Privacy notice

Privacy Policy

Effective from 27 September 2026

This notice explains how personal data is handled when you visit leonardonesa.it or submit an enquiry through the contact form.

1. Data controller

The controller is Leonardo Nesa, Via Giovanni Mayr 10, 20122 Milan (MI), Italy. For privacy-related requests, please write to info@leonardonesa.it.

2. Data we process

When you use the contact form, we may process your first name, last name, email address, telephone number (if supplied), and the information included in your message. The website also processes technical data needed for operation and security, and information collected through cookies and similar technologies in accordance with your choices.

The website does not offer account registration, newsletters, or personalised commercial profiling.

3. Purposes and legal bases

• Handling professional enquiries: replying to an enquiry, assessing a possible engagement, and taking steps requested before entering into a contract (Article 6(1)(b) GDPR) or, where applicable, on the basis of consent.
• Website security and continuity: preventing misuse, faults, and unauthorised access, on the basis of the controller's legitimate interest (Article 6(1)(f) GDPR).
• Visit and campaign measurement: using Google Analytics 4 and, if enabled, Google Ads conversion measurement only after consent to non-essential cookies (Article 6(1)(a) GDPR).

We do not use remarketing, visitor-based audience lists, or customer-list uploads for advertising campaigns.

4. Recipients and transfers

Data may be processed, where necessary, by technical providers for hosting and form handling, CookieYes (consent management), and Google (Analytics and, if enabled, Ads conversion measurement). Some providers may process data outside the European Economic Area. In those cases, transfers rely on an applicable adequacy decision or appropriate safeguards, including standard contractual clauses.

5. Retention

Enquiry data is retained for the time needed to manage the request and any legal obligations. Data collected through non-essential cookies is retained according to the durations shown in the CookieYes preference centre and the settings of the relevant services.

6. Cookies and choices

For information about cookie categories, their purposes, and how to change consent, read the Cookie Policy. You can update your choices at any time through the CookieYes button available on the website.

7. Your rights

Where the GDPR applies, you may request access, rectification, erasure, restriction, portability, or object to processing. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal. You may also lodge a complaint with the Italian data protection authority.

8. Automated decisions and updates

The website does not make decisions based solely on automated processing that produce legal or similarly significant effects on you. This notice may be updated when the website, the services used, or applicable law changes.