Privacy Policy

1. Introduction

This privacy notice describes how we collect, use and protect the personal data of users who visit Mirasal's website, in compliance with EU Regulation 2016/679 (GDPR) and Italian Legislative Decree 196/2003 (Privacy Code) as amended by Legislative Decree 101/2018.

2. Data Controller

The Data Controller is:

3. Purposes and Legal Basis of Processing

Personal data is processed for the following purposes:

• Website navigation: navigation data is automatically collected to ensure the proper functioning of the site (legal basis: legitimate interest).
• Responding to contact requests: data provided through the contact form is used to respond to user requests (legal basis: execution of pre-contractual measures).
• Legal compliance: to fulfill obligations required by current legislation (legal basis: legal obligation).

4. Categories of Data Processed

The personal data processed is limited to common data, such as:

• First and last name
• Email address
• Company name (optional)
• Message content
• Navigation data (IP address, browser, operating system)

5. Data Recipients

Personal data may be communicated to:

• Service providers acting as Data Processors (e.g., hosting providers, email services)
• Competent authorities, where required by law

6. Data Retention

Personal data will be retained for the time strictly necessary to fulfill the purposes for which it was collected and in any case no longer than the terms provided by current legislation. Data related to contact requests will be retained for a maximum period of 24 months from collection, unless otherwise required by law.

7. Data Subject Rights

As a data subject, you have the right to:

• Access your personal data
• Obtain rectification of inaccurate data
• Obtain erasure of data (right to be forgotten)
• Restrict data processing
• Object to processing
• Request data portability
• Withdraw consent at any time
• Lodge a complaint with the Data Protection Authority

To exercise your rights, you can contact us at: info@mirasal.it

8. Processing Methods

Personal data is processed using IT and/or telematic tools, with organizational and logical methods strictly related to the indicated purposes. Adequate security measures are adopted to prevent data loss, unlawful or incorrect use, and unauthorized access. No automated decision-making is performed.

9. Place of Processing

Data is processed at the Data Controller's premises and at the data centers of service providers, located within the European Union. Data is not transferred outside the European Economic Area.

10. Changes to Privacy Policy

The Data Controller reserves the right to make changes to this notice at any time, publishing them on this page. Please check this page periodically for any updates.