GDPR Compliance

Data controller

QualiValue is the data controller for personal data processed through this website for contact and recruitment purposes.

For privacy requests, use the Contact us page and specify the subject "Privacy Request".

Categories of personal data

• Identification and contact data (name, email, company, role, and optional phone number).
• The context and objective stated in an AI Act Readiness preliminary assessment request.
• Message and business request details submitted via contact form.
• Contact details and optional context provided to request the QASM interview and the preliminary assessment.
• Career application data, including CV and cover letter content.
• Technical anti-abuse and security data (form metadata and logs).
• Google Analytics 4 navigation and measurement data, only after consent: visited pages, traffic sources, events and technical browser data.

Purposes and legal bases

• Contact management: reply to business inquiries and follow-up on service requests (GDPR Art. 6(1)(b) and, where applicable, Art. 6(1)(f)).
• AI Act Readiness: manage the preliminary assessment request, send the QASM interview link and arrange the related communications (GDPR Art. 6(1)(b)).
• Marketing communications: send optional updates and commercial communications only on the basis of specific consent (GDPR Art. 6(1)(a)).
• Recruitment management: evaluate applications and run hiring activities (GDPR Art. 6(1)(b), pre-contractual measures).
• Legal and compliance obligations: fulfill statutory duties and defend legal claims (GDPR Art. 6(1)(c) and Art. 6(1)(f)).
• Security and fraud prevention: protect systems, forms, and services against abuse (GDPR Art. 6(1)(f)).
• Website statistics with Google Analytics 4: measure visits and submitted requests only with prior consent (GDPR Art. 6(1)(a)).

Retention periods

• Contact requests: up to 24 months from the last interaction.
• AI Act Readiness preliminary assessment requests: up to 12 months from submission.
• Marketing contact data: until consent is withdrawn and subject to periodic review, normally no longer than 24 months from the last meaningful interaction unless renewed.
• Career applications and CV: up to 12 months from submission.
• Technical security logs: retained only as long as needed for security and legal needs.
• If allowed, _ga and _ga_* cookies have a configured maximum lifetime of 180 days, without automatic renewal on every visit. User and event data retention in the GA4 property is set to 2 months; this setting does not apply to aggregated statistical reports.

Recipients and data transfers

Data may be processed by authorized personnel and service providers acting as processors under contractual safeguards. If cross-border transfers occur, appropriate GDPR transfer safeguards are applied.

Data subject rights

You may request access, rectification, erasure, restriction, portability, and objection in accordance with GDPR. You can also lodge a complaint with the competent supervisory authority.

Contact Form Privacy Notice

Data submitted in the contact form are processed only to manage your request and related communications. Fields marked as required are necessary to process the request.

AI Act Readiness Request Privacy Notice

The contact details and optional context entered in this form are used to manage your preliminary assessment request, send the QASM interview link and handle communications relating to the process. Confirming that you have read this notice does not constitute consent to marketing communications.

The website form does not collect interview answers or generate scores or automated assessments. Information about the processing applicable to the QASM interview will be presented before you start it. Please do not enter confidential information or personal data about other people in the form.

This section updated: 23 October 2026.

Recruitment Privacy Notice (CV and Career Form)

Data submitted in the career form (including CV attachments) are processed exclusively for recruitment and candidate evaluation. For standard recruitment processing based on pre-contractual measures, explicit consent is generally not the legal basis.

However, by submitting the form you confirm that you have read this notice and understand how your data are used. Please avoid including unnecessary special-category data (for example health information) in CV and cover letter unless strictly required.

Cookies and website preferences

Cookie categories, purposes, and preference controls are described in the Cookie Policy. You can also open cookie settings at any time.

We use Google Analytics 4, provided by Google Ireland Limited, only after consent to the Analytics category. Google Analytics 4 measures page visits, traffic sources and successfully submitted requests using cookie identifiers and technical browser data. We do not send names, email addresses, form text, CVs or arbitrary URL parameters. Advertising features and Google Signals are disabled. You can refuse or withdraw consent in cookie preferences. Withdrawal stops collection and removes Analytics cookies from the site. The service is provided by Google Ireland Limited and may involve transfers of data outside the EEA, under the applicable agreements with Google. For more information, see Google’s privacy policy and how Google uses data from partner sites.