Privacy Policy

Last updated: 21 August 2026

This Privacy Policy explains how Marco Giorgetti Consulting collects, uses, and protects personal data through the website www.marcogiorgetti.com and related services.

We collect as little personal data as possible. This website sets no cookies, shows no advertising, and does not track you across other websites.

1. Data Controller

The data controller is:

Marco Giorgetti Consulting — the business name of Marco Giorgetti, sole proprietor, trading as a natural person and not entered in the Swiss commercial register.
Via Odescalchi 14
6830 Chiasso, Switzerland
Email: consulting@marcogiorgetti.com
Website: www.marcogiorgetti.com

2. Personal Data We Collect

Website analytics

We use Umami to understand which pages are read and how the site performs. Umami sets no cookies and does not identify you individually. Each page view sends the page address, the page title, the site that referred you, your browser language and your screen size.

Umami’s servers also receive your IP address and browser user agent, as any web server does, and use them to derive your country, browser and device type. The IP address is never stored: it is converted into a one-way hash using a key that changes daily, which is what makes the resulting statistics impossible to trace back to you. We also collect anonymous page-speed measurements — loading time, layout stability, responsiveness — through the same service.

This data is pseudonymised rather than anonymous, so we treat it as personal data and describe it here in full. We do not use it to identify individual visitors, and we do not combine it with any other source.

Server logs

Our hosting provider keeps standard access logs, which include IP addresses, for security, abuse prevention and troubleshooting. We do not use these logs for analytics or marketing.

Call booking information

Bookings are handled by Proton Calendar, on Proton’s own website, not on ours. When you book a call or contact us in relation to our services, we may collect:

  • first name;
  • last name;
  • email address;
  • company name, if provided;
  • information you choose to provide in the booking form or message;
  • date and time of the scheduled call.

We use this information to manage the booking, communicate with you, understand your request, provide services, and follow up on your enquiry.

What we do not do

We do not profile you, and no decision affecting you is made by automated means. We do not sell personal data, and we do not share it for anyone else’s marketing purposes.

3. Purposes of Processing

We process personal data for the following purposes:

  • to operate, secure and improve the website;
  • to measure how the website is used and how it performs;
  • to respond to enquiries;
  • to schedule and manage calls;
  • to provide consulting and advisory services;
  • to follow up on a request you have made;
  • to send marketing communications, where you have asked to receive them;
  • to comply with legal, accounting and tax obligations.

4. Legal Bases for Processing

Where the General Data Protection Regulation, or GDPR, applies, we rely on the following legal bases:

  • Legitimate interests: to operate and secure the website, measure its usage and performance, and respond to business enquiries addressed to us.
  • Performance of a contract or pre-contractual steps: to schedule a call, assess your request, prepare a proposal, or deliver services.
  • Consent: for marketing communications. We send these only to people who have asked to receive them, and you can withdraw at any time.
  • Legal obligation: where processing is necessary to comply with applicable laws, including accounting and tax retention rules.

Where Swiss data protection law applies, we process personal data in accordance with the Federal Act on Data Protection and the principles of lawfulness, good faith, transparency, proportionality, purpose limitation, accuracy and data security.

5. Marketing Communications

We send marketing communications only with your prior consent. Booking a call or sending us an enquiry does not by itself sign you up for anything: we will reply to what you asked about, and nothing more.

Every marketing message identifies us clearly and carries a working unsubscribe link. You can also withdraw at any time by writing to consulting@marcogiorgetti.com. Withdrawing consent does not affect processing carried out before you withdrew it.

6. Cookies, Tracking and Your Device

This website sets no cookies, shows no advertising, and does not track you across other websites. Nothing here builds a profile of you.

The only thing we store on your device is your light or dark theme preference, kept in your browser’s local storage so the site looks the way you left it. It never leaves your browser and it is not used for analytics.

For measurement we use Umami, described in section 2. It sets no cookies and does not identify you.

If you would rather not be counted at all, enable “Do Not Track” in your browser. We honour it, and no measurement is sent.

Because we set no cookies and run no non-essential tracking, we do not show a cookie banner. If that ever changes — a new analytics tool, a CRM, an embedded video, a chat widget, an advertising pixel — this page will be updated first, and your consent will be requested before anything of the sort is loaded.

7. Service Providers and Recipients

We use a small number of providers to run the website, measure it, handle bookings and exchange email. They process personal data only on our instructions and only as necessary to provide their service to us, never for their own unrelated purposes.

  • Vercel Inc. (United States) — website hosting and delivery, including the server logs described above.
  • Umami Software, Inc. (a United States company) — cookieless website analytics. Our account is configured to use Umami’s European region, hosted in Germany, so the analytics data itself is processed in the EU.
  • Proton AG (Switzerland) — calendar booking and email.

We may also disclose personal data to professional advisers, or to authorities, where we are legally required to do so.

8. International Data Transfers

Where your data is processed depends on the activity:

  • Booking and email data — Switzerland. Held by Proton AG, a Swiss provider, under Swiss data protection law.
  • Analytics data — European Union. Our Umami account uses the European region, hosted in Germany. Umami Software, Inc. is a United States company, so access from the United States cannot be ruled out even though the data is stored in the EU.
  • Website hosting and server logs — United States. Vercel Inc. is established in the United States and personal data may be processed there.

Where personal data is transferred outside Switzerland or the EEA, we rely on the Standard Contractual Clauses approved by the European Commission and recognised by the Swiss Federal Data Protection and Information Commissioner, agreed as part of our data processing agreements with those providers, together with the technical measures described in section 2 — in particular the fact that IP addresses are never stored. You can request a copy of the relevant safeguards by writing to consulting@marcogiorgetti.com.

9. Data Retention

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy.

  • Analytics data: retained for 6 months, then deleted by our analytics provider. IP addresses are never stored at any point, so this data cannot be linked back to you.
  • Server logs: retained for a short period for security and troubleshooting, in line with our hosting provider’s standard settings.
  • Booking and enquiry data: retained for up to 24 months after our last contact, unless a client relationship begins.
  • Client and engagement records: retained for the duration of the engagement and afterwards as required by Swiss accounting and tax law, which is ten years for business records.
  • Marketing data: retained until you withdraw your consent or object, plus a short record of the withdrawal itself so that we can honour it.

10. Your Rights

Depending on your location and applicable law, you may have the right to:

  • request access to your personal data;
  • request correction of inaccurate personal data;
  • request deletion of your personal data;
  • request restriction of processing;
  • object to processing, including marketing communications;
  • withdraw consent where processing is based on consent;
  • request data portability where applicable;
  • lodge a complaint with a competent data protection authority.

To exercise your rights, contact us at consulting@marcogiorgetti.com. We reply within one month, and we will tell you if a request needs longer than that and why. Exercising these rights is free of charge.

Providing personal data is voluntary. If you choose not to provide the information needed to book or prepare a call, we may not be able to schedule it or respond usefully — but nothing on this website requires you to identify yourself in order to read it.

If you are in Switzerland, you may contact the Swiss Federal Data Protection and Information Commissioner. If you are in the European Union or European Economic Area, you may contact your local data protection authority.

11. Data Security

We use reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

However, no method of internet transmission or electronic storage is completely secure.

12. Children

This website and the related advisory services are intended for business users and are not directed to children.

We do not knowingly collect personal data from children.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

The updated version will be published on this page with a new “Last updated” date.

14. Contact

For questions about this Privacy Policy or how your personal data is processed, contact:

Marco Giorgetti Consulting
Via Odescalchi 14, 6830 Chiasso, Switzerland
Email: consulting@marcogiorgetti.com
Website: www.marcogiorgetti.com