Last updated: 25 July 2026
The Data Controller is Castaldo Solutions S.R.L., with registered office at Piazza Quattro Novembre 4, 20124 Milan (MI), Italy. VAT and Tax Code 13859590963, registered with the Milan Monza Brianza Lodi Companies Register, REA MI 2748845, share capital € 10,000.00 fully paid up.
For any privacy-related question you can write to gaetano@castaldosolutions.it or use our contact page.
Data Protection Officer (DPO): not appointed, as none of the cases set out in Art. 37 GDPR applies. Data protection requests are handled directly by the Controller at the address above.
During your visit to our website, we automatically collect:
Purpose: Ensure website functionality, analyze performance, and improve user experience.
Legal basis: Legitimate interest (Art. 6, lett. f GDPR).
When you fill out our contact form, we collect:
Purpose: Respond to your information requests, prepare quotes and provide assistance.
Legal basis: Performance of pre-contractual measures taken at your request (Art. 6(1)(b) GDPR). We do not use the data from the form to send you commercial communications unrelated to your request: should we want to in future, we would first ask for your specific, separate consent.
Nature of the provision: first name, last name and email are required in order to reply to you: without them we cannot follow up on your request. Phone, company and message are optional.
Recipients: data submitted through the contact form passes through our automation server (n8n, hosted on Hostinger infrastructure within the European Union) and is recorded in our CRM. The Partner Program and Referral forms are handled through the Web3Forms service, which forwards them to our mailbox.
We use different types of cookies on our website:
For detailed information about the cookies we use, their purposes and duration, please refer to our Cookie Policy. You can manage your preferences through the banner or by clicking .
Our forms are protected by Google reCAPTCHA v3, provided by Google Ireland Limited, which distinguishes human submissions from automated ones. The script loads only when you start interacting with a form, not when the page is simply opened.
reCAPTCHA collects your IP address, browser and device information and cursor movements within the page, and processes them to compute a trust score. We do not use this data to profile you or for marketing purposes.
Legal basis: the Controller's legitimate interest in protecting its systems from spam and automated submissions (Art. 6(1)(f) GDPR).
For details see the Google Privacy Policy and the Google Terms of Service.
Below are the third-party services that process data collected through this website. Analytics and marketing services are activated only after your consent through the cookie banner.
This site uses Google Analytics 4, a web analytics service provided by Google LLC ("Google"). Google Analytics uses cookies to help us analyze how users interact with the site.
Data collected by Google Analytics 4:
IP addresses are anonymized and not stored in full by Google Analytics 4.
Purpose: Understanding user behavior, improving site experience, optimizing content.
Legal basis: Explicit user consent (Art. 6(1)(a) GDPR).
Retention: Data is retained for 14 months by Google Analytics 4.
Data transfer: Data may be transferred and processed on Google servers in the United States. Google is compliant with the EU-US Data Privacy Framework.
You can opt out of Google Analytics by deselecting "Analytics Cookies" in the consent banner or by visiting Google Analytics Opt-out Browser Add-on.
For more information on how Google uses data, see Google Privacy Policy.
This site uses the LinkedIn Insight Tag, an analytics and marketing service provided by LinkedIn Corporation.
Data collected by LinkedIn Insight Tag:
Purpose: Conversion tracking from LinkedIn advertising campaigns, retargeting, audience demographic analysis, marketing campaign optimization.
Legal basis: Explicit user consent (Art. 6(1)(a) GDPR).
Retention: Data is retained for 90 days by LinkedIn.
Data transfer: Data may be transferred and processed on LinkedIn servers in the United States. LinkedIn is compliant with the EU-US Data Privacy Framework.
You can opt out of the LinkedIn Insight Tag by deselecting "Marketing Cookies" in the consent banner or by managing advertising preferences on your LinkedIn account.
For more information on how LinkedIn uses data, see LinkedIn Privacy Policy.
Your data is processed by the Controller's authorised personnel and may be disclosed to the following parties, appointed as data processors under Art. 28 GDPR where they process data on our behalf:
We do not sell your personal data and we do not transfer it to third parties for those third parties' own marketing purposes.
Some providers (Google, LinkedIn, Calendly, Cloudflare, Web3Forms) may also process data on servers located in the United States. These transfers take place on the basis of the European Commission adequacy decision of 10 July 2023 on the EU-US Data Privacy Framework, where the provider is certified under it, or on the basis of the Standard Contractual Clauses adopted by the European Commission, supplemented by additional measures. You may request a copy of the safeguards in place by writing to the addresses in section 1.
In compliance with GDPR, you have the right to:
To exercise these rights write to gaetano@castaldosolutions.it or use our contact page. We reply within one month of the request, a deadline that may be extended by two months for particularly complex requests, in which case we will inform you. Exercising your rights is free of charge.
We do not take decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you (Art. 22 GDPR). The results of the calculators and assessments available on this website are indicative estimates generated from the data you enter: they are neither an automated evaluation of you nor a decision about you.
We apply appropriate technical and organisational measures to protect your data from unauthorised access, alteration, disclosure or destruction: encrypted HTTPS connections across the whole website, access to management tools limited to authorised personnel and protected by multi-factor authentication, periodic backups and regular system updates.
Our services are aimed at businesses and professionals and are not directed to minors under 16 years of age. We do not knowingly collect personal data from minors under 16; if you believe a minor's data has been provided to us, write to us and we will delete it.
We reserve the right to modify this Privacy Policy. Changes will be published on this page together with the update date; in case of substantial changes affecting processing based on consent we will highlight them and, where necessary, ask for your consent again.
You have the right to file a complaint with the Italian Data Protection Authority if you believe that the processing of your data violates GDPR.
Italian Data Protection Authority: www.gpdp.it
If you have questions about this Privacy Policy or data processing, don't hesitate to contact us.
Contact Us