Personal data processing notice

This notice (Arts. 13–14 GDPR) explains how QualiValue (the “Controller”) processes personal data collected through https://www.qualivalue.com.

Data you provide via forms

Contact us: First name*, Last name, Email*, Phone, Company, General request, Message*.

Career: Position ID, Email*, First name*, Last name, LinkedIn profile, Phone, CV (PDF/DOC, max 5MB), Message*.

Fields marked * are required to handle your request or application.

Browsing data & technical logs (e.g., IP address, date/time, URL, user agent) generated by the site.

Cookies: only technical cookies. No profiling/marketing cookies. Details are provided in the site’s Cookie Policy.

Note: please avoid providing special-category data (e.g., health, beliefs, ethnicity). If sent unsolicited and not necessary, such data will be minimised or deleted.

Handling enquiries (Contact us): replying to questions/quotes.
Legal basis: pre-contractual steps or legitimate interests (Art. 6(1)(b)/(f) GDPR).

Recruitment (Career): assessing your application.
Legal basis: pre-contractual steps (Art. 6(1)(b) GDPR).

Talent pool (optional): retaining your CV/data for future openings.
Legal basis: consent (Art. 6(1)(a) GDPR) via an optional checkbox.

Site security & abuse prevention: logs, rate-limiting, anti-malware on uploads.
Legal basis: legitimate interests (Art. 6(1)(f) GDPR).

Legal compliance and establishment/defence of claims.
Legal basis: legal obligation (Art. 6(1)(c) GDPR) and legitimate interests (Art. 6(1)(f) GDPR).

Providing required fields is necessary to submit your request or application; otherwise we cannot proceed. Other fields are optional.

• Contact us: up to 12 months after closing the request.
• Career (ongoing selection): up to 12 months after the selection ends.
• Talent pool (with consent): up to 12 additional months, renewable.
• Technical logs: for the period strictly necessary to ensure security and operation.

After retention ends, data are deleted or anonymised.

Data may be processed by staff authorised by the Controller and by service providers (e.g., hosting, email, storage, HR/ATS tools if used) acting as Processors under Art. 28 GDPR.

International transfers: Processing normally occurs in the EU/EEA. If transfers to non-EEA countries are needed, appropriate safeguards (e.g., Standard Contractual Clauses) and supplementary measures will be applied; further details are available upon request.

We implement appropriate technical and organisational measures (HTTPS, access controls, at-rest encryption where feasible, anti-malware scanning for CVs, environment segregation, backups, logging and monitoring).

You may exercise access, rectification, erasure, restriction, portability, and objection (for processing based on legitimate interests), and withdraw consent at any time.

To exercise your rights: info@qualivalue.com.

You may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

The site is intended for users aged 16+. We do not knowingly collect data from children; any unauthorised submissions will be deleted.

We use only technical cookies necessary for the site to function. For details (types, purposes, duration) see the site’s Cookie Policy. If we later introduce tools that set non-essential cookies (e.g., tracking analytics, reCAPTCHA, embedded maps/videos, pixels), a consent banner with prior blocking will be displayed and this notice will be updated.

We may update this notice. Updated versions will be published on https://www.qualivalue.com with a new “Last updated” date.