Privacy & Cookie Policy

Last updated: November 4, 2026

This notice describes how the personal data of visitors to this site, or of those who use the contact form, is processed, pursuant to Articles 13 and 14 of EU Regulation 2016/679 (“GDPR”).

1. Data Controller

Gabriele Taviani — GTAVIANI Consulting

Viale dell'Innovazione 13, 20126 Milan (MI), Italy

Tax code: TVNGRL68T11H199Z · VAT: IT12220360965

Email: gtaviani@gmail.com

2. Data collected and purposes of processing

a) Data voluntarily provided via the contact form (name, email, message): used solely to respond to requests for consulting, collaboration or information. Legal basis: performance of pre-contractual measures at the data subject's request (Art. 6.1.b GDPR).

b) Browsing data and technical cookies: necessary for the site to function (e.g. storing the selected language, managing cookie consent). Legal basis: legitimate interest of the Controller (Art. 6.1.f GDPR); no consent required.

c) Data collected for statistical and marketing/retargeting purposes: through cookies and third-party tags, to analyze aggregate site usage and to show personalized advertising (retargeting) to users who have already visited the site, on the following platforms:

  • Google Ads and Google Analytics (Google Ireland Limited)
  • Meta Ads — Facebook/Instagram Pixel (Meta Platforms Ireland Limited)
  • LinkedIn Ads — LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company)

These tools record browsing behavior (pages visited, interactions) in pseudonymized form to build audience segments for targeted ads after leaving the site. No data suitable for directly identifying the user is collected beyond the cookie identifier itself. Legal basis: explicit consent (Art. 6.1.a GDPR), requested via the cookie banner on first visit.

3. Data recipients and sub-processors

Data may be processed by third-party providers acting as processors or independent controllers for their respective services: Tally (contact form management), Google Ireland Limited, Meta Platforms Ireland Limited, LinkedIn Ireland Unlimited Company. Each provider applies its own privacy policy, available on its respective website.

4. Transfer of data outside the EU

Google, Meta and LinkedIn may transfer collected data to servers in the United States or other non-EU countries. The transfer is based on Standard Contractual Clauses approved by the European Commission or other equivalent safeguards provided for in these providers' respective privacy policies.

5. Data retention period

Data provided via the contact form is retained for as long as necessary to handle the request, and in any case no longer than 24 months, unless otherwise required by law.

Analytics and marketing cookies have a maximum duration of 24 months, renewable upon the user's next consent — see the table in the Cookie Policy below for specific durations.

6. Data subject rights

At any time you may exercise the rights set out in Articles 15-22 of the GDPR: access to data, rectification, erasure, restriction of processing, data portability, objection to processing, and withdrawal of consent (without prejudice to the lawfulness of processing based on consent given before its withdrawal).

Requests can be sent to gtaviani@gmail.com. You may also lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali, www.garanteprivacy.it) or with your own country's supervisory authority.

7. Changes to this notice

The Controller reserves the right to update this notice over time. The version in force is always the one published on this page, with the last-updated date shown above.

Cookie Policy

Cookies are small text files that visited sites send to a user's device, where they are stored and then sent back to the same sites on the next visit. This site uses the following categories of cookies.

List of the main third-party cookies

Consent can be managed via the banner shown on your first visit to the site (Accept all / Reject non-essential) or at any time by changing your browser settings.