Privacy Policy

1. Data Controller

The Data Controller is Castaldo Solutions SRL, with registered office at Piazza IV Novembre, 4, 20124 Milan (MI), Italy, VAT: 13859590963.

For any privacy-related questions, you can contact us through our contact page.

2. Data collected and processing purposes

2.1 Navigation data

During your visit to our website, we automatically collect:

• IP address
• Browser type and operating system
• Pages visited and time spent
• Referring website

Purpose: Ensure website functionality, analyze performance, and improve user experience.

Legal basis: Legitimate interest (Art. 6, lett. f GDPR).

2.2 Contact data

When you fill out our contact form, we collect:

• Name and surname
• Email address
• Phone number (optional)
• Message

Purpose: Respond to your information requests and provide assistance.

Legal basis: Consent (Art. 6, lett. a GDPR).

2.3 Cookies and similar technologies

We use different types of cookies:

• Essential cookies: Necessary for website functionality
• Functional cookies: Google Fonts for typography
• Analytics cookies: Google Analytics 4 for anonymous and aggregate usage statistics, Google Maps for map visualization. These cookies help us understand how visitors interact with the site by collecting information anonymously.
• Marketing cookies: Calendly for appointment booking

You can manage your cookie preferences through the banner or by clicking Manage Cookies.

Google Analytics 4

This site uses Google Analytics 4, a web analytics service provided by Google LLC ("Google"). Google Analytics uses cookies to help us analyze how users interact with the site.

Data collected by Google Analytics 4:

• Pages visited and time spent
• Device and browser used
• Traffic source (e.g., Google search, social media, direct)
• Interactions with site elements (link clicks, scrolling, etc.)
• Aggregated demographics and interests (anonymous)

IP addresses are anonymized and not stored in full by Google Analytics 4.

Purpose: Understanding user behavior, improving site experience, optimizing content.

Legal basis: Explicit user consent (Art. 6(1)(a) GDPR).

Retention: Data is retained for 14 months by Google Analytics 4.

Data transfer: Data may be transferred and processed on Google servers in the United States. Google is compliant with the EU-US Data Privacy Framework.

You can opt out of Google Analytics by deselecting "Analytics Cookies" in the consent banner or by visiting Google Analytics Opt-out Browser Add-on.

For more information on how Google uses data, see Google Privacy Policy.

3. Data retention

• Navigation data: Stored for 12 months
• Contact data: Stored for 24 months from collection or until consent withdrawal
• Cookies: Variable duration based on type (from session to 12 months)

4. Third-party sharing

Your data may be shared with:

• Service providers: Google (Analytics 4, Maps, Fonts), Calendly for website functionality and analytics
• Competent authorities: Only upon request by authorities and within legal limits

We do not sell or transfer your personal data to third parties for commercial purposes.

5. International transfers

Some service providers (Google, Calendly) may transfer data to the United States. These transfers comply with European Commission adequacy decisions or appropriate contractual safeguards.

6. Your rights

In compliance with GDPR, you have the right to:

• Access: Obtain information about processed data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request data deletion ("right to be forgotten")
• Restriction: Limit processing in certain circumstances
• Portability: Receive data in structured format
• Objection: Object to processing for legitimate reasons
• Consent withdrawal: Withdraw consent at any time

To exercise these rights, contact us through our contact page.

7. Data security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction.

8. Minors

Our services are not directed to minors under 16 years of age. We do not knowingly collect personal data from minors under 16.

9. Privacy Policy changes

We reserve the right to modify this Privacy Policy. Changes will be published on this page with the update date.

10. Complaints

You have the right to file a complaint with the Italian Data Protection Authority if you believe that the processing of your data violates GDPR.

Italian Data Protection Authority: www.gpdp.it