CRISTIES Brokerage

Privacy and cookie notice

Notice pending approval. Retention periods and provider details are being finalised.

Information about personal data processing under Article 13 of Regulation (EU) 2016/679 (GDPR).

Controller and contact

CRISTIES S.r.l., Via Arturo Toscanini 8, 26013 Crema (CR) – Italia. For personal data enquiries: cristies.brokerage@gmail.com.

Data collected and purposes

The form collects name, company name, email, optional telephone number, sector, type of mandate and a summary of the enquiry. These data are used only to assess the enquiry and contact the sender.

Do not include special categories of personal data, third-party information or trade secrets. The system may process technical data strictly necessary for security and operation, such as IP addresses and HTTP request data.

Legal basis and provision of data

For service requests and pre-contractual activities, the legal basis is Article 6(1)(b) GDPR. For contacts by representatives of legal entities, it is the legitimate interest in managing business relationships under Article 6(1)(f). Service protection is based on the legitimate interest in cybersecurity. These bases must correspond to the controller’s actual processing.

Fields marked * are necessary to handle the enquiry; telephone is optional. The form does not include newsletter subscriptions or marketing consent.

Recipients, infrastructure and transfers

The site is hosted by Vercel. Form enquiries are transmitted via Resend to CRISTIES’ Gmail mailbox. The application does not store enquiries in a database or log their contents.

Service locations and possible transfers outside the European Economic Area must be checked against the final configuration.

Retention

Retention periods for contacts, correspondence and technical logs must be defined and approved by the controller. The application does not archive enquiries; emails may be retained by the providers involved and in the recipient’s mailbox.

Application spam protection retains temporary counters in memory for one minute. Infrastructure logs follow the provider’s settings, which must be checked before publication.

Your rights

Within the limits of the GDPR, you may request access, rectification, erasure, restriction or portability of your data and object to processing based on legitimate interests. Contact the controller using the privacy contact above. You may lodge a complaint with the Italian Data Protection Authority.

Cookies and other tracking tools

The application sets no cookies, uses no analytics or profiling tools and embeds no external maps, videos or widgets. Images and fonts are served by the site. Fingerprinting is not used.

For this configuration there is no consent banner. Introducing tracking tools requires a fresh assessment, an updated notice and, where necessary, prior consent. Any cookies or tools introduced by the hosting provider must also be checked.

Automated decisions

No profiling or automated decision-making with legal or similarly significant effects takes place.