Data controller
Agorà [legal entity and registered office to fill in]. Privacy contact: privacy@agoramarketplace.eu. Data Protection Officer: [name and email, or "not appointed at this stage"].
What we collect
Visitors leave technical data with us through server logs and a privacy-respecting analytics setup that builds no cross-site profiles: IP address, browser and device type, pages visited, referrer, session timestamps. When you submit a contact form, request a demo, subscribe to updates, or apply for a role, we receive the personal data you choose to enter, including name, business email, company, role, and message content. The public site is no place for health, religious, political, or other sensitive information.
Why we process it (GDPR Article 6)
Site security and basic operation rest on our legitimate interest (Art. 6(1)(f)). Demo requests and pre-contractual exchanges rest on Art. 6(1)(b). Newsletter subscription and analytics beyond strict necessity rest on your consent (Art. 6(1)(a)), recorded through the cookie banner or the subscription form. Tax, accounting, and regulatory obligations rest on Art. 6(1)(c).
Purposes
Three purposes only: replying to your enquiry, sending you the information you asked for about Agorà, operating and improving the public site. We do not sell personal data. We do not use it to train AI models.
Marketplace data sits outside this notice
Personal data exchanged inside the Agorà marketplace, between publishers and AI buyers, is governed by separate Data Processing Agreements signed at onboarding. Marketplace assets travel end-to-end encrypted between counterparties, so Agorà has no access to asset content. This notice covers only the public site and direct communications with our team.
Sharing with processors
Personal data flows to a small set of processors acting under contract and only on our instructions: hosting and infrastructure providers (servers, CDN, transactional email), analytics and form-handling tools, payment and accounting providers where relevant, legal, tax, and audit advisors where required. The current processor list is available on request at privacy@agoramarketplace.eu. Onward transfers stay within the EU/EEA where possible. When a processor sits outside, we rely on European Commission adequacy decisions or the 2021 Standard Contractual Clauses with technical safeguards.
Retention
Server logs: 12 months. Contact form and demo request data: 24 months from last contact, then deletion or anonymisation. Newsletter subscribers: until unsubscribe, plus 12 months as proof of consent. Job applications: 12 months from submission, longer only with your specific consent. Documents kept for legal obligations: for the period set by the relevant statute.
Your rights
Under GDPR Articles 15 to 22 you can request access, correction, erasure, restriction, portability, and object to processing. You can withdraw consent at any time without affecting prior processing. Write to privacy@agoramarketplace.eu. We respond within one month, with extensions only where the law permits. You can also lodge a complaint with the Garante per la protezione dei dati personali or the supervisory authority of your country of residence.
Cookies
Strictly necessary cookies for session and security load by default. Analytics and preference cookies load only after you accept the relevant categories in the banner. Full vendor list and durations live on the dedicated Cookie Notice page.
Minors
The public site addresses a professional audience. We do not knowingly process personal data of children under 16. Contact privacy@agoramarketplace.eu if you believe a minor has submitted data.
Updates
We revise this page when our practices change. Material changes are announced through the site or by email to existing contacts.
Last updated: 26 April 2026.