Personal data information under Article 13 of Regulation EU 2016/679
Controller and contact details
The controller is Cristina Gervasoni, an independent professional operating as CG Research – Scientific Innovation & Development, Via San Bernardino 24, 25032 Chiari (BS), Italy, VAT no. 04748800986. For information and rights requests: info@cgresearch.it
Browsing data
The systems delivering the website process technical data such as IP address, request date and time, requested resource, browser, operating system and error information. These data support delivery, troubleshooting and protection against abuse. The legal basis is the legitimate interest in service security and operation, Article 6(1)(f) GDPR
Contact enquiries
The form collects your name, email, optional organisation, selected area and message. It may include your selected field, language, source page and guided-path summary if you choose to transfer and submit it. Technical connection data are also processed when sending. We use the data to review and answer your enquiry and consider a possible engagement. The legal basis is taking precontractual steps at your request, Article 6(1)(b); for collaboration or information enquiries outside that scope, our legitimate interest in professional correspondence, Article 6(1)(f). The form does not subscribe you to a newsletter or marketing
Providing your data
Sending an enquiry is optional. Fields marked with an asterisk are needed to use the form and receive a response; you can instead email info@cgresearch.it. The acknowledgement checkbox records that you have read this notice and is not marketing consent. Do not enter health data, other special categories of personal data, passwords, unnecessary third-party information or confidential project documentation
Discover your need
The configurator processes answers in your browser using predefined rules and does not use an external AI model. Answers remain in page memory. Only when you choose to discuss your summary with CG Research is it temporarily saved in sessionStorage under cg-needs-brief and transferred to the contact form. The key is removed after retrieval; if the transfer is not completed, it remains for the tab session. Nothing is submitted to CG Research until you send the form. You can download a copy to your device
Providers and recipients
The controller and authorised people handling enquiries can access the data. IONOS services are used for hosting and email; Formspree, Inc. delivers the form, makes submissions available in its dashboard and notifies info@cgresearch.it. Providers process data under their respective roles and applicable terms; any professionals and advisers receive only what is necessary for their assigned work. The form does not publish or sell your data
Website hosting
The version on cgresearch.it is prepared for IONOS Hosting. Its documentation states that visitor technical data are retained for 8 weeks and may also be processed by IONOS SiteAnalytics. The website code embeds no analytics or advertising scripts. See the IONOS Hosting documentation
Transfers outside the European Economic Area
Using Formspree may involve processing in the United States and other countries where it or its subprocessors operate. Formspree states that it relies on European Commission Standard Contractual Clauses for transfers as a processor. Request information about applicable safeguards from info@cgresearch.it. See its privacy policy and security information. This website contact form is separate from the Swiss-server AI architectures described in AI & Trust
Retention
Enquiries and correspondence are kept for the time needed to handle the contact and any follow-up. After closure, unnecessary data are deleted, except information needed to document agreements, fulfil legal obligations or establish, exercise or defend legal claims, for the period applicable to those purposes. If an engagement follows, the relevant professional and administrative record-retention rules apply. The Formspree Free plan provides a 30-day submission archive according to the provider documentation: this does not delete emails received by the controller or describe every technical log or backup retention period at the provider. Hosting data follow the service periods described above
Your rights
Subject to GDPR conditions and limits, you may request access, rectification, erasure, restriction and portability where applicable. You may object to processing based on legitimate interests on grounds relating to your particular situation. Where processing relies on consent, you may withdraw it without affecting the lawfulness of previous processing. Contact info@cgresearch.it: requests are normally handled within one month, subject to permitted extensions. You may complain to the Italian data protection authority or the competent supervisory authority
Automated decisions and security
This website does not make decisions producing legal or similarly significant effects on individuals through solely automated processing. The configurator summary is indicative and is not a diagnosis or contractual offer. Proportionate measures are used to restrict unauthorised access and process necessary data only. Website and form security may involve technical anti-spam checks
Updates and cookies
This notice is updated when processing changes. See the Cookie policy for browser storage and external services. Last updated: 5 November 2026