Privacy Policy.
This notice explains how personal data is processed when you visit this website or contact APEX Engineering Consulting.
Replace the controller identification below with the exact legal name/business form, registered or professional address and any VAT/tax details applicable to the activity. This template must reflect the services actually activated on the live site.
1. Data controller
The controller is APEX Engineering Consulting (“APEX”). Contact: contact@apexengineeringconsulting.com.
Registered/professional address: [TO BE COMPLETED BEFORE PUBLICATION].
2. Personal data we may process
Depending on how you use the site, APEX may process: contact and identification details voluntarily provided by you; the content of business enquiries; technical and security data generated by web requests (such as IP address, browser/device information, timestamps and server logs); language and cookie-consent preferences; and, only if optional tools are enabled with your consent, analytics or similar usage data.
Do not send special-category or unnecessary personal data through ordinary email unless specifically requested and an appropriate secure channel has been agreed.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Respond to enquiries and discuss requested consulting services | Steps at your request before entering into a contract and/or performance of a contract (Art. 6(1)(b) GDPR). |
| Manage professional/business correspondence and legitimate B2B follow-up | Legitimate interests (Art. 6(1)(f)), balanced against your rights and expectations. |
| Website operation, security, fraud/abuse prevention and essential logs | Legitimate interests in providing and securing the website (Art. 6(1)(f)); where applicable, legal obligations. |
| Optional analytics, marketing or other non-essential storage/access technologies | Your prior consent (Art. 6(1)(a) GDPR and applicable ePrivacy rules). Such technologies must remain disabled until consent. |
| Compliance with legal, tax, accounting or authority requirements | Legal obligation (Art. 6(1)(c)). |
Where processing is based on consent, you may withdraw it at any time without affecting processing carried out before withdrawal.
4. Retention
Data is kept only for as long as necessary for the relevant purpose. Enquiries that do not lead to a business relationship should be reviewed and deleted or anonymised when no longer reasonably needed; contractual, invoicing and compliance records may be retained for the periods required by applicable law. Security logs are retained for a limited period proportionate to security needs. Consent records are retained as necessary to demonstrate and respect your choices.
5. Recipients, processors and international transfers
Data may be processed by hosting, email, IT/security and other suppliers acting under appropriate contractual arrangements, strictly as necessary to provide the relevant service. The live configuration must identify any providers that actually receive personal data.
If personal data is transferred outside the European Economic Area, APEX will use a lawful transfer mechanism where required, such as an adequacy decision or appropriate safeguards including Standard Contractual Clauses.
6. Microsoft Clarity
APEX Engineering Consulting may use Microsoft Clarity, a behavioural analytics service provided by Microsoft, to understand how visitors use the website and to improve usability, content and performance. Clarity may collect information about page rendering and interactions such as clicks, scrolling, navigation and other usage events. Information is processed in accordance with Microsoft's applicable privacy terms.
For visitors in the European Economic Area, United Kingdom and Switzerland, Clarity's optional analytics storage/cookies are subject to the user's consent choice. Where Clarity is enabled, APEX configures the consent mechanism so that analytics storage is not granted before the visitor has consented to the Analytics category. Consent can be withdrawn at any time through Cookie settings.
Clarity is used for website analytics and user-experience improvement, not to make decisions producing legal or similarly significant effects about visitors. Sensitive form/input content should remain masked and must not intentionally be sent to analytics services.
7. Automated decisions
The website does not use personal data to make decisions producing legal or similarly significant effects solely through automated processing, unless this policy is updated before such functionality is introduced.
8. Your GDPR rights
Subject to the conditions of the GDPR, you may request access, rectification, erasure, restriction, data portability, or object to processing based on legitimate interests. You may withdraw consent at any time. Requests can be sent to contact@apexengineeringconsulting.com. You also have the right to lodge a complaint with the competent supervisory authority, including the Italian Data Protection Authority (Garante per la protezione dei dati personali) where applicable.
9. External links
The site may link to external websites or services. Once you leave the APEX website, the privacy and cookie practices of the external provider apply.
10. Changes to this policy
This policy may be updated when the website, providers or processing activities change. The version published here should be reviewed whenever new forms, analytics, advertising, embedded media or other third-party services are added.
Last updated: 19 August 2026.