Privacy Policy

Last updated: 12 July 2026

Impacta Consulting is committed to protecting your privacy and processing your personal data responsibly, transparently and securely. This Privacy Policy explains how personal data is collected, used, stored and protected when you visit the Impacta Consulting website, contact us, book an appointment, subscribe to communications or engage with our consulting services.

1. Data Controller

The data controller responsible for the processing of your personal data is:

Isabella Sofia De Gregorio
Operating under the name Impacta Consulting
Brussels, Belgium
Email: info@impacta.consulting

For any questions about this Privacy Policy or the processing of your personal data, please contact us at the email address above.

2. Scope of this Privacy Policy

This Privacy Policy applies to personal data processed by Impacta Consulting in connection with:

• visits to the Impacta Consulting website;
• enquiries submitted by email or through website forms;
• appointment and consultation bookings;
• newsletter or marketing subscriptions;
• proposals, contracts and consulting assignments;
• events, meetings, training sessions and other professional activities;
• relationships with clients, prospective clients, partners, suppliers and professional contacts.

When Impacta Consulting processes personal data exclusively on behalf of a client, the client may act as the data controller and Impacta Consulting as the data processor. In such cases, the processing is governed by the relevant agreement with the client and the client’s own privacy information.

3. Personal data we may collect

Depending on how you interact with Impacta Consulting, we may collect the following categories of personal data.

Contact and identification information

This may include your:

• name and surname;
• email address;
• telephone number;
• country or city;
• organisation and professional role;
• preferred language;
• social media or professional profile details.

Enquiry and communication information

This may include:

• information submitted through contact forms;
• emails, messages and correspondence;
• information provided during calls or meetings;
• feedback, requests and expressions of interest;
• records of our communications with you.

Appointment information

When you book an appointment, we may collect:

• your contact details;
• the date, time and purpose of the meeting;
• information you choose to provide about your organisation, project or needs;
• technical information required to organise an online or in-person meeting.

Please avoid providing sensitive personal data in appointment forms unless it is strictly necessary for your request.

Client and project information

When you engage Impacta Consulting, we may process:

• information required to prepare proposals and contracts;
• billing and invoicing information;
• information about your organisation, team, activities and projects;
• meeting notes, project documents, deliverables and correspondence;
• information necessary to provide, manage and evaluate the requested services.

Website and technical information

When you visit the website, certain technical information may be collected automatically, including:

• IP address;
• browser and device type;
• operating system;
• pages visited and time spent on the website;
• referring website or source;
• approximate location based on your IP address;
• cookie identifiers and consent preferences;
• security and diagnostic information.

Marketing preferences

Where you subscribe to updates or agree to receive communications, we may collect:

• your name and email address;
• your organisation or professional interests;
• your subscription and consent preferences;
• information about your interaction with our communications, where permitted.

Information from third parties and public sources

We may receive professional contact information from:

• clients, partners and mutual professional contacts;
• event organisers and networking platforms;
• publicly available professional websites or directories;
• social media and professional networking platforms;
• service providers acting on our behalf.

We will only use this information where we have an appropriate legal basis to do so.

4. Why we process your data and our legal bases

Impacta Consulting may process your personal data for the following purposes.

Responding to enquiries

We process your contact details and communications to respond to questions, requests and expressions of interest. The legal basis is taking steps at your request before entering into a contract or our legitimate interest in managing professional communications and responding to enquiries.

Managing appointments

We process your data to schedule, organise, confirm, reschedule and follow up on consultations and meetings. The legal basis is taking steps at your request before entering into a contract, performing a contract or our legitimate interest in managing our professional activities.

Providing consulting services

We process personal data to:

• assess your needs;
• prepare proposals and agreements;
• deliver consulting, strategy, communications, partnership, event or organisational support;
• manage projects and client relationships;
• monitor progress and provide agreed deliverables.

The legal basis is the performance of a contract or taking steps before entering into a contract.

Administration, invoicing and legal compliance

We process personal data to:

• issue and manage receipts;
• maintain accounting records;
• manage payments;
• comply with tax, accounting and other legal obligations;
• establish, exercise or defend legal claims.

The legal basis is compliance with legal obligations, performance of a contract and, where applicable, our legitimate interest in protecting and managing our business.

Website operation, security and improvement

We may process technical data to:

• operate and maintain the website;
• ensure website and information security;
• prevent fraud, misuse and unauthorised access;
• diagnose technical issues;
• understand how the website is used;
• improve its accessibility, content and performance.

The legal basis is our legitimate interest in operating a secure and effective website. Where non-essential cookies or similar technologies are used, the legal basis is your consent.

Marketing and professional communications

With your consent, or where otherwise permitted by law, we may send you:

• news and updates from Impacta Consulting;
• information about services, events or opportunities;
• invitations and relevant professional communications.

You may unsubscribe or object to direct marketing at any time by using the unsubscribe option provided in the communication or by contacting info@impacta.consulting.

Managing professional relationships

We may process professional contact information to maintain relationships with existing clients, former clients, partners, suppliers and other relevant stakeholders. The legal basis is our legitimate interest in developing and maintaining appropriate professional relationships, provided that this interest does not override your rights and freedoms.

Consent-based processing

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

5. Cookies and similar technologies

The Impacta Consulting website may use cookies and similar technologies.

Strictly necessary cookies may be used to ensure that the website functions correctly, remains secure and remembers essential settings. These cookies cannot normally be disabled through the website.

Optional cookies, including analytics, functionality or marketing cookies, will only be activated where required after you have provided your consent through the website’s cookie management tool.

You may accept, reject or change your cookie preferences at any time through the cookie settings available on the website. You may also configure your browser to restrict or delete cookies. Disabling certain cookies may affect some website functions.

Further details about the specific cookies used, their providers, purposes and duration should be made available through the website’s cookie settings or separate Cookie Policy.

6. Who we share personal data with

Impacta Consulting does not sell or rent your personal data. Where necessary, personal data may be shared with carefully selected recipients, including:

• email, cloud storage and document management providers;
• appointment scheduling and videoconferencing providers;
• newsletter and communication platforms;
• accounting, banking, insurance and payment service providers;
• legal, tax and professional advisers;
• subcontractors or independent professionals supporting a specific assignment;
• project partners, where necessary for the relevant activity and communicated to you;
• public authorities, courts or regulators where disclosure is legally required.

These recipients may act as independent data controllers or as processors acting on Impacta Consulting’s documented instructions. Where service providers process personal data on our behalf, we seek to use providers offering appropriate contractual, organisational and technical safeguards.

7. International data transfers

Some service providers may process or store personal data outside the European Economic Area. Where personal data is transferred to a country that has not been recognised as providing an adequate level of data protection, Impacta Consulting will use appropriate safeguards where required, such as:

• European Commission Standard Contractual Clauses;
• supplementary technical and organisational safeguards;
• another transfer mechanism recognised under applicable data protection law.

Information about the safeguards applicable to a specific transfer may be requested by contacting info@impacta.consulting.

8. How long we keep personal data

Impacta Consulting retains personal data only for as long as necessary for the purposes for which it was collected and to meet legal, contractual and operational requirements.

The following general retention criteria apply:

• enquiry and prospective-client information may normally be retained for up to 24 months after the last meaningful interaction;
• appointment information may normally be retained for up to 24 months after the appointment;
• client and project information is retained for the duration of the professional relationship and afterwards where necessary to comply with legal obligations or manage possible legal claims;
• contracts, invoices and accounting records are retained for the period required under applicable tax, accounting and commercial law;
• newsletter information is retained until you unsubscribe or withdraw your consent, subject to retaining limited information where necessary to respect your opt-out request;
• website security logs and technical information are retained only for the period reasonably necessary for security, maintenance and troubleshooting;
• consent records may be retained for as long as necessary to demonstrate compliance with applicable law.

At the end of the relevant retention period, personal data will be deleted, anonymised or securely archived where continued storage is legally required.

9. Sensitive personal data

Impacta Consulting does not normally request special categories of personal data through its website.

These categories may include information concerning:

• health;
• racial or ethnic origin;
• political opinions;
• religious or philosophical beliefs;
• trade-union membership;
• genetic or biometric information;
• gender identity or sexual orientation information.

Please do not send this type of information unless it is relevant and necessary for a specific service or activity. Where sensitive personal data must be processed, Impacta Consulting will ensure that an appropriate legal basis and additional condition for processing apply and that suitable safeguards are implemented.

10. Data Security

Impacta Consulting takes reasonable technical and organisational measures to protect personal data against:

• unauthorised access;
• accidental loss;
• alteration or destruction;
• unlawful disclosure;
• misuse or unauthorised processing.

Measures may include access controls, secure passwords, restricted permissions, secure cloud services, software updates, backups and appropriate confidentiality arrangements. No online transmission or storage system can be guaranteed to be completely secure. If Impacta Consulting becomes aware of a personal data breach, it will assess and manage the incident in accordance with applicable data protection law.

11. Your Data Protection Rights

Subject to the conditions and limitations established by applicable law, you may have the right to:

• receive information about how your personal data is processed;
• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of your personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• object at any time to direct marketing;
• withdraw your consent at any time;
• receive certain personal data in a structured, commonly used and machine-readable format;
• request the transfer of eligible data to another controller;
• lodge a complaint with a competent supervisory authority;
• not be subject to certain decisions based solely on automated processing that produce legal or similarly significant effects.

These rights are not absolute and may be limited where continued processing is required or permitted by law. To exercise your rights, contact info@impacta.consulting and clearly describe your request. We may request additional information where reasonably necessary to confirm your identity and protect your data. Requests will be handled within the time limits established by applicable data protection law.

12. Automated Decision-Making

Impacta Consulting does not use personal data to make decisions based solely on automated processing that produce legal effects or similarly significant effects concerning individuals. Should this change, appropriate information and safeguards will be provided as required by law.

13. Children’s Privacy

The Impacta Consulting website and consulting services are primarily intended for organisations and professionals. We do not knowingly collect personal data directly from children through the website. Where an activity involves minors, appropriate information, consent and safeguarding measures will be implemented in accordance with applicable law and the nature of the activity.

14. Third-party websites & platforms

The Impacta Consulting website may contain links to third-party websites, social media platforms or external services. Impacta Consulting is not responsible for the privacy practices, security or content of those third parties. You should review their privacy information before providing personal data or using their services.

15. Changes

Impacta Consulting may update this Privacy Policy to reflect:

• changes to our services or website;
• new technologies or service providers;
• changes to our data-processing practices;
• legal or regulatory developments.

The updated version will be published on the website with a revised “Last updated” date. Where changes are significant, additional notice may be provided where appropriate.

16. Complaints

We encourage you to contact Impacta Consulting first if you have concerns about how your personal data is processed.

You also have the right to lodge a complaint with the competent supervisory authority. In Belgium, the supervisory authority is:

Belgian Data Protection Authority
Rue de la Presse 35
1000 Brussels
Belgium

You may also contact the data protection authority in the European Economic Area country where you live, work or believe an infringement has occurred.

17. Contact

For questions, requests or concerns relating to privacy and personal data, please contact:

Isabella Sofia De Gregorio
Data Controller
Impacta Consulting
Brussels, Belgium
Email: info@impacta.consulting