CookieMi
Privacy policy
- Italiano
- English
Data controller and contact details
This privacy policy is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (the "GDPR") to anyone who interacts with the website cookiemi.com. It explains which personal data are processed, for which purposes, on which legal bases and for how long.
The data controller is:
- Web Solution Group Srl
- Via Monte Sabotino, 2 Bergamo BG
- VAT number 04598080168
- E-mail: mail@cookiemi.com
This policy covers this website only, and not any third-party websites that may be reached through hyperlinks, for which the controller accepts no responsibility.
Categories of personal data processed
Browsing data
In the course of their normal operation, the computer systems and software procedures that run this website acquire certain data whose transmission is inherent in the use of Internet communication protocols: IP address, date and time of the request, address of the resources requested, method used, response status code, size of the data returned, browser type and operating system. These data are used to deliver the website correctly, to produce aggregate statistics and to detect abuse or intrusion attempts.
Data collected through cookies and tracking technologies
This website uses technical cookies and, subject to consent, analytics and profiling cookies. The complete list, with purposes, durations and third-party controllers, is set out in the cookie policy, which forms an integral part of this document. You can change or withdraw your preferences at any time:
Data provided voluntarily through forms
Submitting a form published on this website involves the processing of the data you enter and of the technical data needed to prevent automated submissions.
Please do not enter, in free-text fields, data belonging to the special categories referred to in Article 9 GDPR (for example data concerning health or beliefs): such data are neither requested nor necessary to handle ordinary enquiries.
Newsletter subscription data
Subscribing to the newsletter involves the processing of your e-mail address and of the technical data collected at the time of subscription (date and time, IP address converted into a non-reversible code, browser type), which are kept as evidence of consent and as an anti-abuse measure.
Record of consent choices
For each choice made in the banner the following are recorded: date and time, categories accepted and refused, language, page address, version of the notice and of the categories presented, and the IP address converted into a non-reversible code. The record demonstrates that consent was obtained but does not make it possible to identify the user.
Children's data
This website is not directed at children under fourteen and does not knowingly collect their data. Anyone holding parental responsibility may report an inadvertent collection to mail@cookiemi.com and obtain its erasure.
Purposes of processing and legal bases
Each purpose has its own legal basis under Article 6(1) GDPR. Processing based on consent is never a condition for accessing the website, and consent can always be withdrawn.
| Purpose | Data processed | Legal basis |
|---|---|---|
| Delivering the website and its content, keeping it secure, stable and intact, and preventing misuse | Browsing data, technical cookies | Article 6(1)(f): the controller's legitimate interest in providing and protecting the service. For storing and accessing information on your device, Article 5(3) of the ePrivacy Directive: technical cookies require no consent |
| Replying to enquiries sent through the contact forms and managing the resulting correspondence | Data entered in the forms | Article 6(1)(b) where the enquiry relates to entering into or performing a contract or to pre-contractual steps; otherwise Article 6(1)(f): legitimate interest in replying to those who write |
| Sending the newsletter and information about the controller's content and initiatives | E-mail address, technical subscription data | Article 6(1)(a): specific consent given on subscription, which can be withdrawn from every message |
| Measuring how the website is used with analytics tools that do not qualify as technical cookies | Identifiers, usage and browsing data | Article 6(1)(a): consent, together with Article 5(3) of the ePrivacy Directive |
| Profiling for advertising purposes, message personalisation and campaign measurement through third-party tools | Identifiers, browsing behaviour, interactions with ads | Article 6(1)(a): consent, together with Article 5(3) of the ePrivacy Directive |
| Keeping evidence of the consent choices made in the banner | Date and time, categories, language, page, version of the notice, non-reversible code of the IP address | Article 6(1)(c): legal obligation to demonstrate consent and to account for the processing (Articles 5(2) and 7(1) GDPR) |
| Complying with legal, accounting and tax obligations and responding to requests from public authorities | Data required for compliance | Article 6(1)(c): legal obligation |
| Establishing, exercising or defending legal claims | Data relevant to the dispute | Article 6(1)(f): legitimate interest in protecting the controller's rights |
Where processing is based on legitimate interests, the controller has carried out a balancing assessment between those interests and the rights and freedoms of data subjects; its outcome can be requested at mail@cookiemi.com, together with the exercise of the right to object under Article 21 GDPR.
Recipients and processors
Data are processed by the controller's authorised staff, instructed under Article 29 GDPR, and may be disclosed to the suppliers of services that keep the website running. Suppliers processing data on the controller's behalf are appointed as processors under a contract compliant with Article 28 GDPR, which binds them to the controller's instructions and requires appropriate security measures.
Hosting is provided by AWS, with data hosted in Germania.
Data may also be processed, within the limits of their respective roles, by e-mail and messaging providers, by accounting, tax and legal advisers and, where required by law, by public authorities.
The third-party providers whose tools are present on this website and which act as independent controllers are listed below; their own privacy notices govern the processing they carry out:
As at the effective date of this document no third-party tool is recorded in the website inventory.
Personal data are not disseminated and are neither transferred nor sold to third parties for their own purposes.
Transfers to third countries
The controller gives preference to suppliers that process data within the European Economic Area. Where a transfer to a third country is nevertheless necessary, it takes place only if one of the conditions set out in Chapter V of the GDPR (Articles 44 to 49) is met: an adequacy decision of the European Commission (Article 45) or appropriate safeguards, normally the standard contractual clauses adopted by the Commission (Article 46(2)(c)), supplemented where necessary by additional technical, contractual and organisational measures identified after assessing the legal framework of the destination country.
You may obtain information about the safeguards in place and, where applicable, a copy of them by writing to mail@cookiemi.com.
Retention periods
Data are kept for no longer than is necessary for the purposes for which they were collected and, thereafter, for as long as required by legal obligations or by the need to establish or defend a legal claim. In particular:
- Browsing data and technical logs: for the time needed to diagnose faults and maintain security, according to the hosting service's settings, save for longer retention ordered by a judicial authority.
- Record of consent choices: 24 months, a period consistent with the need to demonstrate consent for as long as it produces effects.
- Cookies and tracking technologies: for the duration stated for each of them in the cookie policy; consent is in any case renewed when it expires.
- Data entered in contact forms: for the time needed to handle the enquiry and, where a contractual relationship follows, for the duration of that relationship and the subsequent limitation and record-keeping periods.
- Newsletter subscription: until consent is withdrawn or the subscription is cancelled; the technical data collected on subscription are kept for 90 days.
- Accounting and tax records: for the periods laid down by the applicable legislation.
Once those periods have elapsed the data are erased or irreversibly anonymised.
Whether providing data is mandatory
The provision of browsing data is inherent in the use of Internet protocols and involves no choice on the user's part.
Providing the data marked as mandatory in the forms is necessary in order to reply to your enquiry: without them the controller cannot respond. Providing optional data has no consequences for the handling of the enquiry.
Providing your e-mail address for the newsletter and giving consent to non-essential cookies are free and optional. Refusal does not prevent you from browsing the website: it merely means that the requested service is not provided, or that features depending on the technologies you did not enable are unavailable.
Automated decision-making and profiling
The controller does not carry out automated decision-making producing legal effects concerning data subjects or similarly significantly affecting them within the meaning of Article 22(1) GDPR.
The profiling carried out through the marketing tools described in the cookie policy is aimed solely at personalising advertising messages, requires the data subject's consent, can be withdrawn at any time and does not give rise to decisions of that kind.
Your rights and how to lodge a complaint
You may exercise at any time the rights granted by Articles 15 to 22 GDPR, and in particular the right to:
- obtain confirmation as to whether your data are being processed, access to those data and the information listed in Article 15;
- obtain the rectification of inaccurate data and the completion of incomplete data (Article 16);
- obtain the erasure of your data in the cases provided for in Article 17;
- obtain the restriction of processing in the situations set out in Article 18;
- receive the data processed on the basis of consent or of a contract in a structured, commonly used and machine-readable format and transmit them to another controller (Article 20);
- object, on grounds relating to your particular situation, to processing based on legitimate interests and, at any time and without having to give reasons, to processing for direct marketing purposes (Article 21);
- not be subject to decisions based solely on automated processing which produce legal effects or similarly significantly affect you (Article 22);
- withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal (Article 7(3)).
Requests should be sent to mail@cookiemi.com, stating the right you wish to exercise and enough detail to identify the data concerning you. The controller replies without undue delay and in any event within one month of receipt, a period that may be extended by two further months where necessary, taking into account the complexity and number of the requests (Article 12(3) GDPR). Exercising these rights is free of charge, except in the case of manifestly unfounded or excessive requests.
If you consider that the processing of your data infringes the GDPR you have the right to lodge a complaint with a supervisory authority under Article 77, in particular in the Member State of your habitual residence, place of work or of the alleged infringement, as well as the right to an effective judicial remedy (Article 79). The competent authority for this website is:
- Italian supervisory authority:
- Garante per la protezione dei dati personali
- Piazza Venezia 11, 00187 Roma (Italia)
- Tel. +39 06 696771 — protocollo@gpdp.it — protocollo@pec.gpdp.it
- www.garanteprivacy.it
Changes to this privacy policy
The controller may update this policy to reflect changes in the services offered, in its internal organisation, in the suppliers used, or in the applicable law and the guidance of the supervisory authorities. The version published on this page is the one in force; where the changes concern processing based on consent, consent is requested again before the new purposes are pursued.
This document relates to the website CookieMi (cookiemi.com) and is in force from 5 August 2026.
Note on this document
This document was generated automatically from a template and from the details entered in the management panel. Before publication it should be reviewed by a qualified professional, who can confirm that it matches the processing actually carried out.