Legal

Privacy policy

This policy explains what data we collect when you use the altstart.studio website, why we collect it, how we use it, and what choices you have.

1. Who we are and how to contact us

The altstart.studio site is operated by:

  • Name: Altstart Studio SRL
  • Tax ID (CUI, Romania only): 52285628
  • VAT (EU / VIES): RO52412772
  • Email for personal data matters: office@altstart.studio

Altstart Studio SRL is a data controller under Regulation (EU) 2016/679 (GDPR) for the activities described in this policy.

2. What data we collect

2.1. Data you provide directly

When you contact us through forms on the site, LinkedIn, or by email, we may collect:

  • first and last name
  • email address
  • phone number (if you choose to share it)
  • job title and company
  • the message you send and any other details you include
  • any attached files or additional information shared voluntarily

2.2. Data collected through assessment tools and questionnaires

When you use one of our online assessment tools (for example, Pricing Pulse or other self-assessment questionnaires), we may collect:

  • email address (which you provide at the start of the assessment)
  • your answers to the assessment questions
  • scores and results calculated from your answers
  • your progress in the assessment (so you can resume where you left off)

This data is used solely to deliver your assessment results, allow you to resume the assessment, and, if the assessment was not completed, to send a single reminder. It is not used for marketing and does not subscribe you to any communication list.

2.3. Data collected through LinkedIn Lead Gen and other forms

If you interact with us through LinkedIn Lead Gen forms or other external forms, we may receive:

  • name, email address, phone number
  • job title, company, industry, seniority level
  • professional location (city, country), if available
  • any other information LinkedIn includes by default in the form

2.4. Data collected automatically through analytics tools and infrastructure services

We use privacy-focused analytics tools (for example, Umami Analytics) and infrastructure services (for example, Cloudflare Pages). These can collect, in aggregated form and without identifying you directly:

  • pages visited and visit duration
  • time and date of access
  • device type and browser
  • operating system
  • referrer (for example, if you came from LinkedIn)
  • approximate location at country or city level

The analytics tools are not used to build individual profiles, and we do not attempt to identify you as a person based on this data.

3. Why we use the data and on what legal basis

3.1. To respond to your messages and requests

We use your contact details and message to:

  • answer your questions
  • schedule an introductory or consulting conversation
  • clarify details about potential collaborations or projects

Legal basis: art. 6(1)(b) GDPR (pre-contractual measures) and art. 6(1)(f) GDPR (legitimate interest in communicating with potential clients and partners).

3.2. For tracking opportunities and client relationships

We may store your data in internal tools (e.g. ERP, CRM) to:

  • track conversations and agreed next steps
  • follow up later with proposals relevant to your context
  • manage the pipeline of clients and partners

Legal basis: art. 6(1)(f) GDPR (legitimate interest in managing relationships with clients and prospects).

3.3. To deliver assessment tool results

When you complete an assessment tool (for example, Pricing Pulse), we use your email address to:

  • send you the assessment results (full or partial, if you didn't finish)
  • generate a unique link through which you can return to your results or resume the assessment
  • send a single reminder email if the assessment wasn't completed (3 days after your last activity)

We don't send other communications based on this data. Assessment data is stored on Cloudflare servers (in the EU or US, in line with Cloudflare's policy) and can be deleted on request.

Legal basis: art. 6(1)(b) GDPR (performance of the service you requested by completing the assessment).

3.4. For newsletter or curated update communications

If you explicitly choose to receive communications from us (for example, by subscribing to an email list), we may send you:

  • articles, resources, or perspectives relevant to entrepreneurship and business transformation
  • updates about altstart's services or events we participate in

Legal basis: art. 6(1)(a) GDPR (consent). You can unsubscribe at any time via the link included in the email or by sending a message to hello@altstart.studio.

3.5. For analysis and site improvement

We use the aggregated data provided by analytics tools and the technical logs from infrastructure to:

  • understand how the site is used
  • prioritize content and improvements
  • detect and prevent abuse or attack attempts

Legal basis: art. 6(1)(f) GDPR (legitimate interest in securing and optimizing the site).

4. Cookies and analytics tools

The site uses analytics tools that are privacy-focused. In the current configuration:

  • we don't use tracking cookies for analytics
  • we don't collect or store your full IP address in a form that allows direct identification
  • we don't perform individual profiling and we don't track users across different sites

Infrastructure providers, such as Cloudflare, may use strictly necessary cookies for site operation and security (for example, anti-abuse protection).

If you click on external links (for example LinkedIn), those platforms apply their own cookie and privacy policies.

5. How long we keep data

We keep your personal data for as long as:

  • we have a legitimate reason to use it (for example, an ongoing conversation or potential opportunity)
  • you haven't asked us to delete it

In practice, contact data and conversation history may be kept indefinitely in our working tools, until you ask for deletion or until we decide we no longer need them for the purposes described here.

Aggregated analytics data may be kept for the long term, but it doesn't allow direct identification.

Pricing Pulse: The email address provided for the Pricing Pulse assessment is kept for a maximum of 6 months after the assessment is completed. After that period, the email address is automatically replaced with an irreversible anonymous identifier (a cryptographic hash). Answers and scores are kept in anonymized form for statistical analysis, but they can no longer be associated with an identifiable person.

6. Who we share your data with

We don't sell your personal data and we don't pass it to third parties for independent marketing purposes.

We may, however, use service providers that help us operate, such as:

  • Google Workspace (Gmail, Drive) for email and document storage
  • Analytics tools for site usage statistics
  • Cloudflare Pages, Workers, and KV for hosting, caching, security, processing and storing data from assessment tools, and sending transactional emails
  • LinkedIn, when you use their forms or reach us through campaigns or Lead Gen forms
  • Internal SaaS tools (ERP or CRM) for managing client relationships

These providers act as processors or independent controllers, in line with their own policies.

7. Where data is stored

Data may be stored within the European Union or outside it, depending on the infrastructure of the providers we use (for example servers operated by Google, Cloudflare, or other cloud services).

When data is transferred outside the EU, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission or other mechanisms recognized by GDPR.

8. Your rights

Under GDPR, you have the following rights regarding your personal data:

  • Right of access - to find out whether we process your data and what data we hold
  • Right to rectification - to ask for correction of inaccurate data or completion of incomplete data
  • Right to erasure - to ask for deletion of data in certain situations
  • Right to restriction - to ask for restriction of processing under certain conditions
  • Right to portability - to receive the data in a structured format and, where technically possible, to transmit it to another controller
  • Right to object - to object to processing based on legitimate interest or to direct marketing communications
  • Right to withdraw consent - when processing is based on consent, you can withdraw it at any time

To exercise these rights, you can write to office@altstart.studio. We typically respond within 30 days.

9. Right to lodge a complaint

If you consider that your rights have been infringed, you can lodge a complaint with the supervisory authority:

  • Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
  • Website: www.dataprotection.ro

Before reaching out to the authority, we encourage you to contact us first so we can try to resolve the matter directly.

10. Updates to this policy

We may update this policy from time to time, for example if we change how we use data or if there are legislative changes. The current version will always be available on this page.

Last updated: April 2026.