Privacy Policy

1. Data Controller

The data controller for personal data collected through this website (cafarfoilingsystem.com) is the CAFAR team — Francesco Belvisi and Marco Calatroni, co-holders of patent IT 102021000023279.

For any request regarding your personal data you can write to contact@cafarfoilingsystem.com.

2. What data we collect

We only collect the data you voluntarily provide through the contact form: name, email address, company/organization (optional) and the content of your message.

We do not collect special categories of data. Analytics cookies are only set if you accept them in the cookie banner.

3. Why we process it (purpose and legal basis)

Your data is used solely to respond to your enquiry and to evaluate possible collaboration, partnership or licensing opportunities relating to the CAFAR system.

The legal basis is your consent (Art. 6(1)(a) GDPR), given by ticking the consent box, and/or the taking of pre-contractual steps at your request (Art. 6(1)(b) GDPR).

4. Who processes the data (processors)

To operate the site and the form we rely on the following service providers, acting as data processors: Supabase (database/hosting), Resend (email delivery), Netlify (website hosting), Plausible Analytics (aggregate, cookieless statistics that do not identify you) and Google Analytics 4 (audience statistics, only after you accept analytics cookies).

Some providers may process data outside the EU; where this happens, transfers are covered by appropriate safeguards (e.g. EU Standard Contractual Clauses).

5. How long we keep it

We keep contact submissions only for the time needed to handle your request and any resulting relationship, after which the data is deleted or anonymized.

6. Your rights

You have the right to access, rectify, erase, restrict or object to the processing of your data, and the right to data portability. You may withdraw consent at any time.

To exercise these rights, contact contact@cafarfoilingsystem.com. You also have the right to lodge a complaint with your supervisory authority (in Italy, the Garante per la protezione dei dati personali).

7. Analytics & cookies

This site uses Plausible Analytics, a privacy-friendly tool that measures aggregate traffic without cookies and without collecting personal data. It runs on our legitimate interest in understanding site usage and requires no consent.

We also use Google Analytics 4 (measurement ID G-VE82YRPQFP), which does set cookies. It is loaded with Google Consent Mode v2 and all consent types are set to 'denied' by default: until you accept in the cookie banner, Google receives only anonymous, cookieless pings that cannot identify you. The legal basis is your consent (Art. 6(1)(a) GDPR).

We never grant advertising consent: ad_storage, ad_user_data and ad_personalization stay denied at all times, so no data is used for advertising, remarketing or profiling. Google may process data outside the EU under the appropriate safeguards mentioned in section 4.

You can change or withdraw your choice at any time via the 'Cookie preferences' link in the footer. Your choice is stored locally in your browser and can also be cleared by deleting your site data.