Privacy Policy

Data controller

The controller responsible for the processing described here is:

QI Investment S.à r.l.
Luxembourg
Email: hello@altdataatlas.com

For any question about this policy or about your personal data, contact us at the address above. The site's legal identity details are also in the Imprint.

What data we process

We deliberately keep this to the minimum that operating a website on the public internet requires:

Server access data. When your browser requests a page, our hosting provider automatically processes technical connection data — your IP address, the requested URL, referrer, timestamp, and your browser and operating-system identifiers (user agent). This is inherent to how the web works and is used to deliver the pages, keep the service secure and available, and defend against abuse.

Cookieless usage analytics. We measure aggregate traffic with Vercel Web Analytics. It sets no cookies, does not fingerprint you, does not build a personal profile, and does not track you across other websites. It records anonymised, aggregate events only — for example a page view, an outbound click on a provider's link, or a briefing download — so we can understand which parts of the directory are useful. These events are not linked to your identity and cannot be traced back to you.

We do not use advertising cookies, we run no consent banner because none is required for this cookieless setup, and we operate no database, no user accounts, and no contact or signup forms. If you choose to email us, we process the contents of your message solely to reply to you.

Legal basis

We process the data above on the basis of our legitimate interests under Article 6(1)(f) GDPR — namely to operate a secure, stable website and to understand, in aggregate, how the reference directory is used. Because analytics are cookieless and no personal profile is created, this processing is minimal and does not override your rights and freedoms. Where you contact us by email, the legal basis is our legitimate interest in responding to your enquiry.

Processors and international transfers

We use a single external processor:

Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA) hosts the site and provides the cookieless Vercel Web Analytics described above. Vercel therefore processes the server access data and the anonymised analytics events on our behalf.

Vercel Inc. is based in the United States, so this processing may involve a transfer of data outside the European Economic Area. Such transfers are safeguarded by the European Commission's Standard Contractual Clauses (SCC); Vercel additionally participates in the EU-U.S. Data Privacy Framework (DPF). We use no other analytics, advertising, tag-management, email-marketing, or tracking services.

Retention

Server access data is retained only as long as needed for security and operational diagnostics and is then deleted or anonymised, as a rule within a few weeks. Aggregate, cookieless analytics contain no personal identifiers and are kept in anonymised, aggregate form. Any email correspondence is kept only for as long as needed to handle your request and to meet any applicable legal retention obligations.

Your rights

Under the GDPR you have the right to request access to your personal data; to have inaccurate data rectified; to have your data erased; to restrict or object to its processing (including objecting to processing based on legitimate interests); and to data portability. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal. To exercise any of these rights, contact us at hello@altdataatlas.com.

You also have the right to lodge a complaint with a data-protection supervisory authority. In Luxembourg this is the Commission nationale pour la protection des données (CNPD); you may equally contact the supervisory authority in your own country of residence or place of the alleged infringement.

Changes to this policy

We may update this policy to reflect changes in the site or in the law. The current version is always the one published here, with the date of the last update shown at the top.