Last updated: 5 October 2026
This Privacy Policy explains how personal data is collected and used when you visit www.carlogalli.com or get in touch through it. It is written in accordance with Regulation (EU) 2016/679 (GDPR) and, for visitors in the United Kingdom, the UK GDPR.
1. Data controller
The data controller is Carlo Galli, an independent professional based in Ronago (Como), Italy. You can contact me at cg@carlogalli.com for any question about your personal data.
2. What data I collect and why
| Source | Data | Purpose | Legal basis |
|---|---|---|---|
| Contact form | Name, email address, the content of your message | To reply to your enquiry and, where relevant, prepare a proposal | Pre-contractual steps and legitimate interest in answering enquiries (Art. 6(1)(b) and (f) GDPR) |
| Direct email or LinkedIn | Name, email address or profile details, message content | To handle the conversation you started | Legitimate interest / pre-contractual steps |
| Server and security logs | IP address, browser and device type, date and time of requests, pages requested | To deliver the site, keep it secure and prevent abuse | Legitimate interest (Art. 6(1)(f) GDPR) |
| Site analytics (Google Analytics 4) | Pseudonymous identifiers, pages viewed, approximate location, device and browser data | To understand how the site is used and improve it | Your consent (Art. 6(1)(a) GDPR). Not active until you accept statistics cookies |
| Cookie preferences | Your consent choices | To remember whether you accepted or declined cookies | Legal obligation and legitimate interest |
I do not collect special categories of personal data through this site, and I do not use your data for automated decision-making or sell it to third parties. Please do not include sensitive information in the contact form.
3. Who receives your data
Your data is shared only with providers that help me run the site and my business, acting on my instructions:
- Hosting provider: Aruba S.p.A. (Italy), which hosts the website and its databases.
- Email service provider used for the mailbox cg@carlogalli.com.
- Google Ireland Limited / Google LLC, only if you consent to statistics cookies (Google Analytics 4). Google Search Console is used to monitor how the site appears in search results and does not receive data about individual visitors.
I may also disclose data where required by law or by a competent authority.
4. Transfers outside the European Economic Area
Where a provider such as Google transfers data to the United States, the transfer relies on the EU–US Data Privacy Framework (and its UK extension) or on Standard Contractual Clauses, as applicable.
5. How long I keep your data
- Contact enquiries: up to 24 months after our last communication, unless we start working together. In that case, contract and invoicing records are kept for the period required by Italian law (generally 10 years).
- Analytics data: 14 months, after which it is automatically deleted.
- Server logs: for the limited period set by the hosting provider for security purposes.
- Cookie consent records: up to 12 months, after which you will be asked again.
6. Your rights
Under the GDPR and UK GDPR you have the right to access your data, have it corrected or erased, restrict or object to its processing, receive it in a portable format, and withdraw your consent at any time (withdrawal does not affect processing carried out before). To exercise any of these rights, write to cg@carlogalli.com. I will reply within one month.
You can change your cookie choices at any time through the cookie settings link on the site. See also the Cookie Policy.
7. Complaints
If you believe your data has been handled unlawfully, you have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali, or with the supervisory authority of your country of residence (in the UK, the Information Commissioner’s Office).
8. Children
This website is aimed at professionals and companies and is not directed at children under 16. I do not knowingly collect their data.
9. Changes to this policy
I may update this policy from time to time. The date at the top shows the latest revision, and material changes will be highlighted on this page.