Privacy Policy
1. Who is responsible for your data
The data controller (titolare del trattamento) responsible for processing personal data collected through this website is:
- Legal name
- ConsulBuild di Vecchiato Edoardo — Ditta individuale
- Registered office
- Strada Cul de Ola, 254 P int. 1, 36100 Vicenza (VI), Italy
- P.IVA
- 04594370241
- Codice Fiscale
- [CF — to be filled in]
- PEC (certified email)
- [PEC — to be filled in]
- info@consulbuild.com
References to "we", "us", "our", or "Consulbuild" in this policy mean the entity above. No data protection officer (DPO) has been appointed, as our processing activities do not meet the thresholds of Article 37 GDPR.
2. What personal data we collect
We collect only the data we need to respond to your enquiry and deliver our services. Specifically:
Data you provide voluntarily through the contact form
- Full name
- Business name
- Email address
- Phone number (used optionally for WhatsApp follow-up)
- Trade or industry category
- Free-text message about your project (optional)
Data collected automatically
- Technical request data needed to serve the page (IP address, browser type, requested URL, timestamp). This is processed only at the time of the request and is not retained for analytics purposes.
Data we do not collect
We do not run advertising trackers, cookies for profiling, analytics scripts, social media pixels, or any third-party tracker on this website. No information about your browsing behaviour is collected by us.
3. Why we process your data, and on what legal basis
Each processing activity has a specific purpose and legal basis under Articles 6 and 9 GDPR:
| Purpose | Legal basis | Retention |
|---|---|---|
| Responding to your enquiry and following up to discuss our services | Pre-contractual measures at your request — Article 6(1)(b) GDPR | Until the enquiry is concluded, then up to 24 months |
| Sending your form data to our team by email (via Formsubmit.co) | Legitimate interest in operating the contact form — Article 6(1)(f) GDPR | Email retained in our inbox for up to 24 months unless deleted earlier |
| Forwarding leads to our internal phone via WhatsApp / SMS | Legitimate interest in business communication — Article 6(1)(f) GDPR | Message remains on the messaging service per its own data-retention rules |
| Defending or asserting legal claims arising from the enquiry | Legitimate interest — Article 6(1)(f) GDPR | Statutory limitation periods (max 10 years under Italian Civil Code) |
| Complying with tax, accounting and other Italian legal obligations | Legal obligation — Article 6(1)(c) GDPR | 10 years from the relevant tax year |
Providing the data marked as required in the form is necessary in order for us to contact you. If you do not provide it, we will not be able to process your enquiry. There is no other consequence.
4. Who receives your data
We do not sell your personal data and we do not share it for advertising. Your data is only accessed by us and by the following categories of processors and service providers, each acting on documented instructions under a written data processing agreement:
| Recipient | Role | Where data is processed |
|---|---|---|
| Formsubmit.co | Receives form submissions and forwards them to our email | United States |
| WhatsApp (Meta Platforms Ireland) | Optional channel through which we may receive a copy of the enquiry, if you click "Send via WhatsApp" | European Economic Area and United States |
| Hosting provider for this website | Stores the website files and processes incoming requests | To be confirmed at deployment |
| Italian tax advisor / accountant | For accounting and tax compliance if your enquiry becomes an invoiced engagement | Italy |
| Public authorities | Where required by law (tax authority, judicial authority, etc.) | Italy |
5. Transfers outside the European Economic Area
Some of the recipients listed above (notably Formsubmit.co and WhatsApp) process data in the United States or in mixed environments. Where this is the case, we rely on one or more of the following safeguards under Chapter V GDPR:
- The EU–US Data Privacy Framework, where the recipient is certified;
- EU Standard Contractual Clauses (Commission Decision 2021/914);
- Additional contractual and technical safeguards where appropriate.
You may request a copy of the safeguards in place by contacting us at the email address above.
6. How long we keep your data
The table in section 3 sets the maximum retention for each purpose. As a general rule:
- Enquiries that do not become a client: up to 24 months from the last meaningful contact, after which we delete the email thread and any associated records.
- Enquiries that become a client: data is retained for the duration of the commercial relationship plus up to 10 years for tax and accounting purposes, as required by Italian law.
- Technical request logs: not retained beyond what is strictly needed for the request and basic security purposes.
7. Your rights
Under Articles 15 to 22 GDPR, you have the right to:
- Access the personal data we hold about you and obtain a copy;
- Rectify inaccurate or incomplete data;
- Erase your data ("right to be forgotten") where the legal conditions are met;
- Restrict our processing of your data under certain conditions;
- Object to processing based on our legitimate interest;
- Portability — receive your data in a structured, machine-readable format;
- Withdraw consent at any time, where consent is the legal basis. Withdrawal does not affect the lawfulness of processing already carried out.
To exercise any of these rights, write to info@consulbuild.com. We will reply within 30 days, free of charge in most cases.
You also have the right to lodge a complaint with the Italian supervisory authority:
Garante per la protezione dei dati personali
Piazza Venezia 11, 00187 Roma, Italy
www.gpdp.it · protocollo@gpdp.it
8. Automated decision-making
We do not use your personal data for automated decision-making or profiling that would produce legal effects concerning you or significantly affect you.
9. Cookies
This website does not set any profiling, advertising or analytics cookies. Strictly necessary technical cookies may be used by the hosting provider to operate the site. For details, see the Cookie Policy.
10. Children
Our services are intended for businesses and adult professional contacts. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us so we can delete it.
11. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top of the page reflects the most recent revision. Material changes will be announced on this page; we recommend checking it periodically.
12. Contact
For any question about this policy or about how we process your data, write to info@consulbuild.com or by certified email to edoardo.vecchiato@pec.it.