GDPR & Cold Outreach
Privacy Notice for Prospects (Art. 14 GDPR). Last updated: October 7, 2026.
Received an email from us or one of our clients? Here is how we handle your data, where we got it, why we reached out, and how to opt out with a single reply.
1. Who We Are & Data Controller Details
Effetto Marketing is a brand of Cevolani Consulting LLC (company details at the bottom of this page). We run targeted B2B cold email outreach campaigns to book qualified sales meetings with key decision-makers—both for our clients and ourselves.
Our databases and campaigns: Cevolani Consulting LLC is the data controller for the data it collects and manages within its own databases, as well as for all Effetto Marketing campaigns.
Client campaigns: The company signing the message acts as the data controller for the outreach, while we act as its data processor (Art. 28 GDPR). Respective roles are clearly defined in writing within the contract.
Feel free to reach out to us directly with any questions: matteo.cevolani@effettomarketing.com, with the subject line "GDPR".
EU Representative (Art. 27 GDPR)
Your privacy and data rights matter to us. We’ve appointed Prighter Group, along with its local partners, as our dedicated EU privacy representative and primary point of contact for the European Union:
Prighter EU Rep GmbH, Schellinggasse 3/10, 1010 Vienna, Austria.
2. Data We Process
Verified B2B work data only:
Full name;
Job title;
Work email and phone number;
Company details: business name, industry, headcount, location, and website;
Touchpoint history: messages sent, replies, and opt-out requests.
We do not process sensitive data, such as health records, political beliefs, or trade union memberships (under GDPR Articles 9 and 10).
3. Where Our Data Comes From
Professional B2B contact databases, which collect data from public and professional sources.
Licensed company databases, fed by the Italian Companies Register and filed financial statements.
Company websites, public registers, and official business publications.
Professional contact enrichment and verification tools. Every email address is technically verified before sending, with an automated check that does not send you anything.
If you want to know which source your contact details came from, write to us and we will tell you.
4. Why we reached out
To introduce relevant solutions tailored to your role and business, either on our own behalf or for a client.
To choose whom to write to based on industry, company size, location and role, so that we only contact people who may have a real interest.
To handle replies, field inquiries, and book sales meetings.
To manage opt-out requests and ensure you are never contacted again.
5. Legal Basis
Our legal basis is legitimate interest in B2B direct marketing (Art. 6(1)(f) GDPR and Recital 47). We balance this against your rights in four key ways:
We only use professional data;
We write about topics related to your role;
We send a limited number of messages;
You can stop everything with a single reply.
If you reply to request information or book a sales meeting, we process your data based on taking pre-contractual steps at your request (Art. 6(1)(b) GDPR).
6. Who We Share Your Data With
Our client companies, as part of the B2B business development services we deliver for them. They process the data either as independent data controllers or through us as their data processor.
Our cloud and software vendors covering cold email outreach, CRM, storage, and email verification, all operating as our data processors.
Administrative, legal, and tax advisors, whenever required.
Your data is never made public.
7. International Data Transfers (Outside the EEA)
Cevolani Consulting LLC is based in the United States, and select technical providers operate outside the EEA. All data transfers strictly comply with GDPR Chapter V safeguards (Articles 44–49):
The EU-U.S. Data Privacy Framework adequacy decision for certified providers;
Standard contractual clauses included in agreements with other vendors.
8. Duration
We retain data only as long as it's relevant to the decision-maker's role, or until you opt out.
Opt out, and you’re added to our permanent suppression list. Simple as that—we will never contact you again.
9. Your Rights
You can exercise your rights under Articles 15–22 of the GDPR at any time:
Access, including the source of your data;
Rectification;
Erasure;
Restriction of processing;
Data portability;
Objection.
Email matteo.cevolani@effettomarketing.com with the subject line "GDPR". We will reply within the statutory deadlines (Art. 12 GDPR).
You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).
10. How to opt out
Reply to the email. Just a single word will stop the sequence immediately.
Opt out under GDPR (Art. 21) by replying or emailing matteo.cevolani@effettomarketing.com. Your email and company domain will be permanently blocklisted across every campaign we manage—both our own and our clients'. You will never hear from us again.
11. Updates
We may update this page as regulations or our services evolve. The current version is always the one published here, marked with the latest revision date.
