Privacy policy

1. Data controller

The data controller is MBC Consulting & Services Srl, registered office at Piazza IV Novembre, 4, 20124 Milan (MI), Italy, VAT number IT 12798050964, email info@mbcconsulting.net, certified email (PEC) mbccs@pec.cloud.

2. Data processed

The website may process browsing data, technical device data and information voluntarily submitted through the contact form, including name, email address, company, telephone number, area of interest and message content.

3. Purposes and legal bases

• Handling information or quotation requests: steps taken at the data subject’s request prior to entering into a contract.
• Ensuring website security and operation: the controller’s legitimate interest.
• Complying with legal obligations: legal obligation.
• Carrying out non-essential statistical analysis: consent where required.

4. Processing methods and retention

Data is processed using appropriate technical and organisational measures. Contact-form submissions and related technical copies are retained for the time required to handle the enquiry and, where no contractual or professional relationship is established, for a maximum of 12 months from receipt. At the end of that period, the data is erased or anonymised unless longer retention is required to comply with a legal obligation or to establish, exercise or defend legal claims. Data relating to contractual relationships and administrative obligations is retained for the periods required by applicable law.

5. Recipients

Data may be processed by authorised personnel and by suppliers acting on behalf of the controller, such as hosting and email providers, technical maintenance providers and security service providers, solely to the extent necessary to deliver their respective services and, where applicable, as data processors.

6. Transfers outside the EEA

If suppliers transfer data outside the European Economic Area, the transfer will rely on an adequacy decision, standard contractual clauses or another safeguard provided by the GDPR.

7. Data subject rights

Data subjects may request access, rectification, erasure, restriction, portability, objection and withdrawal of consent where applicable. They may also lodge a complaint with the Italian Data Protection Authority or another competent supervisory authority.

8. Children’s data

The website and services are not intended for children under 14, and the controller does not knowingly collect children’s data.

9. Language of this notice

This notice is available in Italian and English. In the event of interpretative differences, the Italian version prevails.

10. Changes

This notice may be updated. The revision date appears at the top of the page.