1. Who is responsible
ATENEA [legal entity and address to be completed] is the controller of the personal data described here. Contact: [contact email to be completed].
2. Data we collect
Account data
Your email address, optional display name, organisation name and password. Passwords are stored only as a salted hash; we cannot read them.
Shipment and customer data
What you enter or upload to run analyses and keep records: ports, dates, products, packaging, container and loading conditions, protective measures, notes, photos attached to records, and data-logger files and readings. This is business data; avoid including personal data of other people in free-text notes or photos.
Launch waitlist
If you leave your email (and optionally your company) on our pre-launch page, we store it, with the language and date, only to tell you when ATENEA is ready. We keep a hash of your IP address, not the address itself, to limit abuse. Write to us and we will delete it.
Technical data
- Session and security cookies, and an anonymous ownership cookie (see the Cookie Policy). For the anonymous cookie we store only a cryptographic hash of its value.
- Server logs (IP address, date, requested page, browser type) kept for security and troubleshooting. Login attempts are rate-limited using the IP address.
- Your language preference, kept in your own browser (local storage), not on our server.
3. Why we use it
| Purpose | Data | Basis |
|---|---|---|
| Provide the Service: run analyses, save results, records and logger comparisons | Account, shipment and customer data | Performance of our contract with you |
| Keep accounts and the Service secure, prevent abuse | Account and technical data | Legitimate interest |
| Support and service messages (e.g. account notices) | Email, account data | Contract / legitimate interest |
| Calibrate and improve the risk models | Aggregated, de-identified shipment data | Legitimate interest |
| Billing, once online payment is available | Account and billing details | Contract and legal obligations |
We do not sell personal data, do not show advertising and do not use third-party analytics or advertising trackers.
4. Where data is stored and who receives it
Data is stored on servers operated by ATENEA with a cloud infrastructure provider [provider and region to be completed]. Fonts, maps and climate data are served from our own server; running an analysis does not call external services.
We plan to use a transactional email provider to send account emails (such as verification or password reset), and a payment processor once online billing starts; they will receive only the data needed for that purpose under data processing terms. We may disclose data if required by law. Records you choose to share are visible to anyone with the link.
If data is transferred outside your country, we use appropriate safeguards required by applicable law.
5. How long we keep it
- Account and customer data: while your account is active, and deleted or anonymised within a reasonable period after you close it, unless the law requires longer.
- Analyses run without an account: kept so the link keeps working; they can be claimed into an account from the same browser.
- Server logs: for a limited period for security purposes [retention period to be completed].
6. Security
We use encrypted connections (HTTPS), hashed passwords, HttpOnly session cookies, CSRF protection and rate limiting. Sealed records carry a SHA-256 fingerprint so changes can be detected. No system is perfectly secure; tell us promptly if you suspect a problem.
7. Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict certain processing, and to complain to a data protection authority. To exercise them, write to us at the contact above. You can change your name and password from My account at any time.
8. Children
The Service is for business use and not directed at children under 18.
9. Changes
We will post updates to this policy here and notify account holders of material changes.