Last updated: July 27, 2026
This privacy policy describes how MC² S.r.l. processes the personal data of users who visit this website or submit a request through the available contact channels.
1. Data Controller
The Data Controller is MC² S.r.l., with registered office at Via S. Domenico, 7 – 40124 Bologna, VAT no. IT02915371203.
For requests regarding the protection of personal data, you may write to info@mc2-srl.com or contact the company using the contact details provided on the Contact page.
2. Personal Data Processed
Navigation Data
During their normal operation, the IT systems and software procedures used to operate this website acquire technical data whose transmission is implicit in the use of Internet communication protocols. This category may include IP address, date and time of the request, requested resource, response method and status, browser, operating system, and the address of the referring page.
Data Voluntarily Provided
Sending messages via the contact form or email involves processing the data communicated by the user, such as first name, last name, email address, phone number, company, products of interest, content of the request, and any additional information included in the message.
Users are requested not to transmit special categories of data pursuant to Art. 9 of the GDPR, unless strictly necessary and agreed upon in advance.
Data Processed by External Resources
The website loads typography fonts from Google Fonts, icons through the cdnjs/Cloudflare network, and embedded Google Maps on the Contact page. Requests to these providers may communicate the IP address, requested URL, browser and device information, and other technical data necessary for the connection. Further details are available in the Cookie Policy.
3. Purposes and Legal Bases
| Purpose | Legal Base |
|---|---|
| Providing the website, ensuring its security, stability, and correct display, preventing abuse, and resolving technical anomalies. | Legitimate interest of the Controller in the security and operation of the service, Art. 6, par. 1, lett. f) GDPR. |
| Responding to requests for information, quotes, assistance, or commercial contact. | Performance of pre-contractual measures taken at the request of the data subject, Art. 6, par. 1, lett. b) GDPR. |
| Complying with administrative, accounting, or legally mandated obligations. | Compliance with a legal obligation, Art. 6, par. 1, lett. c) GDPR. |
| Establishing, exercising, or defending a legal claim and managing potential disputes. | Legitimate interest of the Controller, Art. 6, par. 1, lett. f) GDPR. |
The website does not use data for solely automated decision-making processes nor for profiling activities by MC² S.r.l.
4. Nature of Data Provision
Navigation data is processed automatically when accessing the website. In forms, fields marked with an asterisk are required to process the request; failure to provide them prevents the message from being sent or managed. Telephone, company, and indication of products of interest are optional.
5. Processing Methods and Security
Data is processed using computer tools and, when necessary, organizational and paper methods, in compliance with the principles of lawfulness, fairness, transparency, minimization, and storage limitation. Appropriate technical and organizational measures proportionate to the risk are adopted to prevent loss, unlawful use, unauthorized access, or undue disclosure.
6. Data Recipients
Data may be processed by authorized personnel of MC² S.r.l. and, within necessary limits, by providers of hosting, IT maintenance, cloud services, email, or professional assistance. These subjects operate, depending on the case, as data processors pursuant to Art. 28 GDPR or as independent controllers.
Data may also be disclosed to public authorities or other subjects when required by law or necessary to protect a right. Data is not disseminated.
7. Transfers Outside the European Economic Area
The use of international technology providers may involve the processing of technical data in countries outside the European Economic Area. In such cases, the transfer takes place in compliance with Chapter V of the GDPR, based on an adequacy decision or other guarantees provided by the Regulation. The privacy policies of individual providers describe the safeguards applied to their respective services.
8. Retention Periods
- Technical data and logs: for the time strictly necessary for operation, security, and management of anomalies, except for purposes of investigating offenses or requests by the authority.
- Contact or quote requests: for the time necessary to manage the request and, in the absence of a subsequent relationship, normally no longer than 24 months from the last significant interaction.
- Data related to obligations or disputes: for the terms provided by the applicable legislation and until the expiration of the statutes of limitations.
9. Rights of the Data Subject
In the cases provided for by Articles 15-22 of the GDPR, the data subject may request access to data, rectification, erasure, restriction of processing, portability, and opposition. When processing is based on consent, this may be withdrawn at any time without affecting the lawfulness of the previous processing.
Requests can be sent to info@mc2-srl.com. The data subject also has the right to file a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or the competent supervisory authority.
10. Third-Party Services and Websites
The website contains links to LinkedIn, Facebook, and YouTube. A simple link does not involve the installation of social components on the page; by clicking the link, the user accesses the website of the relevant provider, which processes data according to its own privacy policy.
For Google Fonts and Google Maps, you can consult the Google Privacy Policy. For resources distributed via cdnjs, the Cloudflare Privacy Policy is available.
11. Changes to the Policy
This privacy policy may be updated to reflect regulatory, organizational, or technical changes. The version published on this page replaces previous ones; the date of the last update is indicated at the beginning of the document.