Privacy Policy

Last updated: 10 October 2026

1. Who we are

This website is operated by CREA – Sviluppo innovativo (impresa), operating the Validee brand; VAT number (P. IVA) 01819360908, registered with the Chamber of Commerce (CCIAA) of Sassari under REA no. 154473, with its registered office at CP 150, 07026 Olbia (SS), Italy (“Validee”, “we”, “us”). Validee is the controller for the personal data described in this policy, under the EU General Data Protection Regulation (GDPR) and the Italian Personal Data Protection Code (Legislative Decree 196/2003, as amended by Legislative Decree 101/2018). Questions about privacy: contact@validee.com · +31 629 370 725.

2. What we collect and why

Visiting the website. Our hosting provider automatically records technical data when you load a page: IP address, browser and device type, date and time, and the pages requested. Our security software also logs IP addresses of failed login attempts. We use this only to run, secure and troubleshoot the website (legal basis: legitimate interest, Art. 6(1)(f) GDPR). These logs are kept for a limited period, normally no longer than 30 days, unless needed to investigate an incident.

Contacting us. When you email or call us, we process the details you share — such as your name, organisation, email address, phone number and the content of your message — to reply and follow up (legal basis: legitimate interest, or steps at your request before entering into a contract, Art. 6(1)(b) and (f) GDPR). We keep this correspondence for as long as needed for that purpose and no longer than two years after our last contact, unless it becomes part of an assignment.

Clients, partners and projects. For assignments, consortia and partnerships we process business contact and contract data to perform the agreement and meet legal obligations, such as the Italian ten-year retention period for accounting records (Art. 6(1)(b) and (c) GDPR).

A-Port. The A-Port platform (a-port.validee.agency) is a separate service with its own login; its use is governed by the terms and privacy information provided there.

3. What we do not do

• No analytics, advertising or tracking tools are used on this website.
• No social-media plug-ins: links to LinkedIn and other sites are plain links and load nothing until you click them.
• Fonts and images are served from our own server, not from third-party networks.
• We do not sell or rent personal data, and we do not use automated decision-making or profiling.

4. Who receives your data

We share personal data only where needed: with our hosting and email provider (DreamHost, LLC – United States) and other IT providers, who act as processors under a data processing agreement; with professional advisers bound by confidentiality; with partners in a project only when you have asked us to connect you; and with authorities where the law requires it.

5. Transfers outside the EU

Where a provider processes data outside the European Economic Area — for example our hosting provider in the United States — we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework where the provider is certified.

6. Security

We use encrypted connections (HTTPS), up-to-date software, security monitoring, strong passwords and restricted access to protect personal data. No method is completely secure, but we act promptly on any incident, including notifying the authority and those affected where required.

7. Your rights

You can ask us for access to, correction or deletion of your personal data, ask us to restrict or stop processing, object to processing based on legitimate interest, and receive your data in a portable format. Where we rely on consent, you can withdraw it at any time. Send your request to contact@validee.com; we reply within one month.

You also have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali, or the authority in the EU country where you live or work.

8. Children

This website is intended for professionals and is not aimed at children under 16. We do not knowingly collect their data.

9. Changes

We may update this policy when our website or services change. The date at the top shows the latest version. See also our Cookie Policy and Disclaimer.