Data controller
Corrao Giovanni — email: corraoinvestiment@gmail.com. Any further identification data of the controller (registered office, VAT number) will be given in the Legal notice once provided.
Data processed
Through the contact form: name, email, optional organisation and country, request type, message and consent choices. For security purposes (anti-spam, rate limiting) the IP address is turned into a non-reversible cryptographic fingerprint kept for a limited time.
Purposes and legal basis
Replying to the request (pre-contractual measures / consent, Art. 6(1)(a)-(b) GDPR); protecting the site from abuse (legitimate interest, Art. 6(1)(f)); informational communications only with separate, optional consent (Art. 6(1)(a)), withdrawable at any time.
Retention
Requests are kept as long as needed to handle them and in any case no longer than 12 months, unless a contractual relationship starts. Anti-spam technical fingerprints are kept for at most 24 hours.
Recipients and infrastructure
The site is hosted on Cloudflare Pages; requests may be stored on Cloudflare (Workers KV) and, if configured, notified through an email delivery provider. These providers act as processors.
Data subject rights
Access, rectification, erasure, restriction, objection, portability and withdrawal of consent, by writing to corraoinvestiment@gmail.com. You may lodge a complaint with the competent supervisory authority (in Italy, the Garante per la protezione dei dati personali).
Website assistant
The D-COS NEXUS assistant runs in the browser: it follows the conversation using only the website's public content and does not send conversations to external servers or store them. This notice will be updated before any server-side language model is enabled.
Purchases and licences
For online purchases we process the data needed to perform the contract and to meet legal obligations (Art. 6(1)(b)-(c) GDPR): payer name and email, PayPal transaction and subscription identifiers, plan and modules purchased, date of the consent to immediate delivery and the licence issued. Payment is handled by PayPal: the website never receives card data. Order data are kept for the period required by tax obligations (normally 10 years).