GDPR Compliant.
Contaktly is GDPR-compliant and built around the principles that protect personal data across the EU and UK. Here's how we handle data, and how we help you stay compliant.
- Free account, no card
- Live in minutes
- GDPR-compliant, EU hosted
Lawful, Fair and Transparent.
How we help you stay compliant.
- We're transparent about how Contaktly processes data.
- Sample privacy and consent text to inform your visitors.
- We help you choose and document a lawful basis.
- Handled by vetted providers with EU-based safeguards.
The Principles We Follow.
And how we meet each one.
- 01
Lawfulness, Fairness and Transparency
Processed legally, fairly, and in a way clear to the individual.
- 02
Purpose Limitation
Collected for specified, explicit purposes, and not used beyond them.
- 03
Data Minimisation
Limited to what is necessary for the purpose intended.
- 04
Accuracy
Kept accurate and up to date, with correction when needed.
- 05
Storage Limitation
Retained only as long as necessary for the purpose.
- 06
Integrity and Confidentiality
Processed securely with protection against loss or breach.
- 07
Accountability
We can demonstrate compliance with each of these principles.
Company Data vs Personal Data.
We're upfront about the two kinds of data Contaktly handles, and how each is treated.
Website Visitor Identification, the company, not the person.
We reveal the company visiting your site, matched from IP data, not the individual browsing. This uses publicly accessible corporate information, processed under legitimate interest (Art. 6(1)(f) GDPR). IP addresses are not shared, and personal data is minimal.
Decision-Maker Outreach, under a valid lawful basis.
Where Contaktly provides decision-maker contact details for outreach, that is personal data. You process it under a valid lawful basis, typically legitimate interest, and we give you all the tools you need to honour opt-outs and data requests.
Security and Data Storage.
Your data is hosted in the EU, encrypted, and locked down.
- EU Data ResidencyProcessed on cloud infrastructure in Frankfurt, Germany, so your data never leaves the EU.
- Encrypted End to EndEncrypted both in transit and at rest, at every step.
- Strict Access ControlsRole-based access, so only authorised personnel reach production systems.
- Bot & Traffic FilteringAutomated filtering removes bots and junk, so only real, relevant data is processed.
“Respecting the data of businesses, and the people behind them, isn't a checkbox for us. It's how the product is built.”
Questions, Answered.
How does Contaktly's technology work?
We match visitor IP addresses to publicly available company data to reveal the business visiting your site, not the individual browsing.
Is using Contaktly GDPR-compliant?
Yes. Company identification uses publicly accessible business data. You decide who to contact, and any outreach is carried out on the basis of legitimate interest.
What categories of data does Contaktly process?
Company-level firmographic data, plus business contact details for decision-makers (name, role, business email). No special-category data.
Are we a controller or a processor?
For identification data, you are the controller and Contaktly is the processor.
How do we obtain a valid lawful basis?
Outreach to decision-makers relies on legitimate interest, a recognised lawful basis under GDPR. We help you apply and document it correctly.
Where does Contaktly store and process data?
Both company identification data and Contaktly's own application data are processed on EU-based infrastructure in Frankfurt, Germany, encrypted in transit and at rest.
Who can I contact about data protection?
hello@contaktly.com
Identify Companies, Not People.
Free account, no card needed. Live in minutes.
30-Day Guarantee on paid plans: no identifications, no bill.
