Privacy Policy
Last updated 6 September 2026
This notice explains what happens to personal data when you use voice-sc.com. It is given under Article 13 of Regulation (EU) 2016/679 (GDPR) and Legislative Decree 196/2003, the Italian Data Protection Code. What is stored on your device is dealt with separately, in the Cookie Policy.
01Who is responsible for your data
Voice Strategic Consulting S.r.l., Via Aurelio Saffi 9, 20123 Milan, Italy — VAT and tax code 11673410962 — is the data controller.
Anything about this notice or about your data: backoffice@voice-sc.com, or by certified mail at voice-sc@pec.it. We answer within one month, as the GDPR requires, and free of charge.
02What this site collects
There are no accounts, no login, no profiling and no automated decision-making of any kind. Personal data reaches us only when you choose to send it, through one of three forms. Nothing else on this site records who you are.
| Where | What you provide | Why | Goes to |
|---|---|---|---|
| Company profile request (home page) | Name, surname, organisation, work email — and, only if you tick the box, that you want the briefing as well | To send you the company profile | Our mailbox, via the site host — and Mailchimp, only if you tick the briefing box |
| Voice Affairs subscription (footer, every page) | Email address | To send you the monthly briefing | Mailchimp |
| Enquiry form (contact page) | Name, organisation, email, subject, and what you write to us — including any link you add | To answer your enquiry | Our mailbox, via the site host |
We ask for the minimum we need. Please do not use these forms for confidential material, or for anything revealing health, political opinions, religious or philosophical beliefs, trade union membership or other special categories of data: we do not ask for it, and a web form is not a secure channel for it. If a matter requires that, write to voice-sc@pec.it and we will agree a secure route.
Our host records standard technical access data — IP address, browser type, page requested, date and time — to keep the site running and secure. Those records are not used to identify you, and are not combined with anything you send through the forms.
This site is not directed at children, and we do not knowingly collect data from anyone under 14.
Only if you allow it, through the cookie notice, Google Analytics and Snitcher observe how the site is used. Nothing of this runs until you choose; refusing changes nothing in what you can read.
Google Analytics measures how the site is used — which pages are read, how visitors arrive, on what kind of device — and reports it to us in aggregate. Google receives a shortened IP address and a random identifier held in a cookie; we do not see individuals.
Snitcher looks up the network address a visit comes from and tells us which organisation it is registered to — a company name, the pages read, and when. It identifies companies, not people: a visit from a home or mobile connection stays anonymous. We use it to understand which organisations are reading us, and sometimes to get in touch with them.
03On what basis
| What | Legal basis |
|---|---|
| Enquiry form | Article 6(1)(b) GDPR — steps taken at your request before entering into a contract. Where the enquiry is not about engaging us (press, careers, a general question), Article 6(1)(f) — our legitimate interest in answering the people who write to us. |
| Company profile request | Article 6(1)(b) GDPR — doing what you asked us to do. |
| Voice Affairs briefing | Article 6(1)(a) GDPR — your consent — together with Article 130 of the Italian Data Protection Code. You give it by subscribing in the footer, or by ticking the separate, unticked box on the profile form; we confirm it by email before the first issue is sent. |
| Technical access logs | Article 6(1)(f) GDPR — our legitimate interest in the security and availability of the site (Recital 49). |
| Google Analytics and Snitcher | Article 6(1)(a) GDPR — your consent, given through the cookie notice on your first visit and withdrawable at any time from Cookie Preferences. Until you consent, neither tool is loaded. |
Where we rely on legitimate interest you may object at any time, under Article 21. Giving us your data is voluntary: without it we cannot answer you, or send you what you asked for.
04Who else handles it
We do not sell your data, we do not share it for anyone else’s marketing, and we do not disclose it beyond what is set out here unless the law obliges us to. It is handled on our behalf, under written agreements meeting Article 28 GDPR, by these suppliers:
- Netlify, Inc., San Francisco, United States — hosting and delivery of the site, and the enquiry form (Netlify Forms), which receives each submission and forwards it to our mailbox. Netlify is certified under the EU-U.S. Data Privacy Framework; the Standard Contractual Clauses in its data processing agreement apply as a fallback.
- The Rocket Science Group LLC d/b/a Mailchimp, an Intuit company, Atlanta, Georgia, United States — the subscription list, the sending of Voice Affairs and of the company profile. Data is processed in the United States. Mailchimp is certified under the EU-U.S. Data Privacy Framework, with the Standard Contractual Clauses in its Data Processing Addendum as a fallback.
- Google Ireland Limited (Google Workspace), Dublin — receipt and storage of our correspondence. Data may be processed in Google’s data centres inside and outside the European Economic Area; transfers rest on Google LLC’s certification under the EU-U.S. Data Privacy Framework and on the Standard Contractual Clauses in Google’s Data Processing Addendum.
- Google LLC (Google Analytics 4), Mountain View, California, United States — measuring how the site is used — pages viewed, how visitors arrive, on what kind of device. Data is processed in the United States; Google LLC is certified under the EU-U.S. Data Privacy Framework, with the Standard Contractual Clauses in Google’s Data Processing Terms as a fallback. IP addresses are shortened before use and not stored.
- Snitcher B.V., the Netherlands — matching the network address of a visit to the organisation it is registered to, so that we know which companies read this site. Data is stored on servers in Frankfurt, Germany, and does not leave the European Union.
Inside the firm, access is limited to the people who need it for the purposes above, instructed in writing under Article 29 GDPR and Article 2-quaterdecies of the Italian Data Protection Code.
05How long we keep it
| What | How long |
|---|---|
| Voice Affairs subscription | Until you unsubscribe. The record of your consent, and of your unsubscribe, is then kept for a further 24 months as proof that we handled it properly. |
| Company profile request | 24 months from the request. |
| Enquiry correspondence | For as long as the matter is open, then 24 months. If it becomes a professional engagement, the file is kept for the 10 years that Article 2220 of the Italian Civil Code requires of our records. |
| Technical access logs | Held by our host, for its own security purposes, for a limited period. We do not keep them. |
| Google Analytics | Visitor-level data for 14 months, then only aggregate figures. |
| Snitcher | Identified visits for 12 months, then deleted. |
| Your cookie choice | The record of what you allowed or refused, and when, for 6 months — as proof that we asked. Then it expires and we ask again. |
At the end of these periods the data is deleted or irreversibly anonymised.
06How it is kept safe
The site is served only over an encrypted connection. Access to our mailboxes and to the subscription list is limited to named people and protected by two-step verification. We collect the minimum we need, and we review these arrangements whenever the setup changes.
07Your rights
Under Articles 15 to 22 GDPR you may ask us to confirm what data of yours we hold and to give you a copy; to correct it if it is wrong; to erase it; to restrict how we use it; to stop using it where we rely on legitimate interest; and to hand it to you in a portable form. Where processing rests on your consent, you may withdraw that consent at any time, without affecting what was lawfully done before. Write to backoffice@voice-sc.com.
If you believe your data has been mishandled you may complain to the Italian supervisory authority — Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome; protocollo@gpdp.it; certified mail protocollo@pec.gpdp.it; garanteprivacy.it — or to the authority of the country where you live or work. You may also take the matter to court.
08Changes to this notice
If what we collect or who processes it changes, this document changes with it and the date above is updated. Material changes affecting subscribers are announced in the briefing. Earlier versions are available on request.
