Privacy notice
Last updated: 14 November 2026 — draft to be validated by a professional.
Data controller
Corrao Giovanni — email: corraoinvestiment@gmail.com. Any further identification data of the controller (registered office, VAT number) will be given in the Legal notice once provided.
Data processed
Through the contact form: name, email, optional organisation and country, request type, message and consent choices. For security purposes (anti-spam, rate limiting) the IP address is turned into a non-reversible cryptographic fingerprint kept for a limited time.
Purposes and legal basis
Replying to the request (pre-contractual measures / consent, Art. 6(1)(a)-(b) GDPR); protecting the site from abuse (legitimate interest, Art. 6(1)(f)); informational communications only with separate, optional consent (Art. 6(1)(a)), withdrawable at any time.
Retention
Requests are kept as long as needed to handle them and in any case no longer than 12 months, unless a contractual relationship starts. Anti-spam technical fingerprints are kept for at most 24 hours.
Recipients and infrastructure
The site is hosted on Cloudflare Pages; requests may be stored on Cloudflare (Workers KV) and, if configured, notified through an email delivery provider. These providers act as processors.
Data subject rights
Access, rectification, erasure, restriction, objection, portability and withdrawal of consent, by writing to corraoinvestiment@gmail.com. You may lodge a complaint with the competent supervisory authority (in Italy, the Garante per la protezione dei dati personali).
Website assistant
The D-COS NEXUS assistant runs in the browser with predefined answers and does not send conversations to external servers. Questions are not stored.