Privacy Policy

1. Cookie categories

We use cookies and similar technologies grouped into three categories. Essential cookies are always active. Analytics and marketing cookies are used only after you give consent.

2. Marketing cookies disclosures

3. Consent requirements and choices

Our cookie banner offers three options: Accept All, Reject Non-Essential, and Manage Preferences. Analytics and marketing cookies are not activated unless you choose Accept All or enable the category in the preferences panel. Your selection is stored for 12 months in local storage. The banner can be dismissed without accepting. The banner links to this Privacy Policy for additional details.

Consent statement: By clicking Accept All Cookies, you consent to the storing of cookies on your device for analytics and advertising purposes, including personalized advertising delivered by Google and Meta. You may withdraw consent at any time through the cookie preferences panel without affecting the lawfulness of processing that occurred before withdrawal.

EEA and UK users: Users in the European Economic Area and the United Kingdom receive this consent notice in compliance with the General Data Protection Regulation and UK GDPR. Marketing and analytics cookies are activated solely after explicit, informed, freely given consent under GDPR Article 6(1)(a). Consent is recorded with a timestamp and may be audited upon request.

Withdrawal of consent: You may withdraw consent at any time by clicking Manage cookie preferences in the website footer or by clearing cookies via your browser settings. Withdrawal does not affect processing that occurred while consent was valid.

4. Data sharing with advertising partners

We share certain data with advertising partners for campaign delivery and measurement. Recipients and the data categories shared include the following:

• Google LLC: cookie identifiers, conversion events, anonymized behavioral data, and remarketing lists. Governed by Google's Privacy Policy at https://policies.google.com/privacy
• Meta Platforms, Inc.: pixel events, conversion data, and custom audiences. Governed by Meta's Data Policy at https://www.facebook.com/privacy/policy

We do not sell personal data. Where applicable, data transfers to Google and Meta occur under Standard Contractual Clauses. Data is processed for ad targeting and campaign measurement only and is not resold to unaffiliated third parties.

Google and Meta may use this data across their own platforms in line with their policies. We encourage users to review those policies.

5. Lead forms and contact requests

When you submit a contact form, request a quote, or register interest in our services, we collect the information you provide. This typically includes full name, email address, phone number, and your message.

Legal basis: consent under GDPR Article 6(1)(a) and, where a service relationship exists, performance of a contract under Article 6(1)(b).

Retention: form submission data is retained for up to 2 years from the date of submission unless a longer period is required by applicable law.

You may request deletion of your data at any time by contacting us at [email protected].

A link to this Privacy Policy appears adjacent to every submission button on this site. Submitting a form constitutes acknowledgment of this policy.

6. Google services and advertising

This website uses the following Google services:

• Google Analytics 4: collects anonymized usage data, device information, and behavioral signals. IP anonymization is enabled and data retention is set to 14 months. Users may opt out using the Google Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout
• Google Ads Conversion Tracking: records when a user completes a defined action, such as a form submission, after interacting with one of our ads. Data is used for performance measurement only.
• Google Remarketing: allows us to show ads to previous visitors across Google's network. Remarketing lists are not created from sensitive categories such as health, finance, religion, or sexual orientation.
• Google Tag Manager: deploys tracking tags. GTM itself does not collect personal data; it acts as a container for the tags listed above.

Learn about Google's advertising products at https://policies.google.com/technologies/ads

7. Meta advertising services

This website uses the Meta Pixel to measure the effectiveness of our advertising on Facebook and Instagram. The pixel may record page views, time on site, specific conversion events such as form submissions, and custom audience membership for retargeting.

We do not use the Meta Pixel to collect sensitive personal data or to target users based on health status, financial situation, religion, political views, sexual orientation, or any other special-category attributes restricted by Meta policies.

Meta acts as an independent data controller for data collected via its Pixel and processed within its platform. Refer to Meta's Data Policy at https://www.facebook.com/privacy/policy

To manage your ad preferences on Meta platforms, visit https://www.facebook.com/adpreferences/

8. Prohibited content self-declaration

This website does not promote, sell, or facilitate access to prohibited product or service categories, including weapons, controlled substances, counterfeit goods, unlicensed gambling, adult content, or services that make misleading health or financial claims. All advertising conducted through Google Ads and Meta Ads follows platform policies in full.

9. Landing page integrity

The content of this website accurately represents the services advertised. We do not use bait and switch tactics. The experience for visitors arriving from paid ads is identical to the experience for all other visitors. We do not use cloaking, automatic redirects, or content variation by traffic source.

10. Children’s privacy

This website is not directed at individuals under the age of 16. We do not knowingly collect personal data from minors. If we discover that data has been collected from a person under 16 without verifiable parental consent, we will delete it promptly. Contact us if you believe we have received data from a minor.

11. International data transfers

Personal data collected through this website may be transferred to and processed in countries outside the European Economic Area, including the United States, where Google LLC and Meta Platforms, Inc. are based.

These transfers may rely on Standard Contractual Clauses approved by the European Commission, which provide appropriate safeguards for personal data. You can request a copy of applicable SCCs by contacting us.

12. Your rights under GDPR

If you are located in the EEA or UK, you have the following rights:

• Access: request a copy of data we hold about you
• Rectification: correct inaccurate or incomplete data
• Erasure: request deletion, also known as the right to be forgotten
• Restriction: limit how we process your data
• Portability: receive your data in a structured, machine-readable format
• Objection: object to processing based on legitimate interest
• Withdraw consent: revoke consent at any time without penalty

To exercise any right, email [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your supervisory authority. EU users can find contacts at https://edpb.europa.eu and UK users at https://ico.org.uk

13. What data we collect

Depending on how you use our site, we may collect the following categories of data:

• Full name
• Email address
• Phone number
• IP address
• Browser type and version
• Device type and operating system
• Cookies and tracking identifiers
• Usage data, including pages visited, time on site, and click paths
• Form submission content such as your message or course preferences
• Conversion events including form submits, calls, or purchases where available

We collect information directly from you when you submit a form and automatically through cookies and similar technologies when you browse the site. We do not collect sensitive personal data.

14. Legal basis for processing

• Contact form data: consent under Article 6(1)(a) and contract performance under Article 6(1)(b) where relevant
• Analytics data: consent under Article 6(1)(a)
• Marketing and remarketing data: consent under Article 6(1)(a)
• Security and fraud prevention: legitimate interest under Article 6(1)(f)

Where we rely on legitimate interest, we balance our interests against your rights and implement safeguards such as minimal data collection and short retention periods for server logs.

15. Retention periods

• Contact form submissions: retained for 2 years
• Analytics data in GA4: retained for up to 14 months
• Marketing cookies for Google Ads: retained for up to 540 days
• Email communications: retained for the duration of the relationship plus 1 year
• Server logs: retained for 90 days
• Cookie consent records: retained for 3 years for audit purposes

When retention periods expire, we delete or anonymize the data in a secure manner.

16. Contact and company details

Controller and primary contact:

MASSIMO DALLAGLIO S.r.l.
Via Modena, 16, Buccinasco (MI), 20090, Italy
Phone: +39 02 8719 6205
Email: [email protected]

If you have questions about this Privacy Policy or our data practices, please contact us using the details above. We will respond promptly and aim to resolve concerns in a fair and transparent way.