Last updated: March 2026
This Privacy Policy (the “Policy”) describes how Altegio Limited (“Altegio”, “we”), acting as the controller of personal data, collects, uses and processes personal data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, GDPR).
USER CONSENT
Where required by applicable law, by ticking the “I agree” box and accepting this Privacy Policy, you (the “User”) give your freely given, specific, informed and unambiguous consent to the processing of your personal data for the purposes and on the terms set out in this Policy.
- TERMS AND DEFINITIONS
For the purposes of this Policy, the following terms have the meanings set out below:
“Agreement” means any agreement governing the use of the Platform and/or the Products, including, without limitation, the Terms of Service available at: https://alteg.io/en/info/terms, the License Agreement available at: https://alteg.io/en/info/license, the End User License Agreement for the Mobile Application, and any other agreements concluded between Altegio and the User where their terms expressly so provide.
“Platform” means the Altegio software platform, including the websites www.altegio.com and alteg.io (and their subdomains), mobile applications, software products and related databases intended for online booking and the automation of business processes.
“Products” means the software solutions and databases provided as part of the Platform’s functionality and made available to Users under separate license agreements.
“Mobile Application” means the Altegio software application intended for installation and use on mobile devices.
“User” means any natural or legal person that has concluded an Agreement with Altegio.
“Client” means any third party interacting with the User through the Platform, including by booking services or purchasing goods.
- GENERAL PROVISIONS
This Privacy Policy forms an integral part of the Agreement and of any other agreements between Altegio and the User that expressly refer to it. By registering on the websites www.altegio.com or alteg.io, or by accessing or using the Platform, the User confirms that they have read and understood this Policy.
For the purposes of this Policy, “processing” of personal data means any operation or set of operations performed on personal data, whether or not by automated means, including collection, recording, organisation, structuring, storage, adaptation, retrieval, use, disclosure, transfer (including cross-border transfer), anonymisation, restriction, erasure or destruction.
Unless otherwise provided in this Policy, the terms used in it have the meanings given to them in the Agreement or in other applicable agreements between Altegio and the User. Terms not defined in those documents shall be interpreted in accordance with applicable law.
- PERSONAL DATA
For the purposes of this Policy, “personal data” means any information relating to an identified or identifiable natural person, whether directly or indirectly.
3.1. CATEGORIES OF PERSONAL DATA
Altegio may collect and process the following categories of personal data:
- information provided by the User during registration, authentication or use of the Platform, including name, business email address, phone number and company name; • profile information voluntarily provided by the User, such as job title or role in the company; • technical and usage data collected automatically, including IP address, device information, browser type and interactions with the Platform; • information submitted through feedback forms, including name, phone number and email address; • communication data, including support requests, callback requests and newsletter subscriptions.
Altegio may determine which data fields are mandatory for access to the Platform. Where data is not marked as mandatory, its provision is at the User’s discretion.
3.2. AUTHENTICATION THROUGH THIRD-PARTY SERVICES
Users may register or log in using third-party authentication services (for example, Facebook).
In such cases, Altegio may receive personal data from the relevant providers in accordance with their privacy policies, including user identifiers and profile data.
3.3. DATA RELATING TO LEGAL ENTITIES
Where the User acts on behalf of a legal entity, Altegio may process information relating to that legal entity (for example, company name, registration number, contact details and business information).
Such information may constitute personal data to the extent that it relates to an identifiable natural person.
3.4. PUBLICLY AVAILABLE INFORMATION
The User may make certain profile information publicly available through the Platform. Any information disclosed in this way becomes accessible to other users or to an unlimited number of persons, depending on the User’s settings.
3.5. RESPONSIBILITY FOR THIRD-PARTY DATA
The User represents and warrants that any personal data provided to Altegio has been collected and transferred in accordance with applicable data protection law, including obtaining all necessary consents from the data subjects.
3.6. LOG DATA AND PLATFORM USAGE
Altegio collects and stores information about the User’s activity on the Platform, including by means of log files.
Where such activity is associated with a registered account, it may be linked to the User’s profile.
3.7. USE OF THIRD-PARTY SERVICES
The Platform may integrate third-party services for analytics, infrastructure and advertising purposes, including, in particular, Google Analytics, Facebook, Cloudflare and Microsoft Power BI.
Such providers may process certain technical and usage data in accordance with their own privacy policies.
3.8. COOKIES AND SIMILAR TECHNOLOGIES
The Platform uses cookies and similar technologies to ensure its proper operation, analyse usage and improve the user experience.
Cookies are small text files stored on the user’s device that contain information about their activity on the Internet.
The User can manage cookie settings through their browser settings; however, disabling certain cookies may affect the functionality of the Platform.
Further information is available in our Cookie Policy.
- LEGAL BASES FOR PROCESSING PERSONAL DATA
Altegio processes personal data on the applicable legal bases provided for by Regulation (EU) 2016/679 (GDPR), including:
- consent (Article 6(1)(a) GDPR) — where the User has given explicit and unambiguous consent to the processing of personal data for one or more specific purposes;
- performance of a contract (Article 6(1)(b) GDPR) — where processing is necessary for the performance of a contract to which the User is a party, or in order to take steps at the User’s request prior to entering into such a contract;
- compliance with legal obligations (Article 6(1)(c) GDPR) — where processing is necessary for Altegio to comply with applicable laws and regulations;
- legitimate interests (Article 6(1)(f) GDPR) — where processing is necessary for the purposes of Altegio’s legitimate interests, including improving the Platform, ensuring security, preventing fraud and maintaining operational activities, provided that such interests are not overridden by the rights and freedoms of the User.
- CHILDREN
The Platform is not intended for persons under the age of 16, and Altegio does not knowingly collect or process the personal data of such persons. If Altegio becomes aware that personal data of a person under 16 has been collected, such data shall be deleted without undue delay.
If you become aware that a person under 16 has provided Altegio with their personal data, please contact us using the contact details below.
- PURPOSES OF PROCESSING PERSONAL DATA
Altegio processes personal data for the following purposes:
- concluding and performing agreements with the User, including providing access to and use of the Platform; • managing User accounts and profiles, including storing, organising and displaying information on the Platform in accordance with the User’s settings; • identifying and authenticating Users in connection with the provision of services; • communicating with Users, including providing support, handling requests and sending notifications related to the use of the Platform; • improving, maintaining and developing the Platform, including carrying out analytical and statistical research; • ensuring the security of the Platform, preventing fraud and protecting Altegio’s legitimate interests; • sending marketing and informational materials where provided for by applicable law or on the basis of the User’s consent.
- RIGHTS OF THE DATA SUBJECT
In accordance with applicable data protection law, including the GDPR, the User has the following rights:
- right of access — to obtain confirmation as to whether personal data is being processed and access to such data; • right to rectification — to request the correction of inaccurate or incomplete personal data; • right to erasure — to request the deletion of personal data where there are no lawful grounds for its further processing; • right to restriction of processing — to request the restriction of processing in certain cases, including where the accuracy of the data is contested or the processing is unlawful; • right to object — to object to processing based on legitimate interests and to processing for direct marketing purposes; • right to data portability — to receive personal data in a structured, commonly used and machine-readable format and to transmit it to another controller; • right to withdraw consent — to withdraw previously given consent at any time, without affecting the lawfulness of processing carried out before its withdrawal; • right not to be subject to automated decision-making — including profiling, where such decisions produce legal effects or otherwise significantly affect the User, except in cases provided for by law.
The User may exercise these rights by contacting Altegio using the contact details set out in this Policy.
Altegio handles such requests in accordance with applicable law and may request additional information to verify the identity of the requester.
If the User believes that their rights have been infringed, they may lodge a complaint with the competent supervisory authority.
- RETENTION OF PERSONAL DATA
Altegio retains personal data for no longer than is necessary to achieve the purposes for which it was collected, including the performance of contractual obligations, compliance with legal requirements and the establishment, exercise or defence of legal claims.
Personal data may be retained for a longer period where this is required or permitted by applicable law.
Altegio periodically reviews the data it processes and deletes or anonymises personal data that is no longer necessary for the purposes for which it was collected.
- SECURITY OF PERSONAL DATA
Altegio implements appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including protecting personal data against unauthorised or unlawful processing and against accidental loss, destruction or damage.
Personal data is treated as confidential and is accessible only to authorised employees and service providers who need such access for the purposes set out in this Policy. Where the User makes certain information publicly available through the Platform, such information may be accessible to other users or to an unlimited number of persons in accordance with the User’s settings.
- TRANSFER AND DISCLOSURE OF PERSONAL DATA
Altegio may disclose personal data to third parties where this is necessary for the purposes set out in this Policy and in accordance with applicable data protection law.
Such transfers may include:
- service providers and contractors that support the operation of the Platform (including hosting, analytics services, payment processing and technical infrastructure), acting on behalf of Altegio; • affiliated companies of the Altegio group, for internal administrative and operational purposes; • competent public authorities, courts or regulators, where disclosure is required under applicable law or legal proceedings; • third parties in the context of corporate transactions, including a merger, acquisition, reorganisation or sale of assets, subject to appropriate data protection safeguards; • third parties, where necessary to establish, exercise or defend legal claims or to protect Altegio’s legitimate interests.
All third parties are required to process personal data in accordance with applicable data protection law and on the basis of appropriate contractual safeguards.
- CROSS-BORDER TRANSFERS OF PERSONAL DATA
Where personal data is transferred outside the European Economic Area (EEA), Altegio ensures that appropriate safeguards are applied in accordance with the GDPR, including:
- the Standard Contractual Clauses (SCCs) approved by the European Commission; • transfers to countries covered by an adequacy decision; • other lawful data transfer mechanisms provided for by applicable law.
- ACCOUNT MANAGEMENT AND DATA CONTROL
The User may at any time access their personal data and update or correct it through the account settings on the Platform.
The User may also request the deletion of their account or exercise other data protection rights by contacting Altegio using the contact details set out in this Policy.
Altegio handles such requests in accordance with applicable data protection law and may request additional information to verify the User’s identity before taking the relevant action.
- PROCESSING OF THE USER’S CLIENT DATA
In the course of providing the Platform, Altegio may process personal data of the User’s clients (“Client Data”).
For the purposes of such processing:
- the User acts as the controller of personal data; • Altegio acts as the processor of personal data.
Altegio processes Client Data solely on behalf of the User and in accordance with the User’s documented instructions, for the purpose of providing the Platform and related services.
Client Data may include:
- identification and contact data (for example, name, phone number, email address); • information about requested or purchased services or goods; • technical data (for example, IP address, device identifiers, browser and operating system information); • usage data relating to interactions with the Platform.
Altegio processes Client Data only to the extent necessary to provide the Platform and does not use such data for its own independent purposes.
Altegio may transfer Client Data to its sub-processors (including hosting and infrastructure providers) solely for the purpose of ensuring the operation of the Platform and subject to appropriate data protection measures.
Client Data may also be disclosed where required by applicable law or in response to lawful requests from public authorities.
Client Data is retained for as long as the User uses the Platform, unless otherwise required by applicable law or agreed with the User.
- CHANGES TO THIS POLICY
Altegio may amend this Privacy Policy from time to time in response to changes in legislation, regulatory guidance or the way personal data is processed.
The updated version of the Policy is published on the Platform and takes effect upon publication, unless otherwise provided in that version.
Where required by applicable law, Altegio takes reasonable steps to notify Users of material changes.
The current version of the Policy is available at: https://alteg.io/en/info/privacy.
- CONTACT DETAILS
Altegio Limited
Registered address: Ioanni Stylianou 6, 2nd floor, Office 202, 2003 Nicosia, Cyprus
Phone: +357 22 030868
Registration number: HE 434056
Email: [email protected]
For any questions relating to this Privacy Policy or the processing of personal data, you can contact Altegio using the contact details above.
Where one has been appointed, you may also contact our Data Protection Officer (DPO) at: [email protected]