Your data and the sending of commercial communications by e-mail

How does it work?

Transparency First!

We will only use your data to send you commercial communications by by e-mail regarding our products and services.

On this page you will find all the information regarding the processing of your personal data: where, when, how and why we process your data, as well as a list of your rights.

Your data will not be sold or transferred to third parties

Your data (i.e. the data you entrust to us) will only be used by M.C.M. S.p.A..

We undertake never to sell or give away your data.

If in some cases we use external providers, please be aware that they will operate only on our behalf and in accordance with our requirements.

How to contact us

The data controller is M.C.M. S.p.A., (P.IVA 02266740162) with head office in Via Castello, 70 - 24060 Adrara S. Martino (BG) Italy.

You can contact us at any time by writing to privacy@mcm-spa.it

Business communication by e-mail

Last update: 18 April 2025



Introduction

This information sheet, issued pursuant to Art. 13 GDPR, informs you how we collect, use, share and store the personal data personal data about you when we send you our commercial communications by e-mail.

This information is provided by M.C.M. S.p.A. in its capacity as Personal Data Controller.

What information do we collect, for what purposes and what are the legal basis?

M.C.M. S.p.A. will process your personal data in the manner and for the the purposes described in this section.

Source of data

Directly from the person concerned:

- when filling in the forms on the website website:Do you want more information? and Do you want to download documents?;

- at the pre-contractual and/or contractual stage.

Data processed

- Full name;

- Company you belong to;

- E-mail address;

Purpose of processing

Sending of commercial communications by e-mail relating to M.C.M. S.p.A. products and services.

Legal basis of processing

- The consent of the data subjects (Art. 6(1)(a) GDPR);

- the legitimate interest in the case of communications to its customers concerning products similar to those purchased (soft-spam), in application of the provided for by Art. 6, par. 1, lett. f) GDPR and Art. 130, paragraph 4 of Legislative Decree 196/2003 ("Privacy Code"). This is without prejudice to the possibility for users to object to the processing in the manner modalities set out in the following paragraph.

Data Retention

Until consent to their processing is revoked by means of an opt-out functionality at the bottom of each communication sent.

Treatment modalities

The processing of the data subjects' personal data will be mainly carried out with the aid of electronic or automated means, according to the methods and with the instruments suitable to guarantee the security and confidentiality of such data in compliance with the GDPR. In particular, all measures will be adopted technical, IT, organisational, logistical and procedural security measures security measures necessary to ensure the minimum level of data protection required by law, allowing access only to the only persons entrusted with the processing by M.C.M. S.p.A. or the data processors appointed by M.C.M. S.p.A.

The information acquired and the methods of processing will be relevant and not excessive in relation to the type of services rendered. I data will also be managed and protected in environments whose access is under constant control.

With whom do we share your information?

The personal data of data subjects processed may also be communicated:

  • to companies, consultants or professionals who may be entrusted for the installation, maintenance, updating and, in general in general, the management of software of M.C.M. S.p.A. or which it uses for the provision of its services, formally designated as Data Processors;
    • . to employees and/or collaborators of M.C.M. S.p.A., formally designated as persons authorised to process the data; to all those subjects (including Public Authorities) who have access to personal data by virtue of regulatory or administrative measures; . to all those public and/or private individuals and/or legal persons (legal, administrative and tax consultancy firms, Judicial Offices, Chambers of Commerce, Chambers and Labour Offices, etc.), if the communication is necessary or functional for the proper fulfilment of contractual obligations undertaken, as well as of obligations arising from the law. .

Data relating to interested parties will not be disseminated, except in an anonymous and aggregate form, for statistical or research purposes.

Data transfer to third countries

We will not transfer your personal data to countries outside the European Economic Area ("EEA"), which includes, in addition to the European States of the European Union, Norway, Lichtenstein and Iceland.

Should this prove necessary to pursue the purposes of the processing operations described in this Policy, our Organisation guarantees that any transfers of data outside the EEA will be made in such a way as to ensure full protection of the rights and freedoms of the data subject. protection of their rights and freedoms. Where, with regard to the Where no adequacy decisions have been issued by the European adequacy decisions have been issued by the European Commission, data transfers will be carried out by adopting the guarantees provided for in Articles 46 et seq. ff. of the GDPR including the standard contractual clauses approved by the European Commission, and a considered assessment of the legislation of the third country of destination, if any.

Your rights and how to contact us

As a data subject, you may exercise your rights pursuant to Articles 15 et seq. of the GDPR, namely the rights to:

  • to obtain, at any time, confirmation as to whether or not of the processing of such data and to obtain access to the data personal data and information concerning the processing;
  • request the rectification of inaccurate personal data and the integration of incomplete data;
    • request, in the cases indicated by the GDPR, without prejudice to the special discipline envisaged for certain processing operations, the cancellation or
  • request, in the cases indicated by the GDPR, without prejudice to the special rules laid down for certain processing operations, the deletion or restriction of the data, once the retention periods have expired

The requests should be sent to privacy@mcm-spa.it

Right to complain

If you consider that the processing of personal data relating to you is being processed in breach of the Regulation, you have the right to lodge a complaint with the Garante, as provided for by art. 77 of the Regulation, or to take legal action (art. 79 of the Regulation). of the Regulation).

Modifications

M.C.M. S.p.A reserves the right to make changes to this information notice at any time, guaranteeing in all cases an adequate and similar protection of personal data. In order to view any changes, you are invited to regularly consult this notice or contact us at the following e-mail address: privacy@mcm-spa.it