Privacy notice

Placeholder text. GDPR-compliant structure, to be reviewed by a privacy professional before publication. Highlighted parts must be completed or confirmed. The Italian version prevails.

This notice explains how personal data of visitors to the MBM Consulting website, and of people who write through the contact form, are processed under Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”).

1. Data controller

Ing. Maria Bonaria Murtas, independent professional (MBM Consulting), VAT no. 12718940963, registered with the Order of Engineers of the Province of Milan under no. A 28909. Office: [office address to be added].

Contact: email maria_murtas@libero.it, certified email (PEC) mariabonaria.murtas@ingpec.eu, phone +39 335 754 3501.

2. Data processed

• Browsing data: the systems running the site record technical data such as IP address, browser type and pages visited as part of their normal operation. [check log retention with the hosting provider]
• Data you provide: name, email, optionally company and phone, and the content of the message sent through the contact form or by email.

3. Purposes and legal bases

• Replying to enquiries and following up on any pre-contractual discussions: Art. 6(1)(b) GDPR and the consent given in the form (Art. 6(1)(a)).
• Keeping the site secure and working properly: legitimate interest (Art. 6(1)(f)).
• Complying with legal obligations, where applicable: Art. 6(1)(c).

4. How data are processed

Data are processed electronically with appropriate security measures and only for the purposes above. They are not used for profiling or automated decision-making.

5. Recipients

Data may be processed, as data processors, by:

• the website hosting provider: Vercel Inc. (USA);
• the contact form provider: Formspree, Inc. (USA);
• the email provider: [to be specified].

Data are not published or sold to third parties for marketing purposes.

6. Transfers outside the European Union

[Vercel and Formspree are based in the United States. Check and state the safeguard used by each: EU-U.S. Data Privacy Framework or the European Commission’s standard contractual clauses.]

7. Retention

Messages are kept for as long as needed to handle the enquiry and in any case no longer than [24 months — to be confirmed], unless a professional engagement follows, in which case the retention periods for accounting and tax records apply.

8. Your rights

You may at any time request access to your data, rectification, erasure, restriction of processing and data portability, and object to processing (Articles 15–22 GDPR). You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal. To exercise these rights, write to maria_murtas@libero.it or mariabonaria.murtas@ingpec.eu.

You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

9. Whether providing data is required

Providing data in the contact form is optional, but without your name, email and consent the enquiry cannot be answered.

10. Cookies

See the cookie policy.

11. Changes

This notice may be updated. The version in force is always the one published on this page, with its last updated date.