Privacy Policy

Who is responsible for your data (Data Controller)?

VA Consulting S.r.l., Piazza della Repubblica 24, 20124 Milan (MI), Italy. We have not appointed a Data Protection Officer; for any privacy matter you can contact us at privacy@va-consulting.com.

Which categories of personal data do we collect?

• Contact data you provide through our contact (“Connect”) form: first name, last name, email address, phone number, company, role/function, country, and the content of your message.
• Newsletter data: the email address (and any details) you provide when subscribing.
• Technical and usage data: IP address, device/browser information and pages viewed, collected through cookies and similar technologies (see Section 3).

We do not intentionally collect special categories of data (e.g., health, political opinions). Please do not include such information in your messages.

For which purposes and on which legal basis do we process it?

• To respond to your enquiries and manage our business relationship — performance of pre-contractual/contractual steps (Art. 6(1)(b) GDPR) and/or our legitimate interest in replying to you (Art. 6(1)(f)).
• To send our newsletter and marketing communications — your consent (Art. 6(1)(a)).
• To operate, secure and improve the website — our legitimate interest (Art. 6(1)(f)); non-essential cookies are used only with your consent.
• To comply with legal obligations (Art. 6(1)(c)).

Do we share your data with third parties?

We share personal data only with service providers that process it on our behalf and on our instructions (data processors) to run our website and business — for example our hosting provider, website/form platform, consent-management and accessibility tools, and our email provider. The current list of services is published and kept up to date in our Cookie Policy and below in Section 2. We do not sell your personal data. Where our website embeds third-party content (e.g., video), that provider may process data when you interact with it, subject to your consent.

How do we keep your data secure?

We apply appropriate technical and organisational measures, including encrypted (HTTPS) transmission, access controls, and security measures provided by our hosting environment.

Where is your data processed (international transfers)?

We aim to process personal data within the EU/EEA. Some of our providers may process data outside the EEA (including the United States); in that case we rely on appropriate safeguards such as the EU Standard Contractual Clauses or an adequacy decision.

How long do we keep your data?

• Enquiry/contact data: for as long as needed to handle your request and for a limited period afterwards.
• Newsletter data: until you unsubscribe.
• Technical/cookie data: for the lifespan of each cookie (see Cookie Policy).

(Retention periods are indicative and to be finalised.)

What are your rights?

You have the right to access, rectify, erase, restrict or object to processing, to data portability, and to withdraw consent at any time (without affecting prior processing). You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or your local authority. To exercise your rights, email privacy@va-consulting.com.

When you submit our Connect form, your data is stored within our website system (WordPress, hosted on our provider’s servers) and sent to our company inbox (info@va-consulting.com), so we can respond to you.

We currently do not run web analytics. Our website may contain links to third-party sites (for example LinkedIn for career applications); their own privacy policies apply.

The third-party services that may process data in connection with this website include: SiteGround (hosting), Elementor / Elementor Pro (website and form platform), Complianz (cookie-consent management), the Ally accessibility widget, and YouTube (video embedded on the homepage). This list will be kept up to date.

We use cookies and similar technologies to operate the site and, with your consent, for non-essential purposes. Full details and your choices are available in our Cookie Policy, and you can change your preferences at any time through the consent banner.

If you subscribe to our newsletter, we use your email address to send you updates and insights about VA Consulting. The legal basis is your consent. You can unsubscribe at any time via the link in each email or by emailing privacy@va-consulting.com. We do not sell your data or share it for third-party marketing.

Our Careers section directs applications to LinkedIn. We do not collect job-application data through this website. When you apply via LinkedIn, LinkedIn’s privacy policy applies; any application data we subsequently receive is processed for recruitment purposes on the basis of our legitimate interest and/or steps taken at your request.

This section applies to residents of the United States, including California (CCPA/CPRA). In the preceding 12 months we collect the categories of personal information described in Section 1 (identifiers, contact and professional information, internet/usage activity), for the business purposes described in this Policy.

We do not “sell” your personal information, and we do not “share” it for cross-context behavioural advertising.

Subject to applicable law, you have the right to: know/access the personal information we collect; request deletion; request correction; and not be discriminated against for exercising your rights. To submit a request, email privacy@va-consulting.com. We will verify your request as required by law; you may use an authorised agent where permitted.

VA Consulting S.r.l. — Piazza della Repubblica 24, 20124 Milan (MI), Italy.
Privacy enquiries and requests: privacy@va-consulting.com.
You may also lodge a complaint with the Garante per la protezione dei dati personali (Italy) or your local data protection authority.

Changes to this Policy: we may update this Policy from time to time; the “Effective date” at the top indicates the latest version.