Privacy Policy
Notice pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) — Last updated: 5 August 2026
1. Data Controller
C&P S.a.s.
Via Mazzini, 21 — 20073 Opera (MI), Italy
VAT no. 06339570969
Email: fbrusca@c-and-p.it
2. What data we process
This website is an informational showcase: it contains no registration forms, reserved areas or profiling systems. The data processed is limited to:
- Browsing data — the computer systems hosting this website acquire, in the course of their normal operation, certain technical data whose transmission is implicit in internet protocols (e.g. IP address, date and time of the request, page visited, browser used). This data is necessary for the operation and security of the website and is retained by the hosting provider only for as long as strictly necessary.
- Data you provide voluntarily — if you contact us by email, phone or WhatsApp using the details published on this website, we process the data you provide (name, contact details, message content) solely to respond to your enquiry.
3. Cookies and visit statistics
This website does not use cookies — neither first-party nor third-party. Fonts and graphic resources are hosted directly on our own server.
To understand how many people visit the site we use Cloudflare Web Analytics, a measurement tool that sets no cookies, performs no browser fingerprinting, stores no personal data and does not track visitors across websites. It collects only aggregated, anonymous data: number of visits, pages viewed, referring site, country and device type. Individual visitors cannot be identified.
To operate, the tool loads a small file from the servers of Cloudflare, Inc. (United States), which at that moment receives the connection's IP address without retaining it in identifiable form. Cloudflare acts as a data processor and the transfer is covered by the safeguards provided for under the Regulation. Further details are available in Cloudflare's Web Analytics privacy policy.
Since no cookies or visitor identifiers are used, no consent banner is required.
4. Legal basis and purposes
- Browsing data: legitimate interest of the Controller (Art. 6.1.f GDPR) in the proper operation and security of the website.
- Responding to enquiries: performance of pre-contractual measures taken at the data subject's request (Art. 6.1.b GDPR) and legitimate interest in handling correspondence.
- Aggregated visit statistics: legitimate interest of the Controller (Art. 6.1.f GDPR) in understanding how the website is used. As no cookies or identifiers are involved, consent is not required.
5. Newsletter (Unboxed)
Our monthly newsletter Unboxed is managed through Substack (Substack Inc., USA). Subscription takes place exclusively on the Substack website, which acts as an independent data controller for subscribers' data under its own privacy policy. You can unsubscribe at any time via the link included in every email.
6. Recipients and transfers
Your data is neither disclosed nor sold to third parties. It may be accessed only by the Controller's staff and by the technical providers hosting the website and email services, appointed as data processors where required. The only transfers outside the European Economic Area are those described in section 3 (visit statistics via Cloudflare) and section 5 (newsletter, for those who voluntarily subscribe).
7. Retention
Browsing data is retained for the technical time necessary. Correspondence is retained for as long as needed to handle the enquiry and any resulting business relationship, in compliance with statutory terms.
8. Your rights
Under Articles 15–22 GDPR you may at any time request access to your data, its rectification or erasure, restriction of processing, data portability, or object to processing, by writing to fbrusca@c-and-p.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
9. Changes
Any changes to this notice will be published on this page together with the date of the update.