Legal
Privacy Policy
Last updated: 7 October 2026
1. Data controller
The controller of data collected through this site is aNota S.r.l., registered office at Via Marconi 45, 40122 Bologna, Italy. For any request: info@getanota.com.
2. What this notice covers
It concerns only data processed when you browse getanota.com, request a demo, or contact the team; for this data aNota is the controller. Clinical and operational data processed inside the aNota product (voice recordings, transcripts, handovers, resident data) is not covered here: in that context the client facility is the controller and aNota is the processor under Art. 28 GDPR, per the DPA signed with each client.
3. What data we process
- Browsing data: IP address, browser/device type, operating system, pages visited, date and time, approximate location (country level, inferred from IP), diagnostics.
- Aggregate statistics: traffic measured in aggregate, anonymous form via the analytics built into our hosting platform (Lovable). No profiling cookies, no cross-site tracking, no individual profiles.
- Optional analytics: with consent, Microsoft Clarity collects page interactions, heatmaps and session recordings to improve the site. Sharing with Microsoft Ads is disabled.
- Demo requests and contact: data you provide via the Google Calendar appointment link or by email (name, email, any message), managed in our Notion workspace.
4. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Serve the site, security and operation | Legitimate interest (Art. 6(1)(f)) |
| Behavior analytics with Microsoft Clarity | Consent (Art. 6(1)(a)) |
| Aggregate, anonymous statistics | Legitimate interest (Art. 6(1)(f)) |
| Respond to demo/contact requests | Pre-contractual measures / handling (Art. 6(1)(b) / 6(1)(f)) |
| Legal obligations, where applicable | Legal obligation (Art. 6(1)(c)) |
5. Cookies
The site uses technical cookies and, only after your consent, Microsoft Clarity analytics cookies. Clarity is not loaded before acceptance. You can decline or withdraw consent using the Cookie preferences button. Your choice is stored on your device for 180 days.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| _clck / _clsk | Clarity analytics, only with consent | Per Clarity settings | Optional analytics |
| __cf_bm | Security and bot mitigation (Cloudflare) | ~30 min | Technical |
| __dpl | Routing to the correct site build/version | Session | Technical |
| session-id | Browsing-session management | Session | Technical |
Cookies can be managed/deleted from your browser settings; disabling technical cookies may affect the site's operation.
6. Who we share data with
Data is neither disclosed publicly nor sold. It is processed by the controller's authorised staff and the following Art. 28 GDPR processors:
- Lovable — development, website hosting, aggregate traffic analytics.
- Cloudflare — CDN, security, bot mitigation.
- Microsoft Clarity — optional interaction analytics, heatmaps and session recordings.
- Google — demo appointment handling (Google Calendar).
- Notion Labs — internal organisation of requests and leads.
Data may be disclosed to competent authorities where required by law.
7. Transfers outside the EU
Some suppliers (Google, Notion, Cloudflare, Microsoft) are US-based or may process data outside the EEA. Such transfers rely on appropriate safeguards under Chapter V GDPR: Standard Contractual Clauses (Implementing Decision (EU) 2021/914) and/or, for certified suppliers, the EU-US Data Privacy Framework.
8. Retention
- Browsing data and technical logs: time strictly necessary for security and diagnostics, in any case no longer than 12 months.
- Aggregate statistics: kept in aggregate, anonymous form.
- Demo and contact: time needed to handle the request and, if a relationship begins, its duration; absent follow-up, deleted within 24 months.
9. Your rights
Under Articles 15–22 GDPR: access, rectification, erasure, restriction, portability, objection. To exercise them: info@getanota.com. You may lodge a complaint with the Italian Garante per la protezione dei dati personali (garanteprivacy.it).
10. Changes
This notice may be updated; the current version is always published on this page with its effective date.