Privacy policy

1. Introduction

This Privacy Policy describes how WOLSAL S.r.l. and Wolsal SAS as further identified in the Legal Notice (collectively “Volta”, “we”, “us”, or “our”) collect, use, and protect your personal data when you use our website voltasoftware.com and any localized versions, subpages, and content made available on or through that website (collectively, the “Website”), including when you submit enquiries, request a demo, subscribe to our newsletter, or provide recruitment-related information through forms or third-party tools linked from the Website, and our software platform and related services made available by Volta to authorized users under separate contractual documentation (the “Platform”).

We are committed to protecting your privacy in accordance with GDPR and applicable data protection laws.

2. Data Controllers

WOLSAL S.r.l.
Via Pola 11, 20124 Milano, Italy
VAT: IT13782220969

Wolsal SAS
17 Rue Dupin, 75006 Paris, France
VAT: FR14930719398

Contact: contact@voltasoftware.com

3. Scope

This Privacy Policy applies to visitors to our Website and users of our Platform, including employees of wholesale companies, distributors, B2B brands, commercial agents, and B2B customers, as well as persons who contact us through the Website, request a demo, subscribe to our newsletter, or apply for roles through forms linked from the Website.

4. Personal Data We Collect

When you request a demo or otherwise contact us through the Website, we may collect the information you choose to provide, such as your name, work email, phone number, company name, job title, and the content of your request. A demo request submitted through the Website does not itself create an account or grant access to the Platform. Any access to the Platform is provided separately under applicable contractual terms.

When you subscribe to our newsletter through the Website, we collect the information necessary to manage that subscription and send the requested communications.

When you submit recruitment-related information through forms or tools linked from the Website, we may collect the personal data and professional information you choose to provide, such as your name, contact details, CV or résumé, employment history, and any other information contained in your application materials.

When you create an account on the Platform, we collect:

Account Registration:

Full name
Email address
Phone number
Job title
Company name and information

Billing Information:

Company billing address
VAT number (if applicable)
Payment method information (processed by our payment provider)

4.2 When You Use Our Platform

Depending on how you use the Platform, the modules enabled for your organization, and the features you choose to use, we may collect and otherwise process:

Transaction Data:

Orders and quotes you create
Product catalogs and pricing
Customer and supplier records
Shipping addresses
Transaction history

Communication Content:

Emails sent through the Platform
Messages and chat conversations
Voice recordings (when using voice order features)
Documents you upload (PDFs, Excel files, images)

Support Interactions:

Support tickets and correspondence
Feedback you provide

Usage Information:

Pages and features you access
Session duration and frequency
Actions performed in the Platform

Technical Information:

IP address
Browser type and version
Device type and operating system
Time zone

Preferences:

Language selection
Notification settings
Interface customizations

4.3 What We Don’t Collect

We do not intentionally request or require biometric data, special categories of sensitive personal data, or payment card details through the Website or as part of standard account registration. Payment card details are handled by our payment service providers and are not stored by Volta.

5. How We Use Your Data

5.1 Platform service Provision (Legal basis: Contract performance)

Operating the Platform and processing transactions
Managing catalogs and pricing
Enabling communication between users
ERP synchronization and customer support

5.2 AI-Powered Automation (Legal basis: Contract performance & Legitimate interests)

Our AI may process orders from emails/messages/voice, extracts document information, generate recommendations, and automate operations. All AI processing occurs on EU-hosted infrastructure.

Transactional emails about your account
Product updates and feature announcements
Newsletters (only with consent)
Inquiry responses, including follow-up communications relating to demo requests and other Website enquiries

5.4 Platform Improvement (Legal basis: Legitimate interests)

Analyzing usage to improve features
Performance monitoring and security
Developing new features

5.5 Legal Compliance (Legal basis: Legal obligation & Legitimate interests)

Complying with legal obligations
Protecting rights and preventing fraud

We use recruitment-related personal data to review applications, communicate with candidates, manage hiring processes, and maintain recruitment records in accordance with applicable law.

6. Data Controller vs. Data Processor

6.1 When We Are the Data Controller

We control: website visitor data, demo request data, contact request data, newsletter subscription data, recruitment/application data submitted through the Website or linked tools, Platform account registration data, Platform usage analytics, and marketing communications data.

6.2 When We Are the Data Processor

For customer data you manage through our Platform, you are the Data Controller and we are the Data Processor. You determine processing purposes and means, we process per your instructions, and you’re responsible for lawful processing and privacy notices to your customers.

We share data only with:

7.1 Service Providers

Cloud hosting, analytics, email/communication services, payment processors, and AI infrastructure providers, as well as providers of website forms and lead-capture tools, newsletter and marketing communication tools, advertising and retargeting tools, visitor identification or B2B lead-generation tools, and, where applicable, recruitment or applicant-management tools. All providers are contractually bound to protect your data.

7.2 Legal Requirements

We may disclose data when required by law, to comply with legal processes, protect our rights, investigate fraud, or protect user safety.

7.3 Business Transfers

In case of merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity with the same privacy protections.

We may share data with third parties when you provide explicit consent.

8. International Data Transfers

All personal data is processed and stored within the European Union. We do NOT transfer data outside the EU/EEA. If future transfers become necessary, we will implement appropriate safeguards and inform you.

9. Data Security

We implement appropriate technical and organizational security measures to protect your personal data, including:

Encryption for data at rest and in transit
Secure access controls and authentication
Regular security monitoring and updates
Access limited to authorized personnel only
Employee confidentiality obligations
Incident response procedures

While we protect your data using industry best practices, no Internet transmission is completely secure. Report security vulnerabilities immediately to contact@voltasoftware.com.

10. Data Retention

We retain personal data only as long as necessary:

Account data: Duration of account plus reasonable period after deletion
Transaction data: As required by law (typically 10 years)
Communication data: Duration of business relationship plus reasonable period
Usage logs: Limited retention for analytics/security
Marketing data: Until opt-out or consent withdrawal

After retention periods, we securely delete or anonymize data. Some data may be retained longer when required by law or for legal claims.

You have the right to:

Access your personal data (Article 15)
Rectification of inaccurate data (Article 16)
Erasure / “Right to be Forgotten” (Article 17)
Restriction of processing (Article 18)
Data Portability (Article 20)
Object to processing (Article 21)
Withdraw Consent (Article 7)
Lodge a Complaint with supervisory authorities (Article 15)

Italy: Garante per la Protezione dei Dati Personali (www.garanteprivacy.it)
France: CNIL (www.cnil.fr)

12. Exercising Your Rights

Your full name and account email
Description of the right you wish to exercise
Relevant details to locate your data

We will respond within 30 days. In complex cases, we may extend by 60 days. We may request identity verification before processing requests. We may decline to process or limit certain requests under certain circumstances if they are manifestly unfounded or excessive, or if they adversely affect the rights and freedoms of others.

13. Cookies

We use cookies and tracking technologies on our Website and Platform. See our Cookie Policy for details on cookies used and how to manage them.

14. Third-Party Links

Our Platform may link to third-party websites or services. We are not responsible for their privacy practices. Review their privacy policies before providing data.

15.1 Subscription

If you subscribe to our newsletter, we use your email for product updates, industry insights, and occasional promotions.

15.2 Opt-Out

Unsubscribe anytime by:

Clicking “unsubscribe” in marketing emails
Contacting contact@voltasoftware.com
Updating account preferences

You’ll still receive transactional emails about your account even after opting out.

16. Changes to This Policy

We may update this Privacy Policy to reflect practice changes, legal requirements, or service updates at any time.

17. Contact Us

For privacy inquiries, contact:

WOLSAL S.r.l.
Via Paolo sarpi 42, 20124 Milano, Italy
Email: contact@voltasoftware.com

Wolsal SAS
17 Rue Dupin, 75006 Paris, France
Email: contact@voltasoftware.com