Privacy notice
Pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR). In force from 29 October 2026.
This notice explains how Line2LEAD S.r.l. processes the personal data of people who visit connyline.com, contact us, book a demo, create an account, buy subscriptions, packages or credits, use the ConnyLine platform or join the partner and affiliate programme.
1. Data controller
The data controller is Line2LEAD S.r.l., with registered office at Via Santa Fumia 99, 00134 Rome, Italy, VAT no. 17557151002 (the "Controller"), which runs the ConnyLine brand and platform. For any privacy request you can write to: admin@line2lead.com
2. What data we collect
- Browsing data: IP address, browser and device type, pages visited, date and time, collected automatically by the systems that run the website.
- Contact data: first and last name, email, phone, company and role, which you provide through the contact form, demo booking, chat, WhatsApp or email.
- Account data: login credentials, company and contact person details, platform settings, purchase history and credit usage.
- SMS sender data: company details needed to register the alphanumeric sender in the registry required by AGCOM resolution no. 12/23/CIR and with the operators.
- Contract and billing data: company name, VAT number, tax code, address, billing and order details. Payments are made by bank transfer or through ROX Pay: we do not receive or store your full card details.
- Partner and affiliate programme: contact and company details of those who join and the data needed to calculate and pay commissions.
- Business contact data of companies: company name, business email address and phone number, sector and geographical area, which we may obtain from the database provider Bancomail to offer our services to other companies.
- Email and SMS communications: newsletter subscription, preferences expressed and, if you have consented, interactions with our emails, as described in the privacy notice on the tracking of email communications.
Providing the data needed to create the account, provide the services and invoice is mandatory: without it we cannot proceed. Other data is optional.
3. Why we process data, on what basis and for how long
| Purpose | Legal basis | Retention |
|---|---|---|
| Responding to contact requests and organising demos | Pre-contractual measures at your request (Art. 6.1.b GDPR) | 24 months from the last contact |
| Creating and managing the account and providing the platform, including support | Performance of the contract (Art. 6.1.b GDPR) | For the duration of the account and then 24 months |
| Registering the alphanumeric SMS sender | Performance of the contract and legal obligation (Art. 6.1.b and 6.1.c GDPR) | For the duration of the service and then 10 years |
| Managing orders, issuing invoices and complying with tax and accounting obligations | Performance of the contract and legal obligation (Art. 6.1.b and 6.1.c GDPR) | 10 years |
| Managing the partner and affiliate programme | Performance of the contract (Art. 6.1.b GDPR) | For the duration of the partnership and then 10 years for accounting data |
| Sending newsletters, event invitations and offers | Consent (Art. 6.1.a GDPR); for customers, offers on similar services without consent, with the right to object at any time (Art. 130(4), Italian Privacy Code) | Until consent is withdrawn or you object |
| Sending service communications about the account (expiry dates, credits, regulatory updates) | Performance of the contract (Art. 6.1.b GDPR) | For the duration of the account |
| Offering our services to companies whose business contact details are obtained from Bancomail | Consent collected by the data provider, where required, or legitimate interest (Art. 6.1.f GDPR) for business contact details; you can object at any time | 24 months from acquisition or until you object |
| Measuring email opens and clicks | Consent for individual measurement; no consent for aggregate statistics | Maximum 6 months for individual data |
| Ensuring the security of the website and platform and preventing misuse, such as non-compliant sending | Legitimate interest (Art. 6.1.f GDPR) | 12 months |
| Defending our rights in the event of disputes | Legitimate interest (Art. 6.1.f GDPR) | For the duration of the dispute |
Further information:
4. Data that customers upload to the platform
The contact lists that customers upload or buy on ConnyLine, and the data of the campaigns sent to those contacts, are processed by Line2LEAD S.r.l. as a data processor on behalf of the customer (Art. 28 GDPR), under a dedicated agreement. The customer is the controller of that data and is responsible for having collected it lawfully and for informing its recipients. Anyone who receives a communication sent through ConnyLine by one of our customers should contact the sender to exercise their rights; if they write to us, we forward the request to the customer.
The B2B databases that customers buy through the Bancomail integration are supplied by Bancomail, which is responsible for them as the supplier; once purchased, the customer becomes their controller.
5. Who we share data with
Data is processed by the Controller's authorised staff and collaborators and, only for the necessary activities, by providers appointed as data processors under Article 28 of the GDPR:
- Odoo S.A.: website, e-commerce and management platform.
- ROX Pay: online payment processing.
- Amazon Web Services: email sending infrastructure.
- Twilio and Meta Platforms (WhatsApp Business): sending WhatsApp messages for those who activate the channel.
- OpenAI (ChatGPT): AI content suggestions, generated at the user's request.
- Google Ireland Limited (Google Meet): demos and online meetings.
SMS messages are sent directly by Line2LEAD S.r.l. through the operators' networks. Data may be disclosed to authorities where required by law and, for SMS senders, to the AGCOM registry and the operators. We do not sell your data to third parties.
6. Transfers outside the European Union
Data is normally processed within the European Union. For the services that require it, such as WhatsApp, AI suggestions, Google Meet and some technical providers, data may be transferred to non-EU countries on the basis of the safeguards provided for in Articles 45 and 46 of the GDPR, such as adequacy decisions and the European Commission's standard contractual clauses.
7. Your rights
You may at any time request access to your data, rectification, erasure, restriction of processing and portability. You may object to processing based on legitimate interest and, at any time, to receiving commercial communications. Where processing is based on consent, you may withdraw it at any time, without affecting processing already carried out (Articles 15-22 GDPR).
To exercise your rights, write to: admin@line2lead.com
We respond within one month, extendable by two months for complex requests.
8. Complaints
You may lodge a complaint with the Italian Data Protection Authority, Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the supervisory authority of the EU country where you live.
9. Changes
We may update this notice. The version in force is always published on this page, with the date of the last update.
Last updated: October 2026