Privacy Policy
Last updated: 2026
1. Data Controller
Catena d'Oro ("Catena d'Oro", "we", "us", "our") operates the website catenadoro.com and is the data controller responsible for your personal data. We are committed to protecting your privacy and processing your data in compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and applicable national data protection legislation.
Data Protection Contact: privacy@catenadoro.com
2. Data We Collect
When you use our website or submit a consultation request, we may collect the following personal data:
| Data Type | Purpose | Legal Basis |
|---|---|---|
| Full name | Identify you and personalise your consultation | Consent |
| Email address | Contact you regarding your consultation request | Consent |
| Phone number | Specialist callback and account setup | Consent |
| IP address and device info | Security, fraud prevention and analytics | Legitimate interest |
| Cookie identifiers | Site functionality, analytics and marketing | Consent |
| Marketing parameters (UTM tags) | Measure advertising campaign performance | Legitimate interest |
| Browsing behaviour (pages visited, scroll depth, clicks) | Improve site performance and user experience | Legitimate interest |
3. How We Use Your Data
We process your personal data for the following purposes:
- To arrange a personalised consultation with a trading specialist
- To communicate with you about our services, including by phone and email
- To improve our website, content and user experience
- To measure the effectiveness of our marketing campaigns
- To comply with legal and regulatory obligations
4. Cookies
Our website uses cookies and similar technologies. You can manage your cookie preferences at any time using the cookie consent banner displayed when you first visit our site.
Essential Cookies
Required for the website to function properly. These cannot be disabled. They include session management, cookie consent preferences and security tokens.
Analytics Cookies
Help us understand how visitors interact with our website by collecting anonymous usage data. We use services such as Google Analytics to measure page views, scroll depth, time on site and traffic sources.
Marketing Cookies
Used to track advertising effectiveness and deliver relevant advertisements. These may be set by third-party advertising platforms including Meta (Facebook) and Google Ads.
5. Third-Party Services
We may share your data with the following categories of third-party service providers:
- Analytics providers — To measure website usage and performance (e.g. Google Analytics)
- Tag management — To manage marketing and analytics scripts (e.g. Google Tag Manager)
- Advertising platforms — To measure ad conversions and create audiences (e.g. Meta Pixel, Google Ads)
- Hosting and infrastructure — To serve website content securely and reliably
6. Data Retention
We retain your personal data for up to 36 months from the date of collection, or for as long as necessary to fulfil the purposes described in this policy. Lead data (name, email, phone) is retained for up to 36 months to facilitate follow-up consultations. Analytics and cookie data is retained for up to 26 months. You may request earlier deletion at any time by contacting us.
7. International Data Transfers
Some of our third-party service providers may process your data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your data in compliance with GDPR.
8. Your Rights Under GDPR
As a data subject under GDPR, you have the following rights:
- Right of access — Request a copy of the personal data we hold about you
- Right to rectification — Request correction of inaccurate or incomplete personal data
- Right to erasure — Request deletion of your personal data ("right to be forgotten")
- Right to restriction — Request that we limit the processing of your data in certain circumstances
- Right to data portability — Receive your data in a structured, commonly used, machine-readable format
- Right to object — Object to processing of your data for direct marketing or based on legitimate interests
- Right to withdraw consent — Withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal
To exercise any of these rights, please contact us at privacy@catenadoro.com. We will respond to your request within 30 days.
9. Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement.
10. Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements or other factors. The updated policy will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically.
11. Contact Us
For any questions or concerns about this privacy policy or our data practices, please contact our Data Protection team:
privacy@catenadoro.com