Privacy Policy

1. Data Controller

The Data Controller is Castaldo Solutions SRL, with registered office at Piazza IV Novembre, 4, 20124 Milan (MI), Italy, VAT: 13859590963.

For any privacy-related questions, you can contact us through our contact page.

2. Data collected and processing purposes

2.1 Navigation data

During your visit to our website, we automatically collect:

• IP address
• Browser type and operating system
• Pages visited and time spent
• Referring website

Purpose: Ensure website functionality, analyze performance, and improve user experience.

Legal basis: Legitimate interest (Art. 6, lett. f GDPR).

2.2 Contact data

When you fill out our contact form, we collect:

• Name and surname
• Email address
• Phone number (optional)
• Message

Purpose: Respond to your information requests and provide assistance.

Legal basis: Consent (Art. 6, lett. a GDPR).

2.3 Cookies and similar technologies

We use different types of cookies:

• Essential cookies: Necessary for website functionality
• Functional cookies: Google Fonts for typography
• Analytics cookies: Google Maps for map visualization
• Marketing cookies: Calendly for appointment booking

You can manage your cookie preferences through the banner or by clicking Manage Cookies.

3. Data retention

• Navigation data: Stored for 12 months
• Contact data: Stored for 24 months from collection or until consent withdrawal
• Cookies: Variable duration based on type (from session to 12 months)

4. Third-party sharing

Your data may be shared with:

• Service providers: Google (Maps, Fonts), Calendly for website functionality
• Competent authorities: Only upon request by authorities and within legal limits

We do not sell or transfer your personal data to third parties for commercial purposes.

5. International transfers

Some service providers (Google, Calendly) may transfer data to the United States. These transfers comply with European Commission adequacy decisions or appropriate contractual safeguards.

6. Your rights

In compliance with GDPR, you have the right to:

• Access: Obtain information about processed data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request data deletion ("right to be forgotten")
• Restriction: Limit processing in certain circumstances
• Portability: Receive data in structured format
• Objection: Object to processing for legitimate reasons
• Consent withdrawal: Withdraw consent at any time

To exercise these rights, contact us through our contact page.

7. Data security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction.

8. Minors

Our services are not directed to minors under 16 years of age. We do not knowingly collect personal data from minors under 16.

9. Privacy Policy changes

We reserve the right to modify this Privacy Policy. Changes will be published on this page with the update date.

10. Complaints

You have the right to file a complaint with the Italian Data Protection Authority if you believe that the processing of your data violates GDPR.

Italian Data Protection Authority: www.gpdp.it