Privacy & Cookies

This notice explains what personal data we process through consulexa.com, why, who else is involved and what rights you have. It is provided pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR).

Data controller

CONSULEXA di Walter Galimberti (P. IVA 14496480964), based in Monza, Italy, is the data controller for personal data processed through this website. For any privacy-related request you can write to walter@consulexa.com.

No Data Protection Officer has been appointed, as the conditions of Article 37 GDPR do not apply.

What data we process

This website is a presentation site. It has no registration, no contact form, no newsletter and no chat: we collect nothing from you automatically.

• Data you send us. If you write or call using the contacts published here, we process what you choose to share — typically your name, email address, phone number and the content of your message.
• Technical logs. Our hosting provider records standard server data (IP address, browser type, date and time, page requested) to deliver the pages and to protect the site from abuse. We do not use these logs to identify visitors.

Legal basis

Each purpose rests on its own legal basis; we do not combine them.

• Replying to your enquiry: pre-contractual measures taken at your request (Art. 6(1)(b) GDPR). Without these data we cannot answer you.
• Managing a professional relationship: performance of the contract (Art. 6(1)(b) GDPR).
• Accounting and tax obligations: compliance with a legal obligation (Art. 6(1)(c) GDPR).
• Technical and security logs: our legitimate interest in keeping the site available and protected (Art. 6(1)(f) GDPR).

Who else processes your data

We rely on one provider, appointed as a data processor under Article 28 GDPR. We do not sell or disclose personal data to anyone.

• Cloudflare, Inc. — hosting, content delivery and protection of the site, operating on a global network with nodes in the European Union.

Transfers outside the European Union

Because our hosting provider operates a worldwide network, technical data may be processed outside the European Economic Area. Such transfers take place on the basis of the Standard Contractual Clauses approved by the European Commission and/or adherence to the EU–U.S. Data Privacy Framework.

How long we keep it

We keep data no longer than the purpose requires.

• Enquiries that do not lead to a relationship: 24 months from the last exchange.
• Contacts that become clients: for the duration of the relationship and for 10 years thereafter, as required by Italian civil and tax law.
• Technical logs: retained by the hosting provider for a short period for security purposes only.

Cookies

This site sets no cookies. It uses no profiling or advertising cookies, no analytics, no tracking scripts and no third-party content. Nothing is stored in your browser, so there is no consent to give and no banner to dismiss.

If analytics or other non-essential technologies are introduced in the future, this page will be updated and a cookie banner with granular consent will be added before they are activated.

Your rights

Under the GDPR you may exercise the following rights, free of charge, at any time:

• Access your data and obtain a copy (Art. 15).
• Have inaccurate data corrected or incomplete data completed (Art. 16).
• Request erasure when there is no longer a reason to keep them (Art. 17).
• Request restriction of processing while a claim is verified (Art. 18).
• Receive your data in a machine-readable format or have it transferred (Art. 20).
• Object to processing based on legitimate interest (Art. 21).
• Withdraw consent already given, without affecting the lawfulness of prior processing (Art. 7(3)).

How to exercise them

Write to walter@consulexa.com. We reply within one month, as provided by Article 12 GDPR. If a request is particularly complex we may take up to two further months, in which case we will tell you promptly and explain why.

If you believe the processing infringes the Regulation, you may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome — garanteprivacy.it) or bring the matter before the competent court.

Changes to this notice

If the way we process data changes, we update this page and the date at the top. Substantial changes will also be signalled on the site. This version is in force from 11 September 2026.