Privacy policy

1. General provisions

UAB “Ateities IT” (hereinafter – the “Company”, “we”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use and safeguard your data when you use our website or contact us.

This Policy applies to individuals who:

• visit our website;
• contact us;
• use our services prior to entering into a contract (e.g., submit an inquiry or request a demo).

By using our website or providing your data, you confirm that you have read this Privacy Policy.

2. Data controller

3. What data we collect

We may collect the following personal data:

3.1. Data you provide:

• name and surname;
• email address;
• phone number;
• company name and related details;
• any other information you provide when contacting us.

3.2. Automatically collected data:

• IP address;
• browser type and device information;
• date and time of visit;
• pages viewed;
• cookie data.

3.3. Data used for advertising conversion measurement:

To evaluate the effectiveness of our advertising campaigns, in certain cases we may transmit information about actions performed on the website to advertising platform providers on the server side, using, for example, the “Meta Conversions API”.

• information about the action performed (e.g., a successful demo or trial account registration);
• the date and time of the action;
• the address of the page where the action was performed;
• a technical unique conversion identifier;
• the email address, hashed using the SHA-256 hashing function before transmission;
• where the relevant consent has been obtained, additional advertising cookie identifiers or technical identifiers of the advertising platform, if used for conversion attribution.

3.4. Google API Services User Data:

Hanna CRM allows users to connect supported Google services, including Gmail, Google Drive, Google Calendar and Google Contacts, in order to provide CRM functionality.

Gmail. When a user connects Gmail, Hanna CRM uses read-only access to retrieve email correspondence associated with CRM contacts. Email sender and recipient information, subject, date, message content and related message data may be processed and stored in Hanna CRM in order to display customer communication history. Hanna CRM does not use Gmail access to send, modify or delete email messages.

Google Drive. When a user connects Google Drive, Hanna CRM may create, read, update and delete only files that the user has created or selected for use with Hanna CRM. These files remain stored in the user's Google Drive and are accessed only to provide file-management functionality requested by the user.

Google Calendar. When enabled by the user, Hanna CRM accesses Google Calendar data to provide calendar and CRM activity integration functionality.

Google Contacts. When enabled by the user, Hanna CRM accesses Google Contacts data to provide contact synchronization and CRM contact management functionality.

Google user data is used solely to provide and improve the user-facing functionality requested by the user. Hanna CRM does not use Google user data for advertising purposes and does not sell Google user data.

Access to Google services can be revoked by the user at any time through their Google Account permissions or by disconnecting the integration in Hanna CRM.

Hanna CRM's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Purposes and legal bases for data processing

We process your personal data for the following purposes:

You have the right to withdraw your consent for marketing purposes at any time.

Where we rely on legitimate interest for server-side advertising conversion measurement, we apply the principle of data minimisation, assess the balance between the Company’s interests and your rights and freedoms, and provide you with the right to object to such processing.

5. Data disclosure

Your data may be shared with:

• our service providers (e.g., IT, hosting, analytics, email service providers);
• Meta Platforms Ireland Limited – when we use “Meta Pixel” and “Meta Conversions API” to measure advertising campaign effectiveness, attribute conversions and optimise advertising campaigns. When using “Meta Conversions API”, information about certain actions performed on the website may be transmitted directly from our servers to Meta;
• law enforcement authorities when required by law;
• other parties if necessary for service provision.

All data processors are required to comply with GDPR requirements.

6. Data transfers outside the EEA

Some of our service providers may be located outside the European Economic Area (EEA). In such cases, we ensure that:

• data is transferred in accordance with Standard Contractual Clauses (SCC) approved by the European Commission; or
• other appropriate safeguards under GDPR are applied.

7. Data retention periods

We retain your data only as long as necessary:

• inquiry data – up to 1 year from the last contact;
• marketing data – until consent is withdrawn;
• analytical data – according to cookie retention periods;
• data related to server-side advertising conversion measurement – only for as long as necessary to transmit the conversion, ensure technical reliability and achieve the stated purposes;
• other data – as required by applicable laws.

8. Data security

We implement appropriate technical and organizational security measures, including:

• data encryption during transmission (HTTPS / TLS);
• access control;
• system monitoring and protection;
• restricted employee access.

However, no system is completely secure, and we cannot guarantee absolute security.

9. Your rights

You have the following rights:

• to be informed about the processing of your data;
• to access your data;
• to request correction of inaccurate data;
• to request deletion of your data (“right to be forgotten”);
• to restrict processing;
• to data portability;
• to object to processing;
• to withdraw consent;
• to lodge a complaint with a supervisory authority.

Where we process your personal data on the basis of legitimate interest, you have the right to object to such processing on grounds relating to your particular situation. Upon receiving such an objection, we will assess it in accordance with applicable legal requirements.

To exercise your rights, including objecting to server-side advertising conversion measurement based on legitimate interest, contact us at: [email protected]

10. Cookies

We use cookies to ensure proper website functionality and improve user experience.

We use the following types of cookies:

• necessary (for website functionality);
• analytical (for usage statistics);
• functional (to remember user preferences);
• advertising (if applicable).

Analytical and advertising cookies, as well as browser-based tracking technologies, including “Meta Pixel”, are activated only after obtaining your relevant consent. If you choose only necessary cookies, “Meta Pixel” is not activated in your browser and advertising cookie identifiers are not used.

In addition to cookies, we may use server-side advertising conversion measurement technologies, such as “Meta Conversions API”. In such cases, information about certain actions performed on the website may be transmitted directly from our server to the advertising platform provider without using advertising cookies on your device. Such server-side conversion measurement may also be carried out when you choose only necessary cookies, where a separate legal basis specified in Section 4 of this Policy applies.

More information about cookies can be found in your browser settings or in our cookie notice.

11. Automated decision-making and AI

In certain cases, we may use automated tools or artificial intelligence (AI) solutions to:

• improve service quality;
• analyze data;
• automate processes.

Such solutions are not used to make legal or similarly significant decisions about you without human involvement.

12. Links to other websites

Our website may contain links to third-party websites. We are not responsible for their privacy practices.

13. Policy updates

We may periodically update this Privacy Policy. The updated version will be published on this website.

14. Contact

If you have any questions regarding this Privacy Policy or the processing of your data, please contact us:

Email: [email protected]