General Data Protection Regulation (GDPR) Privacy Notice

At Qualent Media, we are committed to protecting the privacy and personal data of all individuals with whom we interact, in accordance with the General Data Protection Regulation (GDPR – EU 2016/679), the UK GDPR, and other applicable data protection laws.

This Privacy Notice explains, in detail, how we collect, use, store, and protect personal data when you interact with our website, products, services, or marketing communications. It also outlines your rights under GDPR and how you can exercise them.

Scope of this Notice

This Privacy Notice applies to:

Visitors to our website(s) and digital platforms.
Representatives of our clients, prospects, vendors, and partners.
Individuals who engage with our B2B marketing and lead generation services.
Attendees of our events, webinars, and campaigns.
Any person located in the European Economic Area (EEA), United Kingdom (UK), or Switzerland whose personal data we may process.

Categories of Personal Data We Collect

We may collect, process, and store the following categories of personal data:

Category	Examples	Purpose of Processing
Identity & Contact Data	Name, job title, business email, phone number, company name, postal address	To provide services, communicate, verify identity
Professional Data	Department, role, industry, company size, LinkedIn profile	To deliver targeted B2B marketing solutions
Transaction Data	Records of services purchased, subscription history, invoices	To fulfill contracts, manage billing, and client relationships
Communication Data	Emails, calls, chats, surveys, event sign-ups	To respond to inquiries, provide support, maintain records
Technical Data	IP address, device type, browser, cookies, website activity logs	To maintain website security, performance, analytics
Marketing Preferences	Opt-in/opt-out status, subscription settings, campaign interaction history	To manage email campaigns, consent-based marketing

We do not intentionally collect sensitive personal data (such as health, biometric, religious, or political data). If such data is ever collected inadvertently, it will be deleted immediately unless required for compliance purposes.

Legal Basis for Processing

Under GDPR, we process personal data based on the following legal grounds:

Consent (Art. 6(1)(a)) – When you voluntarily opt-in to marketing communications or provide consent for specific processing activities.
Contractual Necessity (Art. 6(1)(b)) – When processing is necessary to perform a contract with you or your organization.
Legitimate Interests (Art. 6(1)(f)) – For business purposes such as B2B marketing, service improvement, fraud prevention, and website security, provided these interests are not overridden by your rights.
Legal Obligations (Art. 6(1)(c)) – When processing is necessary to comply with applicable laws, regulations, or legal proceedings.

How We Use Personal Data

We process personal data for the following purposes:

To deliver our B2B marketing and lead generation services.
To establish and maintain business relationships with clients, vendors, and partners.
To send newsletters, updates, and event invitations, only where consent has been provided or legitimate interests apply.
To analyze campaign and website performance, improving content and services.
To detect and prevent fraud, unauthorized access, or unlawful activity.
To comply with legal, regulatory, and contractual obligations.

How We Collect Personal Data

We obtain personal data from the following sources:

Direct interactions – when you fill out forms, subscribe to newsletters, download resources, or contact us directly.
Business relationships – as part of client contracts, service delivery, and communications.
Third-party service providers – such as analytics tools, CRM systems, and marketing platforms.
Public sources – professional networking platforms (e.g., LinkedIn), company websites, trade directories, and events.

Data Sharing & International Transfers

We may share personal data with:

Trusted Service Providers & Vendors – including IT providers, cloud hosting, analytics, CRM systems, and marketing platforms, strictly under data processing agreements.
Business Partners – for legitimate B2B collaboration and service delivery.
Legal & Regulatory Authorities – if required to comply with legal obligations.

International Data Transfers

If we transfer personal data outside the EEA/UK (e.g., to the United States or other regions), we ensure:

Standard Contractual Clauses (SCCs) approved by the European Commission.
Adequacy Decisions from the European Commission, where applicable.
Appropriate Safeguards such as encryption, access controls, and secure data hosting.

Data Retention

We retain personal data only for as long as is necessary for the purposes described in this Notice, unless a longer period is required by:

Legal or regulatory obligations.
Contractual commitments.
Ongoing business relationships.

When personal data is no longer required, it is either securely deleted or anonymized for analytical purposes.

Data Security

We implement appropriate technical, organizational, and administrative safeguards to protect personal data, including:

Encryption of data during storage and transfer.
Firewalls, intrusion detection, and access control systems.
Role-based access to limit internal data handling.
Regular security testing and compliance audits.

While we take strong precautions, no method of transmission or storage is completely secure.

Your GDPR Rights

If you are located in the EEA, UK, or Switzerland, you have the following rights:

Right of Access – Request details and a copy of the personal data we hold about you.
Right to Rectification – Request correction of inaccurate or incomplete data.
Right to Erasure (“Right to be Forgotten”) – Request deletion of your personal data.
Right to Restrict Processing – Request limitation of certain data uses.
Right to Data Portability – Request a machine-readable copy of your personal data.
Right to Object – Object to processing based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent – Withdraw consent at any time where processing is based on consent.
Right to Lodge a Complaint – File a complaint with your local Data Protection Authority (DPA).

Exercising Your Rights

To exercise your GDPR rights, please contact us at [email protected]

We aim to respond to all valid requests within 30 days. Proof of identity may be required to verify requests.

Cookies & Tracking Technologies

We use cookies and similar technologies to:

Enable website functionality.
Analyze website traffic and user behavior.
Deliver relevant advertising and content.

By law, we will request your consent before placing non-essential cookies (e.g., marketing or tracking cookies). For full details, please see our Cookie Policy.

Updates to this GDPR Privacy Notice

We may update this notice periodically to reflect changes in:

Legal requirements.
Our services or technologies.
Data processing practices.

The revised notice will be posted with the “Last Updated” date updated accordingly.

Contact Information

For questions, concerns, or privacy-related requests, please email us at [email protected]

If you believe your data rights have been violated, you also have the right to lodge a complaint with your local Data Protection Authority (DPA). and email us at [email protected].