Privacy Policy

Effective Date: 27 March 2026

Data Controller: Vanguard Defense Consulting SA, 31 Gen. Ernest Brosteanu, Bucharest, Romania

Contact Email: info@vanguarddefence.com

Vanguard Defense Consulting SA (“we”, “us”, “our”) is committed to protecting the privacy and personal data of all individuals who visit our website https://www.vanguarddefence.com (the “Website”) or engage with our services. This Privacy Policy describes how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Romanian data protection legislation.

1. Scope

This Privacy Policy applies to all personal data collected through our Website, including via the contact form, as well as any personal data collected during direct communications (email, telephone, or in-person meetings) in connection with our consulting, brokering, and trade services in the defence and security sector.

2. Data Controller

The data controller is Vanguard Defense Consulting SA, with its registered office at 31 Gen. Ernest Brosteanu, Bucharest, Romania. For any questions or requests related to the processing of your personal data, you may contact us at info@vanguarddefence.com.

3. Personal Data We Collect

We collect the following categories of personal data through our Website contact form:

• Full Name
• Company / Organisation
• Email Address

In addition, when you browse our Website, we may automatically collect technical data including your IP address, browser type and version, operating system, referral source, and pages visited. This data is collected through cookies (see our Cookie Policy for details).

4. Purposes and Legal Bases

We process your personal data for the following purposes:

4.1 Responding to Enquiries

When you submit the contact form, we use your name, company, and email to respond to your enquiry and assess whether our services are relevant to your needs.

Legal Basis: Performance of pre-contractual steps at your request (Article 6(1)(b) GDPR) and our legitimate interest in managing business communications (Article 6(1)(f) GDPR).

4.2 Business Relationship Management

If a business relationship is established, we process your data to manage the engagement, including contract execution, regulatory compliance, and correspondence.

Legal Basis: Performance of a contract (Article 6(1)(b) GDPR) and compliance with legal obligations (Article 6(1)(c) GDPR).

4.3 Legal and Regulatory Compliance

Due to the regulated nature of the defence and security sector, we may be required to retain and disclose certain personal data to comply with obligations under Romanian law (including OUG 158/1999), EU export control regulations, and sanctions legislation.

Legal Basis: Compliance with a legal obligation (Article 6(1)(c) GDPR).

4.4 Website Analytics

We use Google Analytics to analyse Website traffic and improve our online presence. Data collected for this purpose is anonymised where possible.

Legal Basis: Your consent (Article 6(1)(a) GDPR), provided via the CookieAdmin consent banner.

5. Data Sharing and Recipients

We do not sell, rent, or trade your personal data. We may share your data with the following categories of recipients only as necessary:

• Service Providers: hosting providers, IT support, and analytics platforms (Google Analytics) that process data on our behalf under appropriate data processing agreements.
• Legal and Regulatory Authorities: Romanian and EU regulatory bodies, export control authorities, or law enforcement agencies where required by applicable law.
• Professional Advisors: legal counsel, auditors, or compliance consultants acting under a duty of confidentiality.

6. International Data Transfers

Your personal data is primarily stored and processed within the European Economic Area (EEA). Where data is transferred outside the EEA (for example, in connection with Google Analytics), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or reliance on an adequacy decision, including the EU-US Data Privacy Framework.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Contact form enquiries: retained for up to 12 months after your last communication with us, unless a business relationship is established.
• Contractual and business records: retained for the duration of the business relationship plus 5 years thereafter, or longer if required by applicable law.
• Analytics data: retained as configured in Google Analytics (default: 14 months).

After the applicable retention period, personal data is securely deleted or anonymised.

8. Your Rights Under GDPR

As a data subject, you have the following rights under the GDPR:

• Right of Access (Article 15): You may request confirmation of whether we process your personal data and obtain a copy of that data.
• Right to Rectification (Article 16): You may request correction of inaccurate or incomplete personal data.
• Right to Erasure (Article 17): You may request deletion of your personal data where there is no compelling reason for its continued processing.
• Right to Restriction (Article 18): You may request the restriction of processing in certain circumstances.
• Right to Data Portability (Article 20): You may request to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object (Article 21): You may object to processing based on our legitimate interests at any time.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@vanguarddefence.com. We will respond to your request within 30 days.

9. Right to Lodge a Complaint

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP):

Address: B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336, Bucharest, Romania

Website: https://www.dataprotection.ro

10. Security Measures

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These measures include encrypted communications (TLS/SSL), access controls, and regular security assessments. Given the sensitive nature of the defence sector, we apply heightened confidentiality and information security standards to all client data.

11. Children

Our Website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will take steps to delete that data promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised effective date. Material changes will be communicated through the Website. We encourage you to review this page periodically.

13. Contact

If you have any questions or concerns about this Privacy Policy or the processing of your personal data, please contact us:

Email: info@vanguarddefence.com

Address: 31 Gen. Ernest Brosteanu, Bucharest, Romania