GDPR Compliance & Data Subject Rights

How Alta Ignite fulfils its obligations as controller and processor under the GDPR, and how to exercise your data subject rights, wherever in the world you are located.

Version in force · Last updated 6 February 2026

1. Scope and our roles

1.1 This page explains how Alta Ignite B.V. complies with Regulation (EU) 2016/679 (the "GDPR") in respect of personal data we handle as part of operating altaignite.com and delivering our unlimited website subscription service worldwide.
1.2 We act as data controller for personal data of our own website visitors, prospects, subscribers and billing contacts. We act as data processor, under a data processing agreement available on request, for personal data that clients collect through the websites, forms and mailboxes we design, host or manage on their behalf (Article 28 GDPR).
1.3 Where we act as processor, instructions from the client controller govern our processing, and this page supplements rather than replaces the applicable data processing agreement.

2. Legal bases for processing

2.1 We rely on performance of a contract (Article 6(1)(b)) to process account, billing and support data necessary to deliver the subscription.
2.2 We rely on legitimate interests (Article 6(1)(f)) for fraud prevention, service security, and product analytics, balanced against your rights as documented in our legitimate interests assessment.
2.3 We rely on consent (Article 6(1)(a)) for non-essential cookies and marketing email, which you may withdraw at any time without affecting the lawfulness of prior processing.
2.4 We rely on legal obligation (Article 6(1)(c)) for Dutch and EU tax, accounting and VAT record-keeping requirements.

3. Right of access (Article 15)

3.1 You may request confirmation of whether we process your personal data and obtain a copy of that data together with the information listed in Article 15(1).
3.2 Submit access requests to privacy@altaignite.com. We provide the first copy free of charge; further copies may incur a reasonable administrative fee reflecting our costs.

4. Right to rectification (Article 16)

4.1 You may ask us to correct inaccurate personal data or complete incomplete data. Account holders can update most billing and profile information directly from the client dashboard; other corrections should be sent to privacy@altaignite.com.

5. Right to erasure (Article 17)

5.1 You may request deletion of your personal data where it is no longer necessary for the purposes collected, where consent is withdrawn and no other legal basis applies, or where you object and no overriding legitimate ground exists.
5.2 We may retain data notwithstanding an erasure request where required for compliance with a legal obligation (including Dutch tax retention periods of up to seven years), the establishment or defence of legal claims, or ongoing contractual obligations under an active subscription.

6. Right to restriction of processing (Article 18)

6.1 You may request that we restrict processing of your data while we verify its accuracy, assess an objection, or in lieu of erasure where you need the data for a legal claim.

7. Right to data portability (Article 20)

7.1 Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, commonly used, machine-readable format, and, where technically feasible, ask us to transmit it directly to another controller.

8. Right to object (Article 21)

8.1 You may object at any time to processing based on legitimate interests, including profiling, on grounds relating to your particular situation, and to processing for direct marketing purposes at any time without needing to give a reason.

9. Rights related to automated decision-making (Article 22)

9.1 We do not subject data subjects to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects, in the ordinary operation of our subscription service.

10. How to exercise your rights and our response commitment

10.1 Submit requests under Articles 15–22 to privacy@altaignite.com. We will respond without undue delay and, in any event, within one month of receipt, as required by Article 12(3) GDPR.
10.2 That period may be extended by a further two months where necessary, taking into account the complexity and number of requests; we will inform you of any extension and the reasons for the delay within the first month.
10.3 We may request additional information reasonably necessary to confirm your identity before acting on a request, to prevent unauthorised disclosure of personal data.
10.4 Where a request is manifestly unfounded or excessive, in particular because of its repetitive character, we may charge a reasonable administrative fee or refuse to act on the request, and we will explain our reasoning in writing.

11. International data transfers

11.1 Alta Ignite is established in the Netherlands and primarily processes data within the European Economic Area. Where personal data is transferred outside the EEA, for example to hosting or email infrastructure sub-processors, we rely on the European Commission's Standard Contractual Clauses (2021/914), adequacy decisions, or equivalent safeguards under Chapter V GDPR.
11.2 A current list of sub-processors and their processing locations is available on request from privacy@altaignite.com.

12. Records of processing and security

12.1 We maintain records of processing activities as required by Article 30 GDPR and apply technical and organisational measures including encryption in transit, access controls, and staff confidentiality obligations under Article 32.

13. Data Protection Officer and breach notification

13.1 Data protection queries and requests to exercise your rights should be directed to our privacy team at privacy@altaignite.com, which functions as our designated point of contact for data protection matters.
13.2 In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the Dutch Autoriteit Persoonsgegevens within 72 hours of becoming aware of the breach in accordance with Article 33, and will communicate the breach to affected individuals without undue delay where Article 34 requires it.

14. Complaints to a supervisory authority (Article 77)

14.1 Without prejudice to any other remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or the place of the alleged infringement.
14.2 Our lead supervisory authority is the Dutch Autoriteit Persoonsgegevens (Bezuidenhoutseweg 30, 2594 AV The Hague, the Netherlands, autoriteitpersoonsgegevens.nl).

15. UK GDPR addendum

15.1 For personal data of individuals in the United Kingdom, we comply with the UK GDPR and the Data Protection Act 2018 as if references to the GDPR in this page were references to the UK GDPR, and you may lodge complaints with the UK Information Commissioner's Office (ICO).

16. Swiss FADP addendum

16.1 For personal data of individuals in Switzerland, we comply with the revised Federal Act on Data Protection (FADP) and, where applicable, extend equivalent rights of access, rectification and erasure, with complaints directed to the Federal Data Protection and Information Commissioner (FDPIC).

17. CCPA/CPRA notice for California residents

17.1 California residents have rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), including the right to know, delete, correct, and opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights.
17.2 Alta Ignite does not sell or share personal information as those terms are defined under the CCPA/CPRA. California residents may exercise their rights by contacting privacy@altaignite.com; we will verify your request and respond within 45 days, extendable by a further 45 days where reasonably necessary.

18. Changes to this notice

18.1 We may update this page to reflect changes in law or our processing activities. Material changes will be notified to active subscribers by email at least 14 days before taking effect.

Data protection requests and complaints: privacy@altaignite.com — Alta Ignite B.V., Keizersgracht 391, 1016 EJ Amsterdam, the Netherlands.