Privacy Policy

Last updated: 17 July 2026

This notice explains how personal data relating to visitors to visiontovalue.pro, users of the contact forms and subscribers to the Vision to Value Letter are processed. It is provided under Article 13 of Regulation (EU) 2016/679 (GDPR) and the applicable Italian legislation.

1. Data controller

The data controller is A. Garau, for the Vision to Value editorial project.

For privacy requests, the exercise of data protection rights or withdrawal of consent, write to admin@visiontovalue.pro.

2. Data processed

Depending on the service used, the following data may be processed:

• data provided voluntarily, such as an email address and the content of messages sent through the forms;
• consent records, including the date, time and wording accepted when subscribing;
• technical browsing data, such as IP address, browser and device type, date and time of the request, security logs and information required for the site to operate;
• communication data, such as support requests, withdrawals, objections and stated preferences.

The site does not intentionally request special categories of personal data, including health, biometric or genetic data, ethnic origin, or religious or political beliefs. Please do not enter such information in free-text fields.

3. Purposes and legal bases

Personal data may be processed for the following purposes:

• site operation and security, including the prevention of abuse, spam and unlawful access: the controller’s legitimate interest under Article 6(1)(f) GDPR;
• responding to contact, collaboration or information requests: steps taken at the request of the data subject before entering into a contract under Article 6(1)(b) GDPR;
• sending the Vision to Value Letter, editorial content, updates and proposals relating to A. Garau’s products and services: consent under Article 6(1)(a) GDPR and Article 130 of the Italian Privacy Code;
• compliance with legal obligations and management of disputes: Article 6(1)(c) GDPR and, where applicable, the legitimate interest in protecting legal rights.

Newsletter consent is not preselected, is optional and does not affect ordinary use of the site. It is, however, required to receive the requested communications.

4. Newsletter and promotional communications

By subscribing, you authorise the sending by email of the newsletter and communications consistent with the project’s themes, including content, books, courses, tools, events, products and services offered by A. Garau. Frequency may vary according to the editorial calendar.

You may withdraw consent at any time through the unsubscribe link in the communications, where available, or by writing to admin@visiontovalue.pro. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Personal data will not be sold or disclosed to third parties for their own promotional purposes without a separate legal basis and, where required, specific consent.

5. Processing methods and security

Processing is carried out with technical and organisational measures appropriate to the stated purposes. Reasonable safeguards are used to protect data against unauthorised access, loss, alteration or disclosure. No Internet-connected system can guarantee absolute security.

Entries submitted through the forms are stored in the site’s WordPress database and may be sent to the controller by email notification. Administrative access is limited to authorised persons.

6. Recipients and service providers

To the extent necessary, data may be processed by providers supporting the project, including:

• hosting, infrastructure, security and email providers;
• providers of the content management system and online forms;
• technical, administrative or legal advisers bound by confidentiality;
• public authorities where disclosure is required by law.

Where a provider processes data on the controller’s behalf, it acts as a processor under Article 28 GDPR, on the basis of suitable instructions and agreements.

7. International transfers

The controller gives preference to providers and infrastructure located in the European Economic Area. If processing involves a transfer to a third country, the safeguards provided by the GDPR will be used, including adequacy decisions, standard contractual clauses or other applicable measures.

8. Retention periods

Data is retained for the time required for the purposes for which it was collected:

• newsletter data until consent is withdrawn or erasure is requested, with a review of the validity and relevance of the relationship at least every 24 months;
• contact requests for the time required to provide a response and manage any resulting relationship;
• technical and security logs for the period strictly necessary to protect the site and manage incidents;
• data required to comply with legal obligations or defend a right for the periods prescribed by applicable law.

9. Rights of the data subject

In the circumstances provided for by Articles 15 to 22 GDPR, you may request:

• access to personal data;
• rectification of inaccurate data;
• erasure of data;
• restriction of processing;
• data portability;
• objection to processing based on legitimate interest or carried out for direct marketing;
• withdrawal of consent at any time.

Requests may be sent to admin@visiontovalue.pro. You also have the right to lodge a complaint with the Italian Data Protection Authority or another competent supervisory authority.

10. Cookies and external content

The site uses cookies and technologies required for operation, security and session management. Analytics tools, embedded content or third-party services may use their own technologies and process data under their respective notices. Before introducing tools that require consent, the site will provide an appropriate choice mechanism and update this notice.

Content embedded from other websites, such as videos or posts, may behave as though the visitor accessed the source website directly. Please consult the privacy notices of the relevant providers.

11. Children

Vision to Value content and services are not intentionally directed at children. If you believe that a child’s personal data has been submitted without appropriate authorisation, contact the controller to request verification and erasure.

12. Automated decision-making and profiling

No decisions are currently made solely through automated processing that produces legal or similarly significant effects on a data subject. No profiling is carried out for commercial purposes.

13. Updates

This notice may be updated to reflect regulatory, technical or organisational changes. The version published on this page, together with its update date, is the applicable version.