This Privacy Policy describes how C&A and Partners ("we", "us", or "our"), operating the website C&A and Partners at https://candapartners.manus.space, collects, uses, stores, and protects personal data in accordance with Regulation (EU) 2016/679 (the "GDPR"). We are committed to protecting your privacy and handling your personal data with transparency, integrity, and respect.
Data Controller
The Data Controller responsible for the processing of your personal data in connection with this website is:
| Company / Controller | C&A and Partners |
| Registered Address | Viale Angelo Masini 20, Bologna, Italy |
| [email protected] | |
| Certified Email (PEC) | [email protected] |
| Telephone | +39 393 041 2923 |
| VAT / Tax Number | IT00381688886 |
| Website | https://candapartners.manus.space |
No Data Protection Officer (DPO) has been formally appointed. All privacy-related requests should be directed to: [email protected]
Categories of Personal Data Collected
Depending on how you interact with our website and services, we may collect and process the following categories of personal data:
2.1 — Navigation and Technical Data
When you visit our website, our servers automatically collect: IP address, browser type and version, operating system, referring URL, pages visited, date and time of access, and session duration.
2.2 — Data Provided via Contact Forms
When you submit an enquiry or consultation request, we collect: first and last name, email address, telephone number, country of residence, investor profile type, investment interests, and the content of your message.
2.3 — Newsletter and Marketing Communications
If you subscribe to our newsletter, we collect your email address and, where provided, your name and communication preferences. Subscription is always voluntary and subject to your explicit consent.
2.4 — Cookie and Tracking Data
Our website uses cookies and similar tracking technologies. For full details, please refer to our Cookie Policy.
2.5 — Commercial and Pre-Contractual Data
In the context of providing advisory services, we may collect additional personal and financial data necessary to assess your investment profile and fulfil our contractual and regulatory obligations.
Purposes and Legal Bases for Processing
We process your personal data only for specified, explicit, and legitimate purposes. The table below sets out the main processing activities, their purposes, and the corresponding legal bases under Article 6 GDPR:
| Purpose | Description | Legal Basis (Art. 6 GDPR) |
|---|---|---|
| Responding to enquiries | Processing contact form submissions and responding to your requests, questions, or consultation bookings. | Art. 6(1)(b) — Pre-contractual measures; Art. 6(1)(f) — Legitimate interest |
| Service delivery | Providing advisory, tax structuring, company formation, and real estate services you have engaged us for. | Art. 6(1)(b) — Contract performance |
| Client relationship management | Managing ongoing client relationships, communications, and account administration via our CRM. | Art. 6(1)(b) — Contract; Art. 6(1)(f) — Legitimate interest |
| Newsletter & marketing | Sending market insights, investment updates, and promotional communications to subscribers. | Art. 6(1)(a) — Consent |
| Legal and fiscal obligations | Complying with applicable laws, tax regulations, AML obligations, and regulatory requirements. | Art. 6(1)(c) — Legal obligation |
| Website analytics | Analysing website usage to improve content, performance, and user experience. | Art. 6(1)(a) — Consent; Art. 6(1)(f) — Legitimate interest |
| Security & fraud prevention | Protecting the website and our systems from unauthorized access, abuse, and fraudulent activity. | Art. 6(1)(f) — Legitimate interest |
Methods of Processing
Personal data is processed using electronic and automated tools, as well as paper-based systems where applicable. We implement appropriate technical and organizational security measures to protect your data against unauthorized access, alteration, disclosure, or destruction, in accordance with Art. 32 GDPR. Data is processed exclusively by authorized personnel and, where applicable, by designated data processors under Art. 28 GDPR agreements.
Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected. Upon expiry of the retention period, data is securely deleted or anonymized.
| Contact form data | Up to 24 months from last contact, unless a contractual relationship is established |
| Client / contractual data | Duration of engagement + 10 years (legal/fiscal compliance) |
| Newsletter / marketing data | Until withdrawal of consent |
| Navigation & log data | Up to 12 months |
| Cookie data | As specified in our Cookie Policy |
| AML / KYC records | Minimum 5 years as required by applicable AML regulations |
Recipients and Data Transfers
Your personal data may be shared with the following categories of recipients:
- Service providers: IT infrastructure, CRM, email marketing, and analytics tools acting as data processors under Art. 28 GDPR agreements
- Professional advisors: lawyers, accountants, and compliance consultants bound by confidentiality obligations
- Regulatory authorities: where required by applicable law
- Hosting provider: Manus Platform (manus.space)
International transfers: Where data is transferred outside the EEA, we ensure adequate safeguards including Standard Contractual Clauses (SCCs) or adequacy decisions under Art. 45 GDPR.
Cookies and Tracking Technologies
We use cookies and similar tracking technologies on our website. These include strictly necessary cookies (required for website functionality), analytical cookies (to understand user behaviour), and marketing cookies (for relevant advertising). You can manage your preferences at any time via our Cookie Consent banner or by visiting our Cookie Policy.
Your Rights Under GDPR
As a data subject, you have the following rights under the GDPR (Arts. 15–22). To exercise any of these rights, contact us at [email protected]:
Obtain confirmation of whether we process your data and receive a copy.
Request correction of inaccurate or incomplete personal data.
Request deletion of your data ('right to be forgotten') where applicable.
Request limitation of processing in certain circumstances.
Receive your data in a structured, machine-readable format.
Object to processing based on legitimate interest or for direct marketing.
Withdraw consent at any time without affecting prior lawful processing.
Lodge a complaint with your national supervisory authority.
Automated Decision-Making
We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on individuals, as referred to in Art. 22 GDPR.
Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately at [email protected].
Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.
Updates to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. We will notify you of material changes by posting the updated policy on our website with a revised "Last Updated" date. Continued use of our website following such changes constitutes acceptance of the updated policy.
Contact Us
For any questions, requests, or concerns regarding this Privacy Policy or our data processing practices, please contact:
C&A and Partners
Viale Angelo Masini 20
40121 Bologna (BO), Italia
Email: [email protected]
Phone: +39 393 041 2923
P.IVA / VAT: IT00381688886
Last updated: March 2026 · Effective date: March 2026
© C&A and Partners — All rights reserved.
We value your privacy
We use cookies to enhance your browsing experience, analyse site traffic, and personalise content. You can choose which categories to accept. Necessary cookies are always active as they are essential for the website to function properly. Cookie Policy — Privacy Policy