kept in aggregate, anonymous form.
- Demo and contact: time needed to handle the request and, if a relationship begins, its duration; absent follow-up, deleted within 24 months.
9. Your rights
Under Articles 15–22 GDPR: access, rectification, erasure, restriction, portability, objection. To exercise them: info@getanota.com. You may lodge a complaint with the Italian Garante per la protezione dei dati personali (garanteprivacy.it).
10. Changes
This notice may be updated; the current version is always published on this page with its effective date.