Translation for convenience only
This is a courtesy translation. Only the Italian text is binding: read the Italian version.
1. Our commitment to data protection
At Qlara we consider data protection and respect for privacy to be essential parts of our service. We operate in compliance with applicable law, including the GDPR, taking a transparent approach so that you have all the information you need to use the platform knowledgeably and safely.
2. GDPR compliance
Protecting personal data is an integral part of how Qlara designs and delivers its services. That is why we apply technical, organisational and contractual measures intended to ensure that the platform is used with due attention to confidentiality, information security and regulatory compliance.
To support our customers, we provide documentation and tools that help manage privacy matters knowledgeably throughout the relationship with Qlara. The terms governing data processing have likewise been drawn up in line with the European regulatory framework, so as to define clearly the roles, responsibilities and safeguards that apply to activities carried out through the platform.
In particular:
Data processing agreement: the processing activities carried out by Qlara on behalf of customers are governed by specific contractual clauses setting out the roles, instructions and safeguards that apply under European personal data protection law.
Data Protection Officer (DPO): we have appointed our own Data Protection Officer as a dedicated point of contact for matters relating to the processing of personal data and the exercise of the rights provided for by applicable law. The DPO can be contacted at dpo@agiletelecom.com.
Infrastructure and international transfers: the platform relies mainly on infrastructure and technologies located within the European Union, including the principal artificial intelligence services used by Qlara. Where suppliers involved in delivering the service process personal data outside the European Economic Area, such transfers take place solely in accordance with the safeguards required by the GDPR. The current list of authorised suppliers, together with information on the transfer mechanisms applied, is available in the Data Processing Agreement and in the contractual documentation applicable to customers.
3. Technical security measures
The platform implements the following security measures:
- Encryption in transit: all communications are protected with TLS 1.3
- Encryption at rest: sensitive data is encrypted with AES-256
- Authentication: multi-factor authentication (MFA) available for every account
- Access control: least-privilege principle (RBAC) for all internal systems
- Monitoring: centralised logging and 24/7 alerting on security events
- Backup: daily backups with 30-day retention, tested periodically
4. Incident management
Agile Telecom has internal procedures for handling personal data breaches. Notifications to the competent authorities and communications to data subjects are made in the cases and within the time limits provided for by applicable law, in accordance with Articles 33 and 34 of the GDPR.
5. Sub-processors
Qlara relies on sub-processors carefully selected on the basis of reliability, security and data protection requirements. Where required, relationships with those suppliers are governed by agreements and safeguards compliant with applicable law. The current list of sub-processors involved in delivering the service is available in our DPA.
6. Security reports
Qlara encourages the responsible disclosure of any vulnerabilities, anomalies or issues that may affect the security of the platform or related services. Reports can be sent to security@agiletelecom.com.
Frequently asked questions
What is Qlara's role under the GDPR?
In providing its services, Qlara generally acts as a data processor on behalf of its customers, in accordance with the GDPR.
Is a Data Processing Agreement (DPA) available?
Yes. Qlara provides a DPA compliant with Article 28 of the GDPR, governing the processing of personal data carried out on behalf of customers.
Where is data processed and stored?
The main infrastructure used to deliver the service is located within the European Union. Where suppliers or services located outside the European Economic Area are used, any data transfers take place in accordance with the safeguards required by applicable law.
Does Qlara use sub-processors?
Yes. Qlara may rely on qualified suppliers to support specific activities required to deliver its services. Those suppliers are selected on the basis of reliability, security and data protection requirements.
How is data protected?
Qlara applies technical and organisational measures designed to ensure the security, confidentiality and integrity of the data processed, in line with the principles set out in the GDPR. Further information is available in our privacy policy and in the Data Processing Agreement.
How can I report a vulnerability or a security issue?
Reports concerning security issues can be sent to the contact details shown on this page. Reports are handled according to our internal security procedures.
Does Qlara transfer personal data outside the European Economic Area (EEA)?
In delivering the service, Qlara may act both as a data controller and as a data processor. Specifically, Qlara acts as a data controller when it processes the personal data of consultants, suppliers or users who fill in forms or subscribe to the newsletter through the website. Qlara acts as a data processor when it processes the personal data (for example when you use multichannel messaging, social media publishing, centralised inbox, AI chatbot, email marketing, AI creative or Booking engine features) required to send messages on behalf of its customers. When Qlara acts as a data controller, personal data may be shared with parties, both inside and outside the Group, that may be located outside the European Economic Area ("EEA"). In such cases, Qlara ensures that the processing of personal data by those recipients fully complies with applicable law, applying appropriate safeguards such as adequacy decisions, Standard Contractual Clauses approved by the European Commission, or other measures deemed suitable, as set out in our privacy policy. Further information on the processing of personal data and on the suppliers involved is available in the Data Processing Agreement attached to our licence agreement.
Where can I find the licence agreement?
You can find it on the Agile Telecom website, on the Terms and Conditions page.