1. General Provisions
1.1. This Personal Data Processing Policy has been developed in accordance with applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (GDPR), and defines the procedures for processing personal data, as well as the measures implemented by Veritas Advisory Group Limited (hereinafter referred to as the “Company”) to ensure its security. This GDPR Compliance Policy, including all terms and provisions, has been individually developed taking into account the Company’s business activities, internal rules, and operational model. The document has been prepared with the involvement of qualified professionals (including legal and audit specialists) and reflects the actual processes applied by the Company in its interaction with website visitors and clients.
1.2. The Company considers the protection of the rights and freedoms of individuals in the processing of personal data as a fundamental principle of its activities, including the protection of privacy and confidentiality.
1.3. This Policy applies to all information that the Company may obtain about users of the website www.veritas-advisory-group.com.
2. Rights and Obligations of the Company
2.1. The Company has the right to:
2.1.1. request accurate data from the user;
2.1.2. process data on lawful grounds;
2.1.3. independently determine data protection measures;
2.1.4. continue processing where lawful grounds exist even after withdrawal of consent, where permitted by law.
2.2. The Company is obliged to:
2.2.1. provide users with information about data processing;
2.2.2. comply with applicable legislation;
2.2.3. ensure the protection of personal data;
2.2.4. respond to data subject requests;
2.2.5. cease processing and delete data where required by law;
2.2.6. upon achievement of processing purposes or where processing is no longer necessary, delete, destroy, or anonymize data, unless further retention is required by law.
3. Rights of Data Subjects
3.1. The user has the right to:
3.1.1. obtain information about their personal data;
3.1.2. request rectification of data;
3.1.3. request erasure of data;
3.1.4. restrict processing;
3.1.5. object to processing;
3.1.6. withdraw consent;
3.1.7. lodge a complaint with a supervisory authority.
3.2. The user is obliged to:
3.2.1. provide accurate data;
3.2.2. notify the Company of any changes to their data.
4. Categories of Personal Data Processed
4.1. The Company may process the following data:
4.1.1. name and surname;
4.1.2. email address;
4.1.3. phone number;
4.1.4. data provided through inquiries;
4.1.5. technical data (IP address, device, browser);
4.1.6. cookie and analytics data.
4.2. Special categories of personal data are not processed, except where voluntarily provided by the user and necessary for the provision of services.
5. Principles of Data Processing
5.1. Data is processed lawfully and fairly.
5.2. Data is collected for specific purposes and not used beyond those purposes.
5.3. Only necessary data is processed.
5.4. Data accuracy and relevance are maintained.
5.5. Data is stored for a limited period.
5.6. Data security and confidentiality are ensured.
6. Purposes of Data Processing
6.1. Data is processed for the purposes of:
6.1.1. communication with users;
6.1.2. conclusion and performance of contracts;
6.1.3. provision of services;
6.1.4. compliance with legal obligations;
6.1.5. improvement of Website functionality.
7. Legal Basis for Processing
7.1. Data processing is based on:
7.1.1. user consent;
7.1.2. contractual necessity;
7.1.3. legal obligations;
7.1.4. legitimate interests of the Company.
7.2. By providing data through the Website, the user consents to this Policy.
8. Conditions of Data Processing
8.1. Data is processed based on user consent or other lawful grounds.
8.2. Data may be shared with third parties where necessary.
8.3. The Company does not disclose data without lawful grounds.
9. Data Processing and Storage
9.1. The Company implements appropriate measures to protect personal data.
9.2. Data is not disclosed to unauthorized persons.
9.3. Users may request updates or deletion of their data.
9.4. Processing is terminated upon achievement of purposes or withdrawal of consent, where applicable.
10. Operations with Personal Data
10.1. The Company performs:
10.1.1. collection and storage;
10.1.2. use and analysis;
10.1.3. transfer where necessary;
10.1.4. anonymization;
10.1.5. deletion and destruction.
11. Confidentiality
11.1. The Company ensures the confidentiality of personal data.
11.2. Data is not disclosed without lawful grounds.
12. Final Provisions
12.1. Users may request clarification by contacting: info@veritas-advisory-group.com
12.2. The Company reserves the right to amend this Policy.
12.3. The current version is available on the Website.