Cookie Policy
Last updated: 1 September 2026
1. Introduction
This Cookie Policy describes the use of cookies and similar tracking technologies on www.maxinadvisory.com, operated by Massimiliano Iannozzi, an Independent Financial Adviser trading as MaxIn Wealth Advisory.
This notice supplements the website’s Privacy Policy and should be read together with it. Matters not expressly addressed in this Cookie Policy are governed by the Privacy Policy, the Terms and Conditions and the other legal documents available on the website.
This Cookie Policy is provided pursuant to Article 122 of Italian Legislative Decree No. 196/2003, Regulation (EU) 2016/679 (the GDPR) and the Guidelines of the Italian Data Protection Authority on cookies and other tracking technologies.
2. Data Controller
The data controller is

MaxIn Wealth Advisory is a trading name used to identify the Data Controller’s professional practice and does not constitute a separate legal entity.
3. What Are Cookies and Tracking Technologies?
Cookies are small text files that websites visited by a user may send to and store on the device used for browsing, such as a computer, tablet or smartphone. Cookies may subsequently be sent back to the same websites during later visits.
Cookies may be used, for example, to ensure the proper technical operation of the website, remember the user's preferences, maintain an active browsing session, store consent choices or collect statistical information on website use.
In addition to cookies, similar technologies may be used, including pixels, web beacons, scripts, unique identifiers, local storage, session storage and other technical tools that can store or read information on the user's device. For convenience, the term "cookies" in this document also includes such similar technologies, where applicable.
4. Types of Cookies Used by the Website
The website is institutional and informational in nature. It does not provide a restricted area, user accounts, e-commerce, online payments, a shopping cart, public comments or community features.
As at the date of the latest update to this Cookie Policy, the website may use the following categories of cookies or similar technologies:
4.1 Strictly necessary cookies
Strictly necessary cookies are required to enable browsing, ensure the proper operation and security of the website, manage the technical session and store the user's cookie preferences.
These cookies do not require the user's prior consent because they are strictly necessary to provide the requested service or operate the website.
This category may include, by way of example:
· browsing and session cookies;
· cookies required for website security;
· cookies required to operate the cookie banner or consent-management system;
· cookies or technical tools associated with hosting, the domain and the proper delivery of web pages.
4.2 Analytics cookies and measurement tools
The website uses Google Analytics to collect statistical information on website use, pages visited, browsing duration, the device used and how users interact with the pages.
This information is used to understand how the website is used, improve its content, verify its operation and optimise the browsing experience.
Unless Google Analytics is configured in a manner that allows its cookies to be treated as technical cookies under applicable law, third-party analytics cookies are installed only after the user has given consent through the cookie banner.
4.3 Google Fonts
The website may use Google Fonts to display typefaces correctly and ensure visual consistency across published content.
Where fonts are loaded from Google servers, the user's browser may transmit certain technical information to Google, including the IP address, browser data, device data and information relating to the page visited. The Data Controller does not use Google Fonts for advertising-profiling purposes.
If the use of Google Fonts or similar services involves installing or reading tracking technologies that are not strictly necessary, the related processing will be subject to the user's consent where required by applicable law.
4.4 Marketing and profiling cookies
As at the date of the latest update to this Cookie Policy, the website does not use marketing cookies, advertising profiling, retargeting, social advertising or similar tools designed to create user profiles or display personalised advertising.
If marketing or profiling cookies are introduced in the future, they will be installed only after the user has expressly consented through the cookie banner, and this Cookie Policy will be updated accordingly.
5. Main Cookies and Services
The following table summarizes the cookies and services used or envisaged in the website's configuration. The dynamic list available in the "Customize consent preferences" panel identifies the cookies that are active at the time of the visit, together with their technical name, duration and purpose.
Strictly necessary cookies are installed without the user's consent because they are essential to operate the website or store the preferences expressed. Functional and analytics cookies are disabled by default and are installed only after the user has given consent.
|
Category |
Service / provider |
Purpose |
Cookie and duration |
Consent |
|
Strictly necessary |
Joomla website / Aruba hosting |
Management of the browsing session, security and proper technical operation of the website. |
Joomla session cookie, identified by a variable alphanumeric name. Duration: session. |
Not required |
|
Strictly necessary |
CookieYes |
Storage of the user's cookie preferences and retention of evidence of the consent choice made. |
cookieyes-consent — 1 year |
Not required |
|
Functional |
EngageBox |
Identification of the visitor and management of the frequency with which specific content or informational windows are displayed. |
nrid — 1 year |
Required |
|
Analytics |
Google Analytics 4 |
Compilation of statistics on website use, including visitor numbers, pages viewed, session duration, traffic sources and interaction with content. |
_ga — 2 years; _ga_<ID> — 2 years |
Required; enabled only after consent |
|
Content display |
Google Fonts |
Correct display of typefaces and visual consistency across the website. |
Google Fonts does not install cookies. If typefaces are loaded from Google servers, technical requests are made to the relevant domains. |
Not applicable to cookies |
|
External link |
|
Link to the Data Controller's professional profile and curriculum vitae. |
No LinkedIn cookies are installed by the website where a standard external link is used. |
Not required for a standard link |
The "nrid" cookie is generated by EngageBox when functions such as statistics, display-frequency limits or checks as to whether other content has previously been displayed are used. The provider states that the cookie lasts for one year and does not transmit data to third-party applications.
Google Analytics 4 ordinarily uses the _ga cookie to distinguish users and the _ga_<ID> cookie to maintain session state; Google states that their default duration is two years. The relevant row in the table applies from the date on which Google Analytics is actually enabled on the website.
Google states that the Google Fonts Web API neither sets nor records cookies. Where fonts are loaded directly from Google servers, the browser nevertheless makes technical requests to the service's domains; these operations are also described in the Privacy Policy.
The website does not currently use Meta Pixel, TikTok Pixel, Microsoft Clarity, HubSpot, Calendly, embedded YouTube videos, social plug-ins or other marketing or profiling tools. If any such services are introduced in the future, this notice will first be updated and consent will be requested where necessary.
6. Third-Party Cookies and External Providers
Certain technical tools or services connected with the website are provided by external parties, which may process data as processors or independent controllers, depending on the nature of the service and their respective privacy notices.
As at the date of the latest update, the principal relevant external providers are:
· Aruba S.p.A., for website hosting, the domain, DNS services and other related technical services;
· CookieYes, for managing the banner, cookie preferences and records of the consent choices made;
· Google Ireland Limited and Google LLC, for Google Analytics 4 from the date on which it is actually enabled, and for Google Fonts where the typefaces are loaded from Google servers;
· EngageBox, as a technical component used to manage specific content and the frequency with which it is displayed;
· Microsoft 365 / Outlook, for managing email and communications that users may send, as further described in the Privacy Policy;
· LinkedIn, solely where the user voluntarily selects the external link to the Data Controller's professional profile.
Merely accessing the website does not cause the Data Controller to install LinkedIn cookies, because the website contains a standard external link rather than an embedded widget or social plug-in. Once the user selects the link and accesses LinkedIn, data processing is governed by the provider's own terms and privacy notices.
Functional and analytics cookies are not installed before the user has given consent through the banner. Users may reject them, select them by category or subsequently change their preferences through the permanent cookie-management control available on the website. The Italian Data Protection Authority requires only essential technical tools to be active on the first visit, with any other tracking technologies remaining disabled until consent has been given.
The CookieYes banner should therefore show the following settings:
· Necessary: always active;
· Functional: disabled on the first visit;
· Analytics: disabled on the first visit;
· Performance: empty;
· Advertisement: empty;
· Uncategorized: empty.
