Privacy policy

1. Data controller

The data controller is MBC Consulting & Services Srl, registered office at Piazza IV Novembre, 4, 20124 Milan (MI), Italy, VAT number IT 12798050964, email info@mbcconsulting.net, certified email (PEC) mbccs@pec.cloud.

2. Data processed

The website may process browsing data, technical device data and information voluntarily submitted through the contact form, including name, email address, company, telephone number, area of interest and message content.

3. Purposes and legal bases

• Handling information or quotation requests: steps taken at the data subject’s request prior to entering into a contract.
• Ensuring website security and operation: the controller’s legitimate interest.
• Complying with legal obligations: legal obligation.
• Carrying out non-essential statistical analysis: consent where required.

4. Processing methods and retention

Data is processed using appropriate technical and organisational measures. Contact-form submissions are stored in a server folder that is not accessible from the public website and are retained for the time required to handle the request; unless a business relationship is established, no longer than [RETENTION PERIOD TO BE DEFINED]. Data connected with administrative or contractual obligations is retained for the periods required by law.

5. Recipients

Data may be processed by authorised staff and service providers appointed as processors, such as hosting, email, maintenance and security providers. The categories must be checked against the suppliers actually used.

6. Transfers outside the EEA

If suppliers transfer data outside the European Economic Area, the transfer will rely on an adequacy decision, standard contractual clauses or another safeguard provided by the GDPR.

7. Data subject rights

Data subjects may request access, rectification, erasure, restriction, portability, objection and withdrawal of consent where applicable. They may also lodge a complaint with the Italian Data Protection Authority or another competent supervisory authority.

8. Children’s data

The website and services are not intended for children under 14, and the controller does not knowingly collect children’s data.

9. Language of this notice

This notice is available in Italian and English. In the event of interpretative differences, the Italian version prevails.

10. Changes

This notice may be updated. The revision date appears at the top of the page.