Privacy notice
Pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR). In force from 29 October 2026.
This notice explains how Line2LEAD processes the personal data of people who visit line2lead.com, contact us, book a call, attend events and courses, request our services or join the partner programme.
1. Data controller
The data controller is Line2LEAD S.r.l., with registered office at Via Santa Fumia 99, 00134 Rome, Italy, VAT no. 17557151002 (the "Controller"). For any privacy request you can write to: admin@line2lead.com
2. What data we collect
- Browsing data: IP address, browser and device type, pages visited, date and time, collected automatically by the systems that run the website.
- Contact data: first and last name, email, phone, company and role, which you provide through the contact form, call booking, chat, WhatsApp or email.
- Service data: information about the company and its activities that you share with us for consulting, MirrorCheck, the subscription marketing manager service and training.
- Event and course data: registration and attendance data for events, webinars and training courses.
- Contract and billing data: company name, VAT number, tax code, address, billing details and, for online purchases, order data. Payments are made by bank transfer or through ROX Pay: we do not receive or store your full card details.
- Partner programme: contact and company details of those who join the programme.
- Business contact data of companies: company name, business email address and phone number, sector and geographical area, which we may obtain from the database provider Bancomail to offer our services to other companies.
- Email and SMS communications: newsletter subscription, preferences expressed and, if you have consented, interactions with our emails, as described in the privacy notice on the tracking of email communications.
Providing the data needed to answer requests and provide our services is mandatory: without it we cannot proceed. Other data is optional.
3. Why we process data, on what basis and for how long
| Purpose | Legal basis | Retention |
|---|---|---|
| Responding to contact requests and organising calls | Pre-contractual measures at your request (Art. 6.1.b GDPR) | 24 months from the last contact |
| Providing consulting, MirrorCheck, the subscription marketing manager service and training | Performance of the contract (Art. 6.1.b GDPR) | For the duration of the relationship and then 24 months |
| Managing registration and attendance for events and courses | Performance of the contract (Art. 6.1.b GDPR) | 24 months from the event or course |
| Issuing invoices and complying with tax and accounting obligations | Legal obligation (Art. 6.1.c GDPR) | 10 years |
| Managing the partner programme | Performance of the contract (Art. 6.1.b GDPR) | For the duration of the partnership and then 10 years for accounting data |
| Sending newsletters, event invitations and offers | Consent (Art. 6.1.a GDPR); for customers, offers on similar services without consent, with the right to object at any time (Art. 130(4), Italian Privacy Code) | Until consent is withdrawn or you object |
| Offering our services to companies whose business contact details are obtained from Bancomail | Consent collected by the data provider, where required, or legitimate interest (Art. 6.1.f GDPR) for business contact details; you can object at any time | 24 months from acquisition or until you object |
| Measuring email opens and clicks | Consent for individual measurement; no consent for aggregate statistics | Maximum 6 months for individual data |
| Ensuring website security and preventing misuse | Legitimate interest (Art. 6.1.f GDPR) | 12 months |
| Defending our rights in the event of disputes | Legitimate interest (Art. 6.1.f GDPR) | For the duration of the dispute |
Further information:
4. Who we share data with
Data is processed by the Controller's authorised staff and collaborators and, only for the necessary activities, by providers acting as data processors under Article 28 of the GDPR:
- Odoo S.A.: website and management platform.
- ConnyLine: sending of SMS, newsletters and emails, a platform of Line2LEAD S.r.l.
- ROX Pay: online payment processing.
- Google Ireland Limited (Google Meet): calls and online courses.
When we handle personal data entrusted to us by customers, such as their contact lists in campaigns, we act as data processors on their behalf under a dedicated agreement.
Data may be disclosed to authorities where required by law. We do not sell your data to third parties.
5. Transfers outside the European Union
Data is processed within the European Union. For Google Meet, any transfers to non-EU countries take place on the basis of the safeguards provided for in Articles 45 and 46 of the GDPR, such as adequacy decisions and the European Commission's standard contractual clauses.
6. Your rights
You may at any time request access to your data, rectification, erasure, restriction of processing and portability. You may object to processing based on legitimate interest and, at any time, to receiving commercial communications. Where processing is based on consent, you may withdraw it at any time, without affecting processing already carried out (Articles 15-22 GDPR).
To exercise your rights, write to: admin@line2lead.com
We respond within one month, extendable by two months for complex requests.
7. Complaints
You may lodge a complaint with the Italian Data Protection Authority, Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the supervisory authority of the EU country where you live.
8. Changes
We may update this notice. The version in force is always published on this page, with the date of the last update.
Last updated: October 2026