Legal
Privacy policy
Last updated: 30 September 2026.
This policy explains what personal data Alontia A/S collects through alontia.com, why we collect it, how long we keep it and what rights you have. We have written it to describe this website specifically rather than in general terms.
Who we are
Alontia A/S (also trading as Copenhagen Nanosystems), Agern Alle 3, DK-2970 Hørsholm, Denmark. CVR/VAT DK-37293903. We are the data controller for the personal data described here.
For any question about this policy or to exercise your rights, write to privacy@alontia.com.
What we collect, and why
When you contact us
Our enquiry and quote forms ask for the information we need in order to answer you. Depending on the form, that is your name, email address, company or laboratory, which product you are asking about, the spectrophotometer you use, your application, your data source, what you need, and your message.
Alongside what you type, we record which page you submitted the form from and your IP address. The IP address is kept as a record of the submission and to help us identify automated abuse of the form.
To keep spam out, the forms use Cloudflare Turnstile, which checks that the sender is a person. For that check Cloudflare receives your IP address and technical details of your browser. Turnstile is not used to follow you across websites.
Why we may do this: answering an enquiry you sent us is a legitimate interest under Article 6(1)(f) of the GDPR. You asked us a question; we use your details to reply.
How long we keep it: enquiries are retained for 24 months from your last contact with us, then deleted. If your enquiry becomes a customer relationship, the records move into our normal commercial retention and are kept for as long as Danish accounting law requires.
When you browse the site
Our web server keeps standard access logs containing IP addresses and requested pages, for security and troubleshooting. These are kept for 30 days.
What we do not do
- We do not sell personal data.
- We do not take payments on this website. Our shop is a catalogue — there is no checkout, and we collect no card or billing data here.
- We do not use your enquiry to add you to a mailing list unless you separately ask us to.
Cookies
We ask for your consent before setting any cookie that is not strictly necessary. You can change or withdraw that choice at any time using the cookie settings link in the site footer.
Strictly necessary — set without consent
- WordPress — session and login cookies, only if you have an account here.
- Polylang (
pll_language) — remembers whether you are reading English or Danish. - WooCommerce — cart and session cookies on shop pages.
- Consent record — remembers the choice you made about the cookies below, so we do not ask again on every page.
Analytics — only with your consent
- Google Analytics 4 (
_ga,_ga_*) — how many people visit, which pages they read and roughly where they are. We use this in aggregate to decide what to write and build. It does not run at all unless you accept.
Who else sees your data
We use a small number of processors to run the site. Each one only receives what it needs.
| Who | What for | Where the data sits |
|---|---|---|
| Amazon Web Services | Hosting this website and its database | London, United Kingdom |
| Cloudflare (Turnstile) | Spam protection on the forms | EU and United States |
| Google (Workspace) | Delivering the email your form submission generates, and our own mailboxes | EU and United States |
| Google (Analytics) | Website statistics — only if you consent | EU and United States |
Transfers outside the EU
Our web server is in the United Kingdom. The European Commission has decided that the UK provides an adequate level of data protection, so no additional safeguard is required for that transfer.
Google and Cloudflare may process data in the United States. Both are certified under the EU–US Data Privacy Framework, and our contracts with them include the European Commission’s Standard Contractual Clauses.
Your rights
Under the GDPR you have the right to:
- Access — ask what personal data we hold about you, and get a copy.
- Rectification — have inaccurate data corrected.
- Erasure — ask us to delete your data, where we have no overriding reason to keep it.
- Restriction — ask us to stop using it while a dispute is resolved.
- Portability — receive the data you gave us in a machine-readable form.
- Object — object to processing we base on legitimate interest, including the handling of your enquiry.
- Withdraw consent — for anything you consented to, such as analytics cookies, at any time and as easily as you gave it.
Write to privacy@alontia.com. We answer within one month.
If you are not satisfied with our answer, you can complain to the Danish Data Protection Agency, Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, Denmark.
Changes to this policy
If we change how we handle personal data we will update this page and change the date at the top. Material changes will be announced on the site.