MAXYMIZE - Software Development, SaaS and AI Automation
Home

Privacy Policy

Privacy Notice of MAXYMIZE Business

Last updated: 21 August 2026

This is a courtesy translation. In case of discrepancies, the Italian version of this privacy notice prevails.

1. Introduction

MAXYMIZE Business, based in Italy, VAT number 02747200695, run by Maximilian Giurastante, respects your privacy and is committed to protecting your personal data. This notice explains how we collect, use and protect your information when you visit our website www.maxymizebusiness.com and use our consulting services in AI, Blockchain and eCommerce.

2. Personal Data We Collect

2.1 Data you provide voluntarily

  • First and last name
  • Email address
  • Contact message
  • Information provided when booking a consultation

2.2 Data collected automatically

  • IP address
  • Browser and device information
  • Pages visited and time spent on them
  • Technical and preference cookies

Experience monitoring and session recording

This tool is currently not active and no session is being recorded. What follows describes how it would work if switched back on, in which case your consent would be requested.

If you consent to the «measurement» category, the site activates Datadog RUM, which collects interactions with the pages (clicks, scrolling, movement between sections, form interaction) and records a session replay on a share of visits. Its purpose is to find out where pages fail and fix them.

  • What is recorded: navigation path, interactions, approximate geographic area and device characteristics.
  • What is not recorded: text typed into form fields is masked at source, before transmission.
  • Retention: 30 days for session recordings, 15 days for other interaction data, then automatic deletion.
  • How to stop it: by withdrawing consent from the cookie preferences at the bottom of the page. Withdrawal stops collection and removes cookies already set.

3. Purposes of Processing

3.1 Primary purposes

  • Providing consulting services in AI, Blockchain and eCommerce
  • Replying to contact requests
  • Managing consultation bookings
  • Sending newsletters and commercial communications (with consent)
  • Improving the services we offer

3.2 Technical purposes

  • Operating the website
  • Security and fraud prevention (reCAPTCHA)
  • Optimising the user experience

4. Legal Basis

  • Consent: for newsletters and marketing communications
  • Performance of a contract: to provide the services you request
  • Legitimate interest: for website analysis and service improvement
  • Legal obligation: for tax and accounting requirements

5. Data Sharing

Your data may be shared with:

  • Brevo: email and newsletter management (France, European Union)
  • Google: reCAPTCHA and Calendar (United States, Data Privacy Framework)
  • Netlify: website hosting (United States, Data Privacy Framework)
  • Datadog: experience monitoring and session recording, — currently not active (data hosted in the European Union, company based in the United States: standard contractual clauses)
  • Spline: 3D rendering
  • Service providers: only where necessary to deliver the services

Artificial intelligence systems

This website contains no artificial intelligence system: none of its features, including the AI Act self-assessment tool, sends data to model providers. Browsing, contact forms and the self-assessment generate no request to any AI service.

We do use artificial intelligence tools to support our professional work, and therefore also when preparing replies to correspondence. In that case the provider is Anthropic (United States, standard contractual clauses), which processes data as a processor, does not use it to train its models and retains it only for as long as needed to deliver the service. We do not put documents or special category data into these tools without a specific reason and a legal basis, following the rules set out in our How we use AI page.

We do not sell, rent or share your personal data with third parties for commercial purposes.

6. Data Retention

  • Contact data: until consent is withdrawn, or 2 years
  • Consulting data: 10 years for tax obligations
  • Cookies: according to your browser settings

7. Your Rights

Under the GDPR, you have the right to:

  • Access: obtain information about your data
  • Rectification: correct inaccurate data
  • Erasure: request the deletion of your data
  • Restriction: restrict the processing
  • Portability: receive your data in a structured format
  • Objection: object to processing for marketing purposes
  • Withdrawal of consent: withdraw your consent at any time

To exercise these rights, please contact: info@maxymizebusiness.com

8. Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. We use SSL encryption, reCAPTCHA to prevent spam, and secure hosting through Netlify.

9. Minors

Our services are not intended for people under 18 years of age. We do not knowingly collect personal data from minors. If you become aware that a minor has provided us with personal data, please contact us immediately.

10. International Transfers

Some providers process data outside the European Union, each under its own safeguard: Google and Netlify adhere to the Data Privacy Framework, the adequacy decision for the United States; Datadog hosts data in the European Union but is a US company, so the transfer relies on standard contractual clauses; Anthropic, used only in professional work and not by this website, likewise operates under standard contractual clauses.

11. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy. We will inform you of any material changes by email or through a notice on the website. Continued use of the website after the changes constitutes acceptance of the new version.

12. Contacts

Data Controller

MAXYMIZE BUSINESS DI GIURASTANTE ROMANO MAXIMILIAN

Main office: Via Stefano Longanesi 25, 00146 Rome, Italy

Registered office: Via Delle Valli 57, 66010 Canosa Sannita (CH), Italy

CHAMBER OF COMMERCE OF CHIETI PESCARA

Tax code and VAT number: IT02747200695

The conditions requiring the appointment of a Data Protection Officer under Article 37 GDPR are not met. For any matter concerning personal data, the reference is the data controller at the contact details above.

Email: info@maxymizebusiness.com

Website: www.maxymizebusiness.com

For complaints regarding the processing of personal data, you may contact the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali): www.gpdp.it

13. Management of our social media channels

To schedule and publish content on our official social media channels (including the MAXYMIZE LinkedIn Page, Facebook, Instagram and X) we use a self-hosted instance of Postiz, open source software installed on infrastructure we own and accessible only to the owner of the business.

Through the platforms' official APIs we process:

  • the content we publish ourselves (text, images, videos and scheduling dates)
  • the access tokens required for authentication, stored on our own server
  • the performance metrics of our own posts (impressions, reactions, comments, clicks)

This data stays on our server. It is not sold, transferred, aggregated or shared with third parties, and it is not used for advertising, targeting or commercial profiling purposes. We do not manage third-party social media channels with this tool.

Where we receive comments on our posts, the identifying data of their authors is processed solely to allow us to reply, is not kept longer than necessary and is not used for any other purpose. Data obtained through the APIs is deleted when no longer needed or upon request of the platform itself.

14. Management of our Google Business Profile listings

To manage the Google Business Profile listings of our own businesses we use internal tools that connect to the official Google APIs. Access is granted through OAuth authentication with the account that owns the listings, and covers exclusively listings we own: we do not manage third-party listings with these tools.

Through the Google APIs we process:

  • the content we publish ourselves (descriptions, opening hours, images, updates)
  • the reviews we receive and our replies to them
  • listing performance statistics (views, searches, actions)
  • the access tokens required for authentication, stored on our own infrastructure

The data obtained stays on our infrastructure and is used solely to manage the presence of our own businesses on Google. It is not sold, transferred, aggregated or shared with third parties, and is not used for advertising or profiling purposes.

Identifying data contained in reviews is processed exclusively to allow us to reply. Replies to reviews are always reviewed and approved by a person before publication. Data obtained through the APIs is deleted when no longer needed or upon request by Google.