Alandium Home ←

Privacy notice

Updated: 4 July 2026

This privacy notice explains how Alandium OÜ processes personal data. It applies to Alandium’s clients, potential clients, co-operation partners, website users and people whose data is processed in connection with B2B customer acquisition, prospecting, outreach and arranging meetings.

1. Controller

Alandium OÜ
Registry code: 17523222
Address: Tiskrevälja tn 59-12, 13516 Tallinn, Estonia
Data protection email: GDPR@Alandium.EU

2. Why do we process personal data?

Alandium processes personal data for the following purposes:

  • B2B customer acquisition and prospecting
  • mapping potential customers and contact persons
  • carrying out business outreach
  • arranging meetings
  • managing customer relationships
  • delivering the service and reporting to the client
  • replying to enquiries
  • managing contracts, invoicing and accounting
  • developing business operations, service quality and customer communication
  • meeting legal obligations

3. What personal data do we process?

Alandium may process the following personal data:

  • name
  • work role, title or area of responsibility
  • employer or represented organisation
  • company contact details
  • work email address
  • work phone number
  • public professional profile and contact details
  • company and contact-person information from websites and public sources
  • contact history
  • notes relating to outreach, conversations and meetings
  • information on interest, next steps or the fact that contact is not currently relevant
  • meeting information, such as time, participants and subject
  • emails and other business-related communication
  • data needed for invoicing, contracts and accounting

Alandium does not seek to collect special-category personal data, such as health data, religious beliefs, political opinions or other sensitive data.

4. Where does the data come from?

Personal data may come from the following sources:

  • the person themselves
  • a client or co-operation partner
  • companies’ and organisations’ own websites
  • public business registers and other publicly available sources
  • public professional online sources
  • email, phone and calendar communication
  • customer-management and communication systems used by Alandium

5. Legal bases for processing

Legitimate interest

Alandium processes B2B contact-person data on the basis of legitimate interest, for example for customer acquisition, business-to-business communication, arranging meetings and managing customer relationships. The processing primarily concerns data connected to a person’s work role, not private life.

Preparing and performing a contract

Where personal data is processed to prepare or perform a contract with a client, potential client or co-operation partner, the processing may be based on a contract or pre-contractual measures.

Legal obligation

Processing connected with invoicing, accounting, authority requirements and other statutory duties is based on legal obligations.

Consent

If Alandium uses cookies, analytics or marketing features on the website or elsewhere that require consent, the processing is based on consent given by the user.

6. Who may receive the data?

Alandium may disclose or provide access to personal data to the following parties to the extent necessary:

  • Alandium’s clients, where the data relates to B2B customer acquisition, arranging a meeting or service reporting carried out for the client
  • service providers for customer-management, email, calendar and communication systems
  • accounting, legal and advisory service providers
  • authorities, where required by law or an official order
  • other service providers used by Alandium for the technical or administrative running of the business

When Alandium arranges a meeting on behalf of a client, the client receives only the information needed to hold the meeting and report on the service. This may include the contact person’s name, company, work role, contact details, meeting time and necessary meeting notes.

7. Systems used

Alandium processes personal data in systems and services such as:

  • Odoo
  • Thunderbird
  • the company email service
  • company workstations and local files where necessary
  • accounting and administration systems where they contain personal data

The systems are used for customer management, communication, arranging meetings, invoicing, accounting and delivering the service.

8. Is data transferred outside the EU or EEA?

Alandium aims to process personal data primarily within the EU and EEA and to use service providers that process data within the EU and EEA or otherwise in line with GDPR requirements.

Alandium does not intentionally transfer personal data outside the EU or EEA in its own operations.

If a service provider used by Alandium, or its sub-processor, processes personal data outside the EU or EEA, the transfer must be based on a GDPR-compliant transfer mechanism, such as European Commission standard contractual clauses, an adequacy decision or another mechanism permitted by law.

9. How long is data kept?

Personal data is kept only for as long as necessary for the purposes described in this notice or to meet legal obligations.

As a rule:

  • prospect and contact data is kept while the outreach, customer acquisition or possible customer relationship is relevant
  • non-current prospect data is deleted or anonymised within a reasonable time after the last meaningful contact
  • client and contract data is kept during the customer relationship and afterwards for as long as necessary because of rights, obligations, claims or accounting
  • accounting material and invoicing data is kept for the statutory retention period
  • data relating to website enquiries is kept for as long as handling the matter requires

10. Cookies and website technical data

Alandium’s website may use technically necessary cookies and similar technologies to make the website function.

If the website uses analytics, marketing or other non-essential cookies, users are informed about their use and, where necessary, given the possibility to accept or reject them.

The website’s technical systems may process ordinary log data, such as IP address, browser type, visit time and technical data relating to use of the site. This data is used for technical maintenance, information security and investigating possible disruptions.

11. Data subject rights

Under the GDPR, the data subject has the right to:

  • receive information about the processing of their personal data
  • request access to their personal data
  • request correction of inaccurate data
  • request deletion of data
  • request restriction of processing
  • object to processing where it is based on legitimate interest
  • withdraw consent where processing is based on consent
  • lodge a complaint with a supervisory authority

Not all rights apply in every situation. For example, statutory accounting obligations may prevent deletion before the statutory retention period has ended.

Requests concerning rights may be sent to: GDPR@Alandium.EU

12. Right to lodge a complaint

The data subject has the right to lodge a complaint with a competent data protection authority if they believe their personal data has been processed in breach of data protection law.

As Alandium OÜ is registered in Estonia, the primary data protection authority is the Estonian Data Protection Inspectorate. The data subject may also contact the data protection authority in their country of residence.

13. Changes to this notice

Alandium may update this privacy notice if its operations, systems, personal-data processing or the law changes. The current version is kept available on Alandium’s website.