Cookie Policy – mpapini.com

This Cookie Policy explains what cookies are, which cookies and similar technologies are used on mpapini.com, what they are for, how long they stay on your device, and how you can accept them, reject them or withdraw your consent at any time.

Last updated: 24 October 2026

Identification of the Data Controller

Data Controller: Murilo Denardi Papini

Address: Dublin, Ireland

Email for questions and for exercising your rights: [email protected]

Website: https://mpapini.com

What are cookies?

Cookies are small text files that a website stores on your device (computer, phone or tablet) through your web browser, such as Chrome, Safari, Firefox, Edge or Opera, when you visit it. On later visits, the website can read these files and recognise your browser.

In general, cookies are used to:

remember your choices, such as the language of the website or the decision you made about cookies;

make website functions work, such as forms, login areas or shopping baskets;

understand how the website is used, for example which pages are most visited, how long people stay and where they come from;

show personalised advertising and measure the results of campaigns.

The information stored in a cookie may be personal data, such as an IP address or a unique identifier, or non-personal data, such as the chosen language or the type of device.

Similar technologies

Besides traditional cookies, other technologies store or read information on your device, such as browser local storage (localStorage), tracking pixels, software development kits (SDKs) and device fingerprinting. The law treats all of them in the same way as cookies. In this policy, the word "cookies" includes these technologies.

Applicable law

In Ireland, the use of cookies is governed by Regulation 5 of the ePrivacy Regulations 2011 (S.I. No. 336 of 2011), which implements the EU ePrivacy Directive (2002/58/EC). The responsible authority is the Data Protection Commission (DPC).

The general rule is that a website may only store or access information on your device with your consent. There are only two exceptions: when the cookie is used solely to carry out the transmission of a communication over a network, or when it is strictly necessary to provide a service you have explicitly requested.

Where cookies involve personal data, the General Data Protection Regulation (GDPR) and the Data Protection Act 2018 also apply. Consent must be freely given, specific, informed and unambiguous, expressed by a clear affirmative action (Article 4(11) GDPR).

Classification and types of cookies

Cookies can be classified in three ways: (i) by the entity that sets them, (ii) by their purpose, and (iii) by how long they remain on your device.

1. Cookies according to the entity that sets them

First-party cookies. These are set by the domain you are visiting, in this case mpapini.com. On this website, first-party cookies are the record of your cookie choice, your language preference and the Google Analytics 4 cookies. The latter are created by Google's code but are stored on the mpapini.com domain.

Third-party cookies. These are set by a domain different from the one shown in the address bar. On this website, the only third-party technology is the Cloudflare Turnstile anti-spam check, loaded only on the contact page. We do not use Google Ads, Meta Pixel, YouTube videos, maps or social media buttons.

2. Cookies according to their purpose

The language preference is treated as strictly necessary because it is stored only when you choose a language yourself. The DPC recognises this use as exempt from consent.

3. Cookies according to how long they last

Session cookies. They exist only while you browse and are deleted when you close the browser or when their function ends.

Persistent cookies. They remain on your device for the period set by whoever created them, which can range from minutes to years. The law requires this period to be proportionate to the purpose. On this website, the maximum period for an optional cookie is 6 months.

Tools used on this website

Google Tag Manager (GTM). Google's tag management system: a container that loads the Google Analytics 4 code on the website. GTM does not set cookies of its own. However, when it loads, it connects your browser to Google's servers, which receive your IP address and technical browser data. For this reason, we load GTM only after you accept analytics cookies.

Google Analytics 4 (GA4). Google's audience measurement tool. It shows us how many people visit the website, which pages are viewed, where traffic comes from (search, social media, direct links), the type of device and the approximate location (country and city). It uses the cookies _ga and _ga_<ID> and is activated only with your consent. We have configured GA4 without Google Signals, without ad personalisation and without User-ID, with a data retention period of 2 months. GA4 does not log or store IP addresses.

Google Search Console. A Google tool that shows how the website appears in search results: search terms, clicks, average position and indexing errors. It uses data that Google itself collects in its search engine. It does not install cookies or scripts in your browser when you visit this website.

Contact form and Cloudflare Turnstile. The form asks for your name, email and message and does not set cookies. To prevent automated messages (spam), the contact page uses Cloudflare Turnstile, which checks whether the sender is a person. For this, Cloudflare analyses technical information about your browser and connection. Your name, email and message are not sent to Cloudflare, and the check is not used for advertising. This protection is strictly necessary for the secure submission of the form you request.

Google Fonts. The website's fonts (DM Sans and Barlow Condensed) are loaded from Google's servers. This sets no cookies, but your browser sends Google the IP address needed to download the fonts.

Cookies used on this website

The tables below describe the cookies and similar technologies used on mpapini.com, with their provider, purpose, type and duration.

Strictly necessary cookies (always active)

These are essential for the website to work and for the services you request. They cannot be switched off in the cookie panel.

Analytics cookies (only with consent)

They let us measure the number of visitors and understand how the website is used. They are set only if you click "Accept all" or switch on analytics in "Manage preferences".

Preference, marketing and third-party content cookies

We do not use them. If this changes, this policy will be updated and none of these cookies will be set before you consent.

Legal basis and retention period

Strictly necessary cookies: exempt from consent under Regulation 5(5) of the ePrivacy Regulations, because they are essential for the service you request. The record of your choice and your language preference stay only in your browser and are not sent to us. For Cloudflare Turnstile, the legal basis is our legitimate interest in protecting the website and the form from abuse (Article 6(1)(f) GDPR).

Analytics cookies: the legal basis is your consent (Regulation 5(3) of the ePrivacy Regulations and Article 6(1)(a) GDPR).

Retention: each cookie remains for the period shown in the tables above. Browsing data in Google Analytics is automatically deleted after 2 months.

Consent

On your first visit, a cookie notice presents three options, with equal prominence:

Accept all: allows analytics cookies.

Reject optional: keeps only the strictly necessary cookies.

Manage preferences: opens a panel where you choose each category and save your selection.

Until you choose, the website uses only strictly necessary cookies. Google Tag Manager and Google Analytics are not loaded. The analytics option is unticked by default.

Continuing to browse, scrolling, clicking elsewhere on the website or closing the notice is not considered consent. Rejecting optional cookies does not stop you from using the website or the contact form. The notice contains links to this policy and to the Privacy Policy, which can be read without any optional cookie being set.

Your choice is valid for 6 months. After that period, or earlier if there are relevant changes to the cookies used, we will ask for your choice again. If you clear your browser data or use another device, the notice will also appear again.

How to change or withdraw your consent

You can change your mind at any time, as easily as you gave consent. Use the Cookie settings link, available in the footer of every page. Switch off analytics and click Save preferences, or click Reject optional.

When you withdraw consent:

we stop loading Google Tag Manager and Google Analytics;

we delete the _ga and _ga_<ID> cookies from the mpapini.com domain;

data already collected is automatically deleted at the end of the 2-month period, and you can ask for it to be deleted earlier by emailing [email protected].

Withdrawal does not affect the lawfulness of use made before it.

Personal data processed

The only personal data we receive and store directly is what you submit through the contact form: name, email address and message. It is used only to reply to your enquiry and is not stored in cookies. Details are in our Privacy Policy.

If you accept analytics cookies, Google Analytics 4 processes, on our behalf, a random online identifier (the _ga cookie), technical information about your device and browser, your approximate location, the pages viewed and how you arrived at the website. Under the law, online identifiers can be personal data (recital 30 and Article 4(1) GDPR), so we inform you of this processing.

We receive this information only as aggregated statistical reports. We do not use it to identify you, we do not combine it with contact form data, and we do not use it for advertising or profiling.

Recipients and international transfers

The information obtained through the cookies and technologies of this website is shared only with the providers below, for the purposes stated.

Google and Cloudflare may process data outside the European Economic Area (EEA), including in the United States. In those cases, the transfer relies, depending on the provider, on the adequacy decision of the EU-U.S. Data Privacy Framework adopted by the European Commission, or on the Standard Contractual Clauses approved by the Commission, with the necessary supplementary measures. To obtain information about these safeguards, write to [email protected].

How to disable or delete cookies in your browser

Besides the Cookie settings panel, you can block or delete cookies directly in your browser, including those already set. If you also block the strictly necessary ones, some functions may stop working. For example, the website will not remember your choice and the cookie notice will appear on every visit.

Google also offers a browser add-on to disable Google Analytics on all websites.

Your rights

Under the GDPR, where applicable, you have the right to:

access your personal data;

have inaccurate or incomplete data corrected;

request the erasure of your data;

request the restriction of processing;

object to processing;

receive your data in a portable format;

withdraw consent at any time, without affecting processing carried out before.

To exercise any of these rights, write to [email protected], stating the right you wish to exercise in the subject line. We will reply within 1 month, in accordance with Article 12(3) GDPR.

You also have the right to lodge a complaint with the Irish Data Protection Commission (6 Pembroke Row, Dublin 2, D02 X963, dataprotection.ie) or with the data protection authority of the country where you live.

Updates to this policy

This policy may be updated when there are changes to the cookies, the providers or the purposes. The date of the current version appears at the top. If a change requires new consent, we will ask for your permission before the new cookie is activated.

More information

To learn more about who we are, how we process the data sent through the form and how to exercise your rights, please read our Privacy Policy.