Opening hours:
- Monday - Friday: 08:30 - 18:30
Information on Privacy pursuant to Article 13 of the European Regulation EU 2016/679 (GDPR)
The Data Controller is M.B. snc, with registered office at Via Palestro 1, 12065, Monforte d’Alba (CN), Italia – VAT No. 03320170040, contactable at: info@mbtecno.com
The Data Protection Officer (DPO) can be contacted at the following email address: info@mbtecno.com
The Controller processes data in accordance with the principles established by the GDPR (EU General Data Protection Regulation 2016/679), including lawfulness, fairness, transparency, purpose and storage limitation, data minimization, accuracy, integrity, and confidentiality.
The personal data provided to the Controller by the Data Subject will be processed for the following purposes:
a) to respond to requests made by the user via the contact channel;
b) to provide a quote to the user who requested it via the contact channel;
c) to provide information requested by the user via the contact channel (e.g., a customer requesting information on how to use a purchased product);
d) to submit a CV or a collaboration request to the Controller;
e) to comply with legal obligations, regulations, EU legislation, or orders from authorities;
f) to exercise the rights and legitimate interests of the Controller or third parties, such as the right to legal defense;
g) to send (via email, mail, SMS, phone calls, newsletters) commercial communications or advertising material about products or services offered by the Controller, or to assess satisfaction with the quality of services.
The legal bases for processing are as follows:
For purposes listed in points 2a), 2b), 2c), 2d), 2e), and 2f):
– necessity to fulfill a contract to which the data subject is a party, or to carry out pre-contractual measures requested by the user;
– necessity to comply with legal obligations or requests from authorities;
– necessity to pursue a legitimate interest of the Controller or third parties (e.g., legal defense).
For the purpose listed in point 2g):
– the consent of the Data Subject.
Providing data for the purposes listed in points 2a) to 2f) is optional, but failure to provide such data will make it impossible for the Controller to fulfill the user's request.
Consent for processing data for the purpose listed in point 2g) is optional: if not given, the Data Subject will not receive newsletters, commercial communications, or advertising material related to the Controller’s products, but will still receive responses for other requested purposes.
The Data Subject has the right to:
– access their personal data held by the Controller;
– request rectification and/or deletion (“right to be forgotten”);
– request restriction or object to processing;
– request data portability;
– object to processing under the conditions set out in Article 21;
– lodge a complaint with a Supervisory Authority.
The Data Subject may also revoke consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal
Data collected through the website will not be disclosed.
Data will be communicated to recipients only to the extent strictly necessary for the purposes mentioned above.
Possible categories of recipients include:
– employees and other individuals authorized by the Controller;
– third parties engaged by the Controller for processing and appointed as Data Processors under Article 28 GDPR, through a specific contract;
– other entities (public or private) to whom communication is necessary to comply with legal obligations, authority orders, or to defend a legitimate interest of the Controller or third parties.
The Controller does not intend to transfer processed data to countries outside the European Union or to international organizations.
The Controller retains data for the time necessary to achieve the aforementioned purposes.
In any case, the Controller undertakes not to retain data for more than 10 years.