Pursuant to EU Regulation 2016/679 (GDPR) and Italian Legislative Decree 196/2003 (Privacy Code) as amended by Legislative Decree 101/2018, this policy describes how personal data is processed for users visiting the mountech-it.it website.
1. Data Controller
The Data Controller for personal data is:
Name: MOUNTECH DI BARBIERI MICHELE
Legal form: Sole proprietorship
Registered office: Via Campella 20, 24020 Parre (BG), Italia
VAT Number: 04597210162
Email: [email protected]
PEC (Certified Email): [email protected]
2. Types of personal data collected
2.1 Voluntarily provided data
Through the contact form on the site, the user may voluntarily provide:
- Name and surname
- Email address
- Subject and content of the message
2.2 Navigation data
The computer systems and software procedures used to operate this website acquire, during their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols:
- IP address (anonymized)
- Browser type and operating system
- Pages visited and time spent
- Country of origin
3. Purpose and legal basis of processing
| Purpose | Legal basis | GDPR Article |
|---|---|---|
| Responding to contact requests | Consent of the data subject | Art. 6(1)(a) |
| Provision of requested services | Contract execution | Art. 6(1)(b) |
| Anonymous statistical analysis (Vercel Analytics) | Consent of the data subject | Art. 6(1)(a) |
| Tax and accounting obligations | Legal obligation | Art. 6(1)(c) |
4. Recipients and data processors
Personal data may be communicated to:
- Vercel Inc. (San Francisco, USA) - Website hosting and analytics service. Vercel adheres to the EU-US Data Privacy Framework. Vercel Privacy Policy
- Aruba S.p.A. (Italy) - Email service for communication management. Data remains in Italy/EU. Aruba Privacy Policy
Data will not be disclosed or communicated to third parties for marketing purposes without the explicit consent of the data subject.
5. Data transfers outside the EU
Some data may be transferred to the United States through the Vercel service. Such transfers are made in accordance with Chapter V of the GDPR, based on:
- European Commission adequacy decision for the EU-US Data Privacy Framework
- Standard contractual clauses approved by the European Commission
6. Data retention period
- Contact data: retained for the time necessary to process the request and subsequently for 24 months, unless a contractual relationship is established
- Contractual data: retained for 10 years from the end of the relationship (tax obligations under art. 2220 of the Italian Civil Code)
- Navigation data: deleted immediately after anonymous statistical processing
- Consent cookies: retained for 12 months
7. Rights of the data subject
Pursuant to Articles 15-22 of the GDPR, the data subject has the right to:
- Access (art. 15): obtain confirmation of processing and a copy of the data
- Rectification (art. 16): correct inaccurate or incomplete data
- Erasure (art. 17): obtain erasure of data ("right to be forgotten")
- Restriction (art. 18): restrict processing in certain cases
- Portability (art. 20): receive data in a structured format
- Objection (art. 21): object to processing for legitimate reasons
- Consent withdrawal (art. 7): withdraw consent at any time
To exercise these rights, contact: [email protected]
8. Right to lodge a complaint
The data subject who believes that the processing of their personal data is in violation of the GDPR has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali):
Italian Data Protection Authority (Garante per la Protezione dei Dati Personali)
Piazza Venezia 11, 00187 Roma
Email: [email protected]
PEC: [email protected]
Website: www.garanteprivacy.it
9. Automated decision-making processes
The Controller does not use automated decision-making processes, including profiling, as referred to in Article 22, paragraphs 1 and 4, of the GDPR.
10. Cookies
For information on the use of cookies, please consult the Cookie Policy.
11. Changes to this policy
The Controller reserves the right to modify this policy at any time. Changes will be published on this page with an indication of the update date. It is recommended to consult this page periodically.