English
Italiano1. Introduction
This Cookie Policy is drawn up pursuant to Article 13 of Regulation (EU) 2016/679 (“GDPR”) and the Measure of the Italian Data Protection Authority (Garante) of 10 June 2021 (“Cookie Guidelines”), and describes the use of cookies and tracking tools by the RFQ Smart platform.
| Data Controller | Stefano Corazza |
| privacy@rfqsmart.com |
2. What Cookies Are
Cookies are small text files that visited websites send to the user’s device (computer, tablet, smartphone), where they are stored and retransmitted to the site on the next visit. They are used to ensure the site functions correctly, improve the browsing experience, and collect statistical information.
In addition to cookies in the strict sense, this policy also covers other similar technical tracking tools (e.g. pixels, analytics scripts, technical LocalStorage).
3. Types of Cookies Used
3.1 Technical Cookies (necessary)
Technical cookies are strictly necessary for the platform to function and do not require the user’s consent under applicable law.
| Cookie | Purpose | Duration | Legal basis |
| Session cookie | Maintaining the login and browsing session | Session (until browser closes) | Performance of the service (Art. 6(1)(b) GDPR) |
| Authentication cookie | Identification of the authenticated user and account security | Session / max 30 days | Performance of the service (Art. 6(1)(b) GDPR) |
| CSRF cookie | Protection against Cross-Site Request Forgery attacks | Session | Legitimate interest (Art. 6(1)(f) GDPR) |
| UI preferences cookie | Storing interface preferences (e.g. language) | Max 12 months | Legitimate interest (Art. 6(1)(f) GDPR) |
3.2 Third-Party Analytics Cookies (Google Analytics 4)
✔ ACTIVE – The platform uses Google Analytics 4 for statistical analysis of visits. These cookies require the user’s consent.
RFQ Smart uses Google Analytics 4 (GA4), a web analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). This tool makes it possible to collect aggregated statistical information on the use of the platform in order to improve its features and the user experience.
Data collected via Google Analytics 4:
- pages visited and browsing paths
- session duration and access frequency
- device type, browser and operating system
- country/city of access (approximate geolocation via IP)
- traffic source (e.g. organic search, direct access)
- configured interaction events (e.g. clicks on specific features)
Protective measures adopted:
- IP Anonymization: the IP address is anonymized before any processing by Google
- Limited data retention: data is configured with the minimum available retention period (2 months for user data and events)
- Google Signals: may be enabled to allow remarketing and personalized advertising features via Google Ads. Activation is subject to the user’s explicit consent.
Data transfer to the USA:
Data collected through Google Analytics 4 is transferred to Google LLC servers in the United States. This transfer takes place in compliance with the safeguards provided for by the GDPR, in particular through the Standard Contractual Clauses (SCCs) adopted by Google. For more information: https://policies.google.com/privacy
| GA4 Cookie | Purpose | Duration | Controller |
| _ga | Distinguishes unique users (anonymous ID) | 2 years | Google LLC (USA) |
| _ga_[ID] | Maintains GA4 session state | 2 years | Google LLC (USA) |
| _gid | Distinguishes users within 24 hours | 24 hours | Google LLC (USA) |
| _gat | Limits request rate | 1 minute | Google LLC (USA) |
3.3 Advertising and Remarketing Cookies (Google Ads)
✅ ACTIVE – The platform uses Google Ads for marketing and remarketing activities. These cookies require the user’s explicit consent and are activated only after consent is given via the cookie banner.
RFQ Smart uses Google Ads, an advertising service provided by Google LLC, for the following purposes:
- showing advertisements to users who have already visited the platform (remarketing)
- measuring the effectiveness of advertising campaigns (conversion tracking)
- optimizing campaigns based on user behavior
| Cookie | Purpose | Duration | Controller |
| _gcl_au | Ads campaign conversions and performance | 90 days | Google LLC (USA) |
| IDE | Remarketing and personalized advertising (DoubleClick) | 13 months | Google LLC (USA) |
| _gac_[ID] | Linking GA4–Google Ads conversions | 90 days | Google LLC (USA) |
| DSID | Identifies logged-in users for personalized ads | 2 weeks | Google LLC (USA) |
Data collected through Google Ads is transferred to Google LLC servers in the United States in compliance with GDPR safeguards (SCCs). To manage advertising preferences: https://adssettings.google.com
3.4 Advertising Cookies – Meta Pixel (Facebook/Instagram)
✅ ACTIVE – The platform uses Meta Pixel, provided by Meta Platforms Ireland Limited. These cookies require the user’s explicit consent and are activated only after consent is given via the cookie banner.
RFQ Smart uses Meta Pixel for the following purposes:
- showing advertisements to users who have already visited the platform on Facebook and Instagram (remarketing)
- measuring conversions generated by Meta advertising campaigns
- creating custom and lookalike audiences to optimize campaigns
| Cookie | Purpose | Duration | Controller |
| _fbp | Identifies the browser for conversion tracking | 90 days | Meta Platforms Ireland Ltd (IE/USA) |
| _fbc | Stores the last click on a Meta ad | 90 days | Meta Platforms Ireland Ltd (IE/USA) |
| fr | Personalized advertising and remarketing on Facebook/Instagram | 90 days | Meta Platforms Ireland Ltd (IE/USA) |
| datr | Security and integrity of the Meta session | 2 years | Meta Platforms Ireland Ltd (IE/USA) |
Data collected via Meta Pixel may be transferred to Meta servers in the United States in compliance with GDPR safeguards (SCCs). To manage Meta advertising preferences: https://www.facebook.com/adpreferences/
GDPR note: Meta Platforms Ireland Limited is considered a joint controller for the data collected through Meta Pixel. A Joint Controller Agreement is available pursuant to Art. 26 GDPR: https://www.facebook.com/legal/controller_addendum
3.5 Advertising Cookies – LinkedIn Insight Tag
✅ ACTIVE – The platform uses LinkedIn Insight Tag, provided by LinkedIn Ireland Unlimited Company. These cookies require the user’s explicit consent and are activated only after consent is given via the cookie banner.
RFQ Smart uses LinkedIn Insight Tag for the following purposes:
- showing advertisements to users who have already visited the platform on LinkedIn (B2B remarketing)
- measuring conversions generated by LinkedIn campaigns
- analyzing the professional characteristics of visitors (industry, role, company size) in aggregated and anonymous form
| Cookie | Purpose | Duration | Controller |
| li_fat | LinkedIn conversion tracking and remarketing | 30 days | LinkedIn Ireland Unlimited Co. (IE/USA) |
| UserMatchHistory | User ID synchronization for remarketing | 30 days | LinkedIn Ireland Unlimited Co. (IE/USA) |
| bcookie | Browser identification for security and functionality | 2 years | LinkedIn Ireland Unlimited Co. (IE/USA) |
| lidc | Datacenter selection and request optimization | 24 hours | LinkedIn Ireland Unlimited Co. (IE/USA) |
| bscookie | Secure authentication for logged-in LinkedIn users | 2 years | LinkedIn Ireland Unlimited Co. (IE/USA) |
Data collected via LinkedIn Insight Tag may be transferred to LinkedIn servers in the United States in compliance with GDPR safeguards (SCCs). To manage LinkedIn advertising preferences: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
3.6 Other Third-Party Profiling Cookies
❌ NOT USED – There are no other third-party profiling cookies beyond those described in sections 3.3, 3.4 and 3.5. Should additional tools be introduced, this policy will be updated and specific consent will be requested before activation.
3.7 Future Tracking Tools (optional)
The platform may integrate additional analytics tools in the future. Should such tools be activated, this Cookie Policy will be updated with the relevant information and, where required, the user’s consent will be obtained via the cookie banner before activation.
4. Consent Management (Cookie Banner)
On first accessing the platform, users are shown a cookie banner that allows them to:
- accept all cookies (technical, analytics, and Google Ads, Meta and LinkedIn advertising cookies)
- reject non-necessary cookies (accepting only technical cookies)
- manage preferences granularly by category: analytics, Google Ads, Meta Pixel, LinkedIn Insight Tag
Preferences expressed can be changed at any time by accessing the “Cookie Settings” section available in the platform’s footer.
Refusing or withdrawing consent to analytics cookies does not affect the functioning of the platform: technical cookies continue to operate regardless of the choice made.
5. Browsing Data
The computer systems used to operate the platform automatically acquire, as part of their normal operation, certain technical data whose transmission is implicit in the use of Internet communication protocols. This data includes IP addresses, access timestamps and technical information about the client.
This data is used solely to ensure the platform functions correctly and securely, and is retained only for as long as strictly necessary. It is not used for profiling or marketing purposes.
6. How to Manage or Disable Cookies via Browser
Regardless of the preferences expressed in the banner, it is possible to manage, block or delete cookies directly from your browser settings:
- Google Chrome: Settings > Privacy and security > Cookies and other site data
- Mozilla Firefox: Settings > Privacy & Security > Cookies and Site Data
- Safari: Preferences > Privacy > Manage Website Data
- Microsoft Edge: Settings > Cookies and site permissions > Cookies and data stored
To specifically disable Google Analytics tracking, a browser add-on is available: https://tools.google.com/dlpage/gaoptout
Disabling technical cookies via the browser may affect the correct functioning of the platform, including the ability to log in.
7. Legal Basis and Retention
- Technical cookies: legal basis: performance of the service and legitimate interest of the controller. Consent is not required.
- Analytics cookies (Google Analytics 4): legal basis: user consent (Art. 6(1)(a) GDPR). Data is retained according to the data retention settings configured in GA4 (default: 2 months for user data).
- Advertising cookies (Google Ads): legal basis: user consent (Art. 6(1)(a) GDPR). Activated only after explicit consent in the cookie banner. Variable duration (from 1 minute to 13 months).
- Advertising cookies (Meta Pixel): legal basis: user consent (Art. 6(1)(a) GDPR). Meta is a joint controller (Art. 26 GDPR). Variable duration (from 90 days to 2 years).
- Advertising cookies (LinkedIn Insight Tag): legal basis: user consent (Art. 6(1)(a) GDPR). Activated only after explicit consent in the cookie banner. Variable duration (from 24 hours to 2 years).
8. User Rights
Users may exercise the rights set out in Articles 15-22 GDPR (access, rectification, erasure, restriction, portability, objection) by sending a request to: privacy@rfqsmart.com
In particular, the user may withdraw consent to analytics cookies at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
9. Changes to the Cookie Policy
This Cookie Policy may be updated as a result of regulatory changes, the activation of new tools, or the evolution of the platform. Material changes will be communicated via the platform and, where they involve new purposes requiring consent, through an update to the cookie banner.