Last update
July 30, 2026
Data controller
QualiValue is the data controller for personal data processed through this website for contact and recruitment purposes.
For privacy requests, use the Contact us page and specify the subject "Privacy Request".
Categories of personal data
- Identification and contact data (name, email, company, role, and optional phone number).
- The stated objective of an AI Act Readiness consultation request.
- Message and business request details submitted via contact form.
- Answers, profile information, scores, and alerts generated by the AI Act Readiness Check.
- Career application data, including CV and cover letter content.
- Technical anti-abuse and security data (form metadata and logs).
- First-party aggregate analytics data (page path, referrer host, UTM parameters, language, device class, and approximate timezone).
Purposes and legal bases
- Contact management: reply to business inquiries and follow-up on service requests (GDPR Art. 6(1)(b) and, where applicable, Art. 6(1)(f)).
- AI Act Readiness Check: calculate the requested preliminary result, display it immediately, and manage a free consultation request when submitted (GDPR Art. 6(1)(b)).
- Marketing communications: send optional updates and commercial communications only on the basis of specific consent (GDPR Art. 6(1)(a)).
- Recruitment management: evaluate applications and run hiring activities (GDPR Art. 6(1)(b), pre-contractual measures).
- Legal and compliance obligations: fulfill statutory duties and defend legal claims (GDPR Art. 6(1)(c) and Art. 6(1)(f)).
- Security and fraud prevention: protect systems, forms, and services against abuse (GDPR Art. 6(1)(f)).
- Website performance analytics: understand aggregate traffic, pages viewed, traffic sources, campaigns, and device classes without cookies or persistent identifiers (GDPR Art. 6(1)(f)).
Retention periods
- Contact requests: up to 24 months from the last interaction.
- AI Act Readiness Check consultation requests: up to 12 months from submission.
- Marketing contact data: until consent is withdrawn and subject to periodic review, normally no longer than 24 months from the last meaningful interaction unless renewed.
- Career applications and CV: up to 12 months from submission.
- Technical security logs: retained only as long as needed for security and legal needs.
- Raw first-party analytics event files: up to 180 days unless a shorter period is configured.
Recipients and data transfers
Data may be processed by authorized personnel and service providers acting as processors under contractual safeguards. If cross-border transfers occur, appropriate GDPR transfer safeguards are applied.
Data subject rights
You may request access, rectification, erasure, restriction, portability, and objection in accordance with GDPR. You can also lodge a complaint with the competent supervisory authority.
Contact Form Privacy Notice
Data submitted in the contact form are processed only to manage your request and related communications. Fields marked as required are necessary to process the request.
AI Act Readiness Check Privacy Notice
The information supplied in the questionnaire is used to calculate and immediately display the requested preliminary organisational-readiness result. The calculation is rule-based and produces an indicative score, category results, and alerts; it does not make decisions with legal or similarly significant effects. If a consultation is requested, the answers are also used to prepare and manage that contact.
Consent to marketing communications is optional, separate from the consultation request, and may be withdrawn at any time. Avoid entering confidential information or personal data concerning employees, customers, or other individuals in the questionnaire.
Recruitment Privacy Notice (CV and Career Form)
Data submitted in the career form (including CV attachments) are processed exclusively for recruitment and candidate evaluation. For standard recruitment processing based on pre-contractual measures, explicit consent is generally not the legal basis.
However, by submitting the form you confirm that you have read this notice and understand how your data are used. Please avoid including unnecessary special-category data (for example health information) in CV and cover letter unless strictly required.
Cookies and website preferences
Cookie categories, purposes, and preference controls are described in the Cookie Policy. You can also open cookie settings at any time.
The website's first-party aggregate analytics do not rely on cookies and do not create persistent visitor profiles. They are used to produce weekly reports on pageviews, pages viewed, traffic sources, UTM campaigns, languages, and device classes.