In short
MA.VI Srl processes your data to handle enquiries and preliminary assessments, and to operate and secure the site. Enquiries are not entered into a CRM or used for newsletters or promotional campaigns. The site’s code includes no visitor analytics or profiling tools.
This notice describes data collected directly through the site and its contact details, under Article 13 of Regulation (EU) 2016/679 (GDPR).
Controller and contacts
The data controller is MA.VI Srl, with the details shown on this page. Business enquiries and requests about personal data go to the email address shown beside this text. You can also use the certified email address (PEC) to exercise your rights.
Margherita Borgo, the company’s director, handles these requests, with support from Thomas Conzato, IT manager, on technical and data protection matters.
What data we process, why and on what basis
When you write to us
If you contact us through the site’s form, by email or by phone, we process:
- your name (optional), company, email and phone number;
- whether your business is already incorporated or still to be set up and, if incorporated, its VAT number;
- the text of your message and whatever you tell us as the conversation continues.
We use them to answer your request and, if you ask for it, to prepare the preliminary assessment.
For enquiries preceding a possible contract with you, the legal basis is Article 6(1)(b) GDPR: pre-contractual measures taken at your request. For the data of contacts acting on behalf of a company, the basis is point (f): MA.VI’s legitimate interest in handling business communications and enquiries.
The form fields marked as required are needed to handle the enquiry: without them the form cannot be sent. The others are optional. Processing necessary to answer you relies on the legal bases stated above, rather than consent. Sending an enquiry does not constitute consent to advertising.
Do not put special categories of data in your message (health, political or religious opinions, trade union membership), nor third-party data that your request does not need.
When you browse
The hosting provider’s servers automatically record technical data about each request: IP address, date and time, page requested, browser type. They keep the site running and protect it from abuse.
The legal basis is legitimate interest (Article 6(1)(f) GDPR) in keeping the site secure and working. Technical data are processed to deliver the service and detect abuse; retention follows the security purposes and the hosting service’s limits. The site includes no visitor profiling tools.
If an engagement follows
If your request leads to a working relationship with you or your business, we give you a specific notice for that processing, which involves different data.
What we do not do
We do not profile visitors or make decisions based solely on automated processing that have legal or similarly significant effects on a person. The form service uses an automated spam filter, described below. The site has no newsletter sign-up.
Who receives the data
We do not sell or publish the data. Enquiries are received by the company mailbox shown on this page and handled by Margherita Borgo, with technical support from Thomas Conzato. No CRM integrations or forwarding to other business recipients are planned.
The necessary technical services are also involved:
- people authorised by MA.VI to manage enquiries and systems;
- Netlify, Inc. (United States), which hosts the site, receives the form messages and stores them. It is a processor under Article 28 GDPR. To filter spam, Netlify uses the Akismet service, which analyses the data sent through the form;
- Server Plan S.r.l. (Italy), which provides the company’s mailbox;
- public authorities, when the law requires it.
Transfers outside the European Economic Area
Netlify and its providers may process data outside the European Economic Area, including in the United States. Netlify’s data processing agreement governs these transfers: it provides for the EU-US Data Privacy Framework for covered transfers and the European Commission’s standard contractual clauses in the other cases set out in the agreement. Contact us for information on the applicable safeguards and how to obtain a copy.
How long we keep the data
- Form messages and related correspondence: 12 months from receiving the request, or from the last exchange about it if later. At the end of this period, we remove them from operational records, including the form dashboard and email. Margherita Borgo coordinates this work, with technical support from Thomas Conzato.
- Technical browsing data: for the time needed to deliver the service, check its operation and address abuse, within the retention limits of the hosting service.
- If an engagement follows: as stated in the dedicated notice.
- If needed to meet a legal obligation or establish or defend a legal claim: only the necessary data, for the duration of the obligation or matter.
Any technical backups follow the retention and overwrite cycles of the services used; they are not used for new business activities.
Your rights
In the cases and subject to the conditions set out in the GDPR, you can ask us for access to your data (Article 15), rectification (16), erasure (17), restriction of processing (18) and portability (20). You can object to processing based on legitimate interest (21).
To exercise a right, write to the email address or the PEC shown on this page. We reply within one month; in complex cases the deadline can be extended by two months, and we tell you.
If you believe the processing breaches the GDPR, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, garanteprivacy.it).
Links to other sites
The site links to the portals of public bodies and other parties. Those operators’ own notices apply to their processing. The Anticaporalato portal is a separate site.
Changes
If the processing changes, we update this page and its last-updated date.