Privacy policy

The controller of personal data is Vantage Events. Office: 18 Uzeyir Hajibeyov Street, Baku, Azerbaijan; contact: contact@vstto.com, +994 51 567 82 17.

The Operator is the general legal successor of the group and operates under the names Vantage, Vantage Solutions, Vantage Event, Vantage Events, VantageTech, Vantage.rent, Technology Transfer Office. The same policy applies to personal data collected through any of those names.

This Privacy Policy explains what personal data is collected through vstto.com, for what purposes and on what legal basis it is processed.

The document has been prepared taking into account the Law of the Republic of Azerbaijan “On Personal Data” (11 May 2010, No. 998-IIIQ) and is aligned with international practice, including the principles of Regulation (EU) 2016/679 (GDPR).

Lawfulness and fairness: data is processed only where there is a legal basis.

Purpose limitation: data is used only for the specific purpose notified at the point of collection.

Minimisation: we do not request or collect more data than is necessary to answer an enquiry.

Storage limitation and security: data is not kept longer than necessary for the purpose and is protected against unauthorised access.

Brief (contact) form: name, email address, phone number (optional), organisation (optional), subject and text of the enquiry. These fields are completed by you.

Technical log data: the IP address of the request, date and time, and general information about the browser and operating system. This is processed temporarily for site security, prevention of abuse (spam, automated attacks) and rate limiting.

Browser storage: your language and theme (light/dark) choices are stored on your device so that the site looks the same on your next visit.

Site chat: the text of the message you write. We recommend that you do not enter personal or confidential information (ID numbers, bank details, third-party data) into the chat.

The Site does not intentionally collect special categories of personal data (health, religious belief, political opinion, biometric data, etc.).

Consent: by completing and submitting the form you consent to the processing of your data in order to receive a reply. You may withdraw consent at any time.

Steps prior to and performance of a contract: preparing a commercial proposal, project correspondence and documentation.

Legitimate interest: securing the Site, preventing abuse and defending legal claims. This interest is balanced against your rights and freedoms.

Legal obligation: retention duties arising from accounting, tax and archiving legislation.

To assess your enquiry, contact you and answer your question.

To prepare a commercial proposal, technical solution and cost estimate for the project.

To perform the work under a concluded contract and meet reporting requirements.

To keep the Site operational and secure.

We do not sell or rent your data and do not pass it to third parties for advertising. We do not send you marketing communications without separate consent.

The Site does not use advertising, profiling or tracking cookies. No third-party analytics system is installed.

The only storage used is strictly technical: language and theme preference, and session state. It stays on your device and is not used for marketing.

If an analytics tool is added in future, it will run only after your prior consent, and this document will be updated accordingly.

You can delete stored data at any time through your browser settings; this does not break the Site, it only resets your preferences.

Hosting provider: the Site runs on a leased server and requests pass through it.

Email service provider: an enquiry sent through the form is delivered to our corporate mailbox.

When the site chat is enabled: the text of your message is transmitted to the infrastructure of a third-party AI provider (Groq and/or Google) in order to generate a reply. If no key is configured for the chat, messages are answered from the site’s own internal answer base and are not transmitted anywhere.

Competent public authorities: only on the basis of an official request in accordance with the law and to the extent required.

The parties listed above process the data only on our instruction and for the purposes we determine.

The servers of our hosting, email and chat providers may be located outside the Republic of Azerbaijan. In that case the transfer is carried out taking into account the cross-border transfer requirements of the Law “On Personal Data”.

When working with such providers we rely on encrypted transmission (TLS) and on the provider’s own confidentiality commitments.

Enquiries answered but not resulting in a contract: up to 12 months, so that we can restore the correspondence history if you contact us again.

Enquiries that result in a contract, and project correspondence: for the term of the contract and thereafter for the retention period prescribed by law.

Technical log data: normally up to 30 days; if a security incident is under investigation, until the investigation is complete.

Once the period expires the data is deleted or anonymised so that a person can no longer be identified.

The Site runs over HTTPS (TLS); form data is transmitted through an encrypted channel.

Access to the admin panel is restricted by password and session control; only staff with a business need have access to enquiries.

Rate limiting and anti-automation protection are applied to the forms.

No technical measure guarantees absolute security. The risk inherent in transmission over the internet rests with the user; nevertheless, where the law requires it we will issue the relevant notifications about a data security incident.

You have the right to find out what data we hold about you and to receive a copy of it.

You may request rectification of inaccurate or incomplete data and deletion of data that is no longer necessary.

You have the right to object to processing, to request restriction of processing, and to withdraw a consent you have given; withdrawal does not affect the lawfulness of processing before it.

To exercise these rights, write to contact@vstto.com. We may ask for additional information to verify your identity. We respond within 30 (thirty) calendar days.

If you are not satisfied with our response, you retain the right to complain to the competent state authority for personal data protection.

The Site is addressed to a business audience and does not knowingly collect personal data from persons under 18.

If we establish that such data has been sent to us without the consent of a parent or legal representative, we delete it.

We do not take decisions producing legal effects concerning you, or similarly significantly affecting you, based solely on automated processing. The site chat provides information only and takes no decisions.

This document is updated as the Site’s functionality or the law changes. The current version is always published on this page, with the date of the last update shown above.

Where a change is material, we place an additional notice in a visible place on the Site.

For all questions about personal data: contact@vstto.com, +994 51 567 82 17. Office: 18 Uzeyir Hajibeyov Street, Baku, Azerbaijan.