Contact Database Notice
You are probably here because you found your name, or a colleague’s, in the Rolvue Contact Database. This page explains what we hold, why we hold it, and how to have it removed. It is the notice required by Article 14 of the GDPR for personal data that was not collected from you.
1. Why you are reading this
Rolvue helps students and junior candidates reach the right people at the finance firms they are applying to. To do that we keep a directory of professional contacts at the firms we monitor. We did not collect your details from you, so the law asks us to tell you ourselves rather than wait for you to ask.
2. What we hold about you
For each professional record: first and last name, the firm you work for, job title, department and seniority where available, a work email address, sometimes a work phone number, a LinkedIn profile URL, the office location, and a reliability score from our provider.
Nothing else. We do not hold home addresses or private contact details, we do not hold special categories of data, and we do not build behavioural profiles or scores about you.
3. Where it comes from
The records come from Hunter (hunter.io), a provider that collects business contact information published on the web, and from the corporate domain of the firm itself. We do not buy lists from data brokers and we do not scrape private networks or social profiles.
4. Our legal basis
We rely on legitimate interest, Article 6(1)(f) GDPR: putting a candidate in touch with the right person inside a firm is a normal part of professional life and is what both sides expect. The data is strictly professional, the volume any single person may receive is limited, and a message can be ignored or refused at no cost to you.
We balanced that interest against your rights before we started, and this page is part of the balance: you are told, and you can stop it with one line. Where we ever needed more than professional contact details, legitimate interest would not be enough and we would ask for your consent instead.
5. Who can see it
Only Rolvue customers with an active account, and one record at a time: contact details stay hidden in the interface until a customer spends a token on that specific record. The database is never sold, never published and never handed over in bulk.
Our Terms of Service forbid customers from copying, reselling or redistributing the database, and from using it for spam, harassment or any unlawful or misleading outreach. Accounts that do it lose access.
Providers acting for us — hosting and database infrastructure, email delivery — process the data only to run the Service, under contract.
We never write to you ourselves: when a customer contacts you, the message leaves their own mailbox with their name on it. Rolvue does not send messages on their behalf.
6. How long we keep it
A record stays while we monitor the firm it belongs to, and is refreshed from our provider periodically. When a firm stops being monitored, its records go with it.
If you ask to be removed, the record is deleted straight away and we keep only a one-way fingerprint of your address — not the address itself — so that the next update from our provider cannot bring you back.
7. Your rights
You can ask for access to your data, its correction, its erasure, a restriction of the processing, and a copy of it. You can also object to this processing at any time.
Objection is enough on its own: you do not have to give a reason and we will not ask for one. You can also complain to your supervisory authority — in Italy, the Garante per la protezione dei dati personali.
There is no automated decision-making and no profiling: a person decides whether to write to you, and you decide whether to reply.
8. Have your details removed
Write to [email protected] from the address you want removed, or use the Support page.
One line is enough: remove me from the Contact Database.
We act within 30 days and usually the same day. You do not need an account, you do not need to explain, and the removal is permanent: the fingerprint described above keeps the address out of every future update. If you are writing from a different address, tell us which one to remove.
9. Who to contact
The data controller is to be published, registered at to be published, VAT/company number to be published. Requests about this notice can be sent to contact to be published or submitted through the Support page.
How we handle the data of our own customers is described in the Privacy Policy.