Cookie policy
DRAFT NOT VALIDATED — this cookie policy is a proposal under review by the privacy consultant of CPE Italia S.p.A. and is not the final text. The parts in square brackets are still to be verified or decided.
This cookie policy explains which cookies and similar technologies the cpe-italia.com website uses, for which purposes, and how you can manage your choices. For the processing of data sent through the forms please read the privacy notice.
Version: [DA DECIDERE #27] — Last updated: [PUBLICATION DATE]
1. Data controller
CPE Italia S.p.A. — Via Dante Chiasserini 15, 20157 Milan (Italy) — VAT no. IT06735840156 — email info@cpeitalia.it — tel. +39 02 390961.
2. What cookies and similar technologies are
Cookies are small text files that a website stores on your device. Browser storage (localStorage and sessionStorage) and scripts that read information from the device work in a similar way. They may be first-party (set by CPE Italia) or third-party (set by other providers).
Technical tools, which are necessary for the website to work or to provide a service you have requested, do not require consent (Article 122(1) of the Italian Privacy Code, Legislative Decree 196/2003, implementing Article 5(3) of Directive 2002/58/EC). Statistics and marketing tools are used only with your prior consent (Article 122 of the Italian Privacy Code and Article 6(1)(a) GDPR).
3. How we collect your consent
- On your first visit a banner lets you accept all, reject all or choose by category (statistics, marketing). The accept and reject buttons are equally prominent.
- If you close the banner with the X you reject non-necessary cookies. Scrolling the page or continuing to browse does not count as consent.
- No Google tool is loaded before you make your choice. We use Google Consent Mode v2 in “basic” mode: Google tags are loaded only after consent and are told which categories you accepted.
- Your choice is stored in the
cpe_consensocookie for 182 days (about 6 months). You will be asked again before then only if the tools or purposes change significantly. [DA VALIDARE #23] - Your choice is recorded on your device with a random identifier and the date. [DA DECIDERE #24]
4. Technical tools (always active)
They are needed for the website to work, for form security or to provide a service you requested. None of these tools sends data to third parties for advertising purposes.
| Name | Type | Provider | Purpose | Duration |
|---|---|---|---|---|
cpe_consenso | first-party cookie | CPE Italia | stores your cookie choices (categories, random identifier of the choice, date, version) | 182 days |
cpe-lingua | localStorage | CPE Italia | remembers the language you chose with the language selector | until deleted from the browser |
cpe-ingresso | sessionStorage | CPE Italia | entry page and referring website, attached to the request only if you submit a form [DA VALIDARE #22] | until the tab is closed |
cpe-attribuzione | sessionStorage | CPE Italia | campaign parameters utm_* and landing page, attached to the request only if you submit a form; advertising click identifiers are stored here only with marketing consent (section 6) [DA VALIDARE #7] | until the tab is closed |
cpe-lead-da-misurare | sessionStorage | CPE Italia | after a form is submitted, keeps the request code for the thank-you page; it is used for measurement only if you accepted statistics or marketing cookies, and is then deleted [DA VALIDARE #22] | until first use or until the tab is closed |
cpe-scaricato-* | sessionStorage | CPE Italia | prevents the same catalogue from being downloaded or counted twice in the same session [DA VALIDARE #22] | until the tab is closed |
| Cloudflare Turnstile | third-party script and check | Cloudflare, Inc. | anti-spam and anti-abuse check on forms; the script is loaded only when you use a form [DA VALIDARE #6] | [DA VERIFICARE #6] |
5. Statistics cookies (only with your consent)
They help us understand, in aggregate form, how the website is used (pages visited, traffic sources).
| Name | Type | Provider | Purpose | Duration |
|---|---|---|---|---|
| Google Tag Manager | third-party script | loads measurement tools after consent; on its own it does not set cookies | — | |
_ga | cookie | Google (Google Analytics 4) | distinguishes browsers with a pseudonymous identifier for aggregate statistics | up to 2 years [DA VERIFICARE #23] |
_ga_<ID> | cookie | Google (Google Analytics 4) | keeps the session state | up to 2 years [DA VERIFICARE #23] |
cpe-lead-misurati | localStorage | CPE Italia | last 20 request codes already measured, so that the same conversion is not counted twice; written only with statistics or marketing consent | until deleted from the browser [DA DECIDERE #23] |
The Google Analytics 4 settings (data retention, Google Signals, data sharing) are being configured. [DA VERIFICARE #20]
6. Marketing cookies (only with your consent)
They are used to measure the effectiveness of our advertising campaigns and to link a request to the advertisement it comes from.
| Name | Type | Provider | Purpose | Duration |
|---|---|---|---|---|
_gcl_au | cookie | Google (Google Ads, Conversion Linker) | links visits and requests to ad clicks | 90 days [DA VERIFICARE #23] |
_gcl_aw, _gcl_gb | cookie | Google (Google Ads) | store the ad click identifier | 90 days [DA VERIFICARE #23] |
gclid, gbraid, wbraid, fbclid | parameters stored in cpe-attribuzione (sessionStorage) and sent with the request | CPE Italia | link your request to the Google or Meta advertisement you came from | until the tab is closed; for retention in the request archive see the privacy notice [DA VALIDARE #8] |
No other advertising tools are installed (for example Meta Pixel or LinkedIn Insight Tag). If we add any, we will update this page and ask for your consent again.
7. Third-party providers and transfers outside the EU
Google (Google Ireland Limited and Google LLC) and Cloudflare, Inc. may also process data in the United States. The transfer is based on the EU-U.S. Data Privacy Framework, where the provider is certified under it, or on the European Commission standard contractual clauses. [DA VERIFICARE #16 #20] Providers’ privacy notices: Google, Cloudflare.
8. How to change or withdraw your consent
You can change or withdraw your choices at any time using the “Cookie preferences” link at the bottom of every page or the button below. Withdrawal does not affect the lawfulness of processing carried out before it. When you withdraw consent, the _ga, _ga_* and _gcl_* cookies set on the website domain are deleted and Google tools are no longer loaded.
You can also block or delete cookies in your browser settings; in that case some features of the website may not work properly.
9. Your rights
You can exercise the rights under Articles 15–22 GDPR by writing to info@cpeitalia.it and lodge a complaint with the supervisory authority of the Member State of your habitual residence, place of work or place of the alleged infringement; in Italy this is the Garante per la protezione dei dati personali (www.garanteprivacy.it). Details are in the privacy notice.
10. Changes
We may update this cookie policy; the date of the last update is shown at the top. If the tools or purposes change significantly, we will ask for your consent again. In case of discrepancies between language versions the Italian version prevails. [DA DECIDERE #30]