Privacy Policy

Scope

This Privacy Policy covers only the personal data we collect through ventla.com. Data processed inside the Ventla event management platform is governed by a separate Data Processing Agreement between Ventla and each customer organization.

Controller

The data controller for ventla.com is Ventla International AB, Nellickevägen 26, 412 63 Göteborg, Sweden.

What we collect

We collect the following categories of personal data:

• Information you submit through the Book a Demo form: first name, last name, work email, phone number (including the country code you select), and any message you choose to include.
• Information you voluntarily submit through other forms or direct correspondence, for example your name, email address, company, and any message you send us.
• Aggregate analytics data about how the site is used — pages visited, referrer, approximate location, device type — collected only after you accept cookies.
• Client-side signals used by Vercel BotID to distinguish humans from automated traffic on protected routes (see Bot protection below).
• The content of emails you send us at the addresses listed on this site.

Analytics

After you accept cookies via the banner, we load Google Analytics 4 through Google Tag Manager and DataFast. These tools measure aggregate site usage such as page views, sessions, referrers, UTM campaign parameters, country and region, and device, browser and operating system. We do not use them to build individual marketing profiles.

DataFast (datafa.st) is a privacy-friendly analytics provider. It processes your IP address and browser user-agent only to derive a hashed visitor identifier with a salt that rotates approximately every 24 hours, so the same visitor cannot be linked across days. DataFast also stores a small first-party cookie on ventla.com to count returning visits within a session. We do not use DataFast for advertising, retargeting, or cross-site tracking.

If you decline the banner, neither Google Analytics 4 nor DataFast is loaded, no analytics cookies are set, and no requests are made to googletagmanager.com, google-analytics.com, or datafa.st from this site.

Legal basis

We process personal data on one or more of the following legal bases under the GDPR: your consent (for analytics), our legitimate interest in operating and improving ventla.com (for form submissions and correspondence), and, where applicable, the necessity of processing to answer your pre-contract inquiries.

Retention

Form submissions and correspondence are retained for up to 24 months after our last contact with you, unless a longer period is required by law. Leads and contacts created from the Book a Demo form may be retained longer in our HubSpot CRM in line with our standard CRM lifecycle — typically for as long as you remain a relevant contact for sales or customer communication. You can ask us to delete your record at any time (see Your rights below). Analytics data is retained per the provider's default policy — for Google Analytics 4, typically 2 months for event data.

Book a Demo form

When you submit the Book a Demo form, the information you provide is sent in an email to hello@ventla.com (with our sales lead on copy) and is also written to our HubSpot CRM as a new lead or contact record, so our team can follow up. Delivery of the email is handled by Resend (resend.com), which acts as our transactional email provider. Resend processes the fields you submit only to deliver the message and does not use them for its own purposes.

We rely on this form strictly for pre-sales contact. We do not add you to marketing lists from the Book a Demo form without a separate, explicit opt-in.

Bot protection

To protect the Book a Demo form and other sensitive routes from automated abuse, we use Vercel BotID, which is powered by Kasada. BotID runs an invisible challenge in your browser on protected routes and analyzes client-side signals such as device, browser, and interaction patterns to tell humans and bots apart. It does not show a CAPTCHA, does not build a cross-site advertising profile, and is only active on the specific routes we protect (currently the Book a Demo form). Vercel and Kasada act as processors on our behalf.

Booking widget

The "Book a Demo" buttons on this site open a booking widget served by Cal.com from cal.eu. Cal.com's embed library loads with the page but does not set cookies or transmit personal data on its own. The booking modal only opens — and only then sends data such as your name, email, and any notes to Cal.com — when you click Book a Demo or press the V keyboard shortcut. Cal.com acts as a separate processor under its own privacy notice and a Data Processing Agreement with us.

Sharing

We share personal data only with the processors we need to operate this site, under Data Processing Agreements. We do not sell personal data. The processors we currently use are:

• Vercel — hosting, deployment, and Vercel BotID bot protection (with Kasada as a sub-processor for bot detection signals).
• Resend — transactional email delivery for the Book a Demo form.
• HubSpot — our CRM, used to manage leads and contacts created from the Book a Demo form and other direct communication.
• Google — Google Tag Manager and Google Analytics 4 (loaded only after you accept cookies).
• DataFast — privacy-friendly analytics (loaded only after you accept cookies).
• Cal.com — the booking widget that opens when you click Book a Demo or press the V keyboard shortcut.

International transfers

Some of our processors — including HubSpot, Resend, Vercel, Kasada, Google, and Cal.com — may process personal data outside the EU/EEA, typically in the United States. Where that is the case, we rely on the European Commission's Standard Contractual Clauses and any additional safeguards required by GDPR.

Your rights

You have the right to access, correct, delete, restrict, or port the personal data we hold about you, to object to processing, and to withdraw consent at any time. Send any such request to dataprivacy@ventla.com. You also have the right to lodge a complaint with your local data protection authority (in Sweden: Integritetsskyddsmyndigheten, imy.se).

Contact

For privacy questions, email dataprivacy@ventla.com.