Privacy notice
This notice concerns alexasconsulting.com, the professional website of Alexa’s Consulting Hospitality.
Data controller and privacy contact
Paul-Nicușor Alexa — Alexa’s Consulting Hospitality.
Via Nazionale 52, 64018 Tortoreto (TE), Italy.
For questions about personal data and requests under the GDPR, contact info@alexasconsulting.com.
Information you provide
Information submitted through contact forms or email is used to review and respond to enquiries and, where applicable, manage professional relationships. The legal basis depends on the request, including pre-contractual steps requested by you or legitimate interests in responding.
Retention of email enquiries
Email enquiries that do not lead to a professional engagement are retained for 12 months. This period applies exclusively to those enquiries and does not extend to documentation relating to professional engagements.
Technical information and cookies
Technical data may be processed for website operation and security. See the Cookie Policy and consent management panel for information about cookies and preferences.
Service providers and recipients
The following services are used to operate the website and handle communications:
- Netsons: website hosting and domain email services, including delivery of notifications through SMTP.
- Cloudflare: domain DNS management, with proxy and security services limited to hosts where they are enabled. At the check on 25 October 2026, the main website and www use DNS without the proxy; Cloudflare Email Routing is not active.
- Google/Gmail: receipt and management of correspondence in the controller’s mailbox.
- Automattic/Jetpack and WordPress.com: administrative connection, sign-in, and website protection and management features. The Jetpack Stats module was disabled on 25 October 2026.
The contact form uses WPForms Lite, with notifications sent through WP Mail SMTP. At the check on 25 October 2026, WPForms Lite Connect entry backups were disabled; the Lite plan does not store form entries in the WordPress database. Copies received by email remain subject to the correspondence retention rules.
Processing and transfers outside the European Economic Area
Some services may involve processing outside the EEA, including in the United States. Data is therefore not necessarily processed exclusively in Italy or the European Union.
Netsons publishes a Data Processing Agreement (DPA) incorporated into its service contract. Cloudflare describes transfers and safeguards in its DPA, included in the subscription agreement as confirmed in the account dashboard, including standard contractual clauses and the Data Privacy Framework where applicable. Google describes adequacy mechanisms and standard contractual clauses in its data transfer frameworks. Automattic describes processing in its visitor privacy notice and transfer safeguards in the Jetpack GDPR documentation.
For information about recipients and applicable safeguards, or to request a copy, contact info@alexasconsulting.com. The Automattic DPA was completed with a typed-name signature and sent on 25 October 2026; confirmation of receipt and of any requirement for a different signature format is pending. Verification of the terms applicable to the other accounts remains in progress; the references above do not by themselves establish that these checks are complete.
Your rights
Subject to GDPR conditions, you may request access, rectification, erasure, restriction, portability or object to processing. You may lodge a complaint with the competent data protection authority.
Information pending verification
Contractual verification of the services listed, technical tracking tests in an anonymous session and retention periods for other processing activities remain to be completed. Please contact the email address above for further information.