Privacy Policy.

Last updated: 29 October 2026.

Who is responsible

Andrea Cosmi, operating as COASE, is the controller of personal data processed through coase.pro. Contact: [email protected]. This policy covers website browsing, enquiries, protected downloads and the online tools. A professional engagement may require a separate notice.

Data, purposes and legal bases

Browsing and security

Delivering and protecting the website involves processing technical request data, such as your IP address, browser information, requested URL and request time, through our hosting and security provider. The purpose is to operate the website, diagnose faults and prevent abuse. The legal basis is our legitimate interest in providing a secure, functioning service (Article 6(1)(f) GDPR).

Enquiries

The contact page prepares an email draft in your browser. It does not submit that draft to COASE automatically: you choose whether to send it through your email application. If you send an enquiry, we receive the contact details, company information, message and any selected services or model specification you include. We use these to respond and, where relevant, take steps at your request before entering into a contract (Article 6(1)(b)); other business correspondence is handled on the basis of our legitimate interest in responding to enquiries (Article 6(1)(f)). Avoid including unnecessary sensitive or third-party personal data.

Protected downloads

When you request a complete PDF example or software package, we collect your name, email address, optional company, requested file, registration and download times, and a random session identifier. Name and email are required for this access route; company is optional. We use the information to deliver the files, record access and protect the service from misuse, based on our legitimate interest (Article 6(1)(f)). The email address is not verified. Downloading does not subscribe you to marketing communications. If you do not provide the required details, you can still browse public previews.

Interactive tools and browser storage

Filters, selected services, draft model specifications, appearance preferences and certain model inputs may be saved in your browser to provide the functionality you use. They are not automatically sent to COASE merely because they are saved locally. Some tools communicate with a companion application running on your computer; market-data functions can request public data from external providers. Exporting a file saves it to your device. Sending an enquiry or sharing an exported file is a separate action. See the Cookie Policy for storage details.

Providers and international processing

Cloudflare provides hosting, security and the protected-download infrastructure. Registration and download records are stored in a Cloudflare D1 database configured for the European Union. Network delivery and support can involve processing outside the European Economic Area under the applicable safeguards described in the Cloudflare Data Processing Addendum, including standard contractual clauses where applicable. EU database placement does not mean that every network request is processed exclusively within the EU.

Some tool pages load a document-generation library from jsDelivr; the CDN receives the technical data needed to serve that request. See jsDelivr’s privacy information. When you request market data in BOOLE, your browser may connect to the European Central Bank or Federal Reserve Bank of New York. These providers receive the request and ordinary connection data; the market-data request does not require sending your full financial model. Your email provider also processes messages you choose to send. External websites and services have their own privacy notices.

Access to enquiry and download data is limited to the controller and providers involved in delivering the relevant service, or recipients where disclosure is required by law. We do not sell personal data or share download details for third-party marketing.

How long data is kept

• Download records: scheduled to expire 357 days after registration. Daily deletion and the infrastructure’s limited recovery window are intended to keep the overall period within 365 days during normal operation.
• Download access cookie: 30 days from issuance, unless you remove it sooner. Removing the cookie does not itself delete the associated server record.
• Enquiries: for the time needed to answer and manage the resulting discussion. Where correspondence relates to an engagement, legal obligations or a dispute, it may be retained for the applicable obligation or claim period.
• Technical security data: according to the hosting/security service’s applicable retention settings and the time needed to investigate incidents; the 357-day download period does not describe every provider log.
• Browser storage: session storage normally lasts for the tab session; persistent local storage remains until cleared by you, the tool or your browser. Browser session restoration may preserve session data.

Your choices and rights

You may request access, correction, erasure or restriction of your personal data, and object to processing based on legitimate interests. Where the GDPR conditions apply, you may also request portability. Write to [email protected]; we may need proportionate information to verify your identity. You may complain to your competent supervisory authority, including the Italian Data Protection Authority. We do not use website or download data to make automated decisions producing legal or similarly significant effects about you.

Browser controls let you delete cookies and stored site data. Export any work you want to retain first. Details are in the Cookie Policy. We will update this notice when the website’s processing changes.