Privacy Policy

1. Data Controller

MTS & Care S.r.l.
Registered office: Via Triplok 27, 24060 Gorlago (BG), Italy
VAT No.: IT04196100160
Email: privacy@mts-care.com

2. Purposes of Processing and Legal Basis

• Website browsing — automatic collection of technical data (IP address, browser, pages visited). Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• Responding to contact requests — processing of data submitted through the contact form. Legal basis: performance of pre-contractual measures (Art. 6(1)(b) GDPR).
• Sending commercial communications — sending newsletters and updates about our services. Legal basis: explicit consent (Art. 6(1)(a) GDPR).
• Anonymous statistical analysis — use of analytics tools to understand website usage. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

3. Categories of Data Processed

• Browsing data: IP address, browser type, operating system, pages visited, date and time of access.
• Voluntarily provided data: name, surname, email, phone number, company and any other information entered in contact forms.

4. Data Recipients

Data may be shared with technology service providers (hosting, analytics, email marketing) acting as data processors. No transfer of data to countries outside the EU is envisaged, except where necessary with appropriate safeguards pursuant to Chapter V of the GDPR.

5. Data Retention Period

• Browsing data: 24 months
• Contact data: 36 months from the last interaction
• Marketing data: until consent is withdrawn

6. Data Subject Rights

As a data subject, you have the right to:

• Access your personal data
• Request rectification or erasure
• Restrict processing
• Object to processing
• Request data portability
• Withdraw consent at any time

To exercise your rights, please write to privacy@mts-care.com. You also have the right to lodge a complaint with the Garante per la Protezione dei Dati Personali.

7. Provision of Data

The provision of data is voluntary. Failure to provide data marked as mandatory in contact forms will prevent MTS & Care S.r.l. from fulfilling the request.

8. Automated Decision-Making

No automated decision-making processes or profiling within the meaning of Article 22 of the GDPR are carried out.