Privacy Policy

Last updated: June 2025

1. Controller Identity

The data controller responsible for processing your personal data is VSBD (also operating under the name vsebude.it), with its principal place of business in Spain. For data protection inquiries, contact us at: contact@vsebude.it.

2. Scope

This Privacy Policy applies to all personal data processed by VSBD through this website (vsebude.it) and in the course of our business relationships with clients, prospects, and partners. It is intended to comply with the General Data Protection Regulation (EU) 2016/679 (GDPR) and other applicable data protection laws.

3. Data We Collect

We collect and process the following categories of personal data:

  • •Contact data: name, email address, phone number, company name — provided voluntarily when you contact us.
  • •Usage data: IP address, browser type, pages visited, time spent — collected automatically through standard web server logs and analytics tools.
  • •Communication data: the content of emails, messages, and inquiries you send to us.
  • •Business data: information shared in the context of an engagement or pre-engagement discussion, including project descriptions and technical requirements.

4. Legal Basis for Processing

We process your personal data on the following legal bases under Article 6 GDPR:

  • •Contract performance (Art. 6(1)(b)): processing necessary to perform a contract with you or take pre-contractual steps at your request.
  • •Legitimate interests (Art. 6(1)(f)): operating and improving our website, responding to business inquiries, and maintaining client relationships.
  • •Consent (Art. 6(1)(a)): where you have explicitly consented, for example to receive marketing communications.
  • •Legal obligation (Art. 6(1)(c)): where we are required to process data to comply with applicable law.

5. How We Use Your Data

  • •Responding to inquiries and communications
  • •Providing our software engineering services
  • •Managing client relationships and project delivery
  • •Improving our website and services
  • •Sending service-related communications
  • •Complying with legal obligations

6. Data Sharing and Third Parties

We do not sell your personal data. We may share data with:

  • •Service providers: cloud hosting providers (e.g., Vercel, AWS), communication tools, and analytics services acting as data processors under our instruction.
  • •Legal authorities: where required by law, regulation, or court order.
  • •Business partners: only where necessary to deliver contracted services, and always under appropriate data protection agreements.

Where data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).

7. Data Retention

We retain personal data only for as long as necessary for the purposes described above, or as required by applicable law. Contact and inquiry data is retained for up to 3 years from last contact. Client engagement data is retained for 7 years for legal and accounting purposes. You may request deletion at any time (subject to legal retention obligations).

8. Your Rights Under GDPR

As a data subject, you have the following rights:

  • •Access (Art. 15): obtain confirmation of whether we process your data and receive a copy.
  • •Rectification (Art. 16): request correction of inaccurate data.
  • •Erasure (Art. 17): request deletion of your data (“right to be forgotten”), subject to legal retention obligations.
  • •Restriction (Art. 18): request that we restrict processing in certain circumstances.
  • •Portability (Art. 20): receive your data in a structured, machine-readable format.
  • •Objection (Art. 21): object to processing based on legitimate interests or for direct marketing.
  • •Withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at contact@vsebude.it. You also have the right to lodge a complaint with your national data protection authority.

9. Cookies

This website uses essential cookies required for its operation. We do not currently use tracking or advertising cookies. If this changes, we will update this policy and obtain your consent where required.

10. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit (TLS), access controls, and regular security assessments — consistent with our engineering approach to security-by-design.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. We will notify you of material changes via email where we hold your contact details.

12. Contact

For any privacy-related questions or to exercise your rights, contact us at: contact@vsebude.it or by phone at +380 63 859 45 24.