Privacy policy
Privacy notice pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and to Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018
Mital Srl cares about the privacy of everyone who visits this website. This notice explains which personal data we collect through mital.com, why we collect them, how long we keep them and which rights you can exercise.
Data controller
Mital Srl
Via Cherso, 21 — 31045 Motta di Livenza (TV), Italy
VAT and tax code 01110170261
Email: mital@mital.com — Phone: +39 0422 768522
Any request concerning the processing of personal data should be addressed to the Controller at the contact details above.
Data protection officer (DPO)
The Controller has not appointed a Data Protection Officer, as none of the mandatory conditions set out in Article 37 GDPR applies. For any data protection matter you may contact the Controller directly.
What data we process, for which purposes and on which legal basis
1. Contact form
Data: full name, email address, phone number (optional), profession (optional), the content of your message, date and time of submission, acknowledgement of this notice.
Purposes: receiving and answering your enquiry, providing the commercial or technical information requested, managing any follow-up related to that enquiry.
Legal basis: steps taken at the data subject’s request prior to entering into a contract (Art. 6.1.b GDPR) and, for the ordinary handling of correspondence with professionals and companies, the Controller’s legitimate interest in replying to those who get in touch (Art. 6.1.f GDPR).
How: enquiries are recorded in the website’s restricted area and notified by email.
2. Newsletter subscription
Data: email address, profession (optional), browsing language, date and time of subscription, acknowledgement of this notice.
Purposes: sending news about products, projects and initiatives of Mital Srl.
Legal basis: the freely given, specific and revocable consent of the data subject (Art. 6.1.a GDPR), expressed by ticking the relevant box in the subscription form. Consent is optional: refusing it has no consequence other than not receiving the newsletter.
How: subscriptions are recorded in the website’s restricted area.
3. System and security logs
Data: IP address, date and time of the request, page requested, browser type and operating system, request outcome. These data are implicitly transmitted by internet communication protocols and are automatically recorded by the systems hosting the website.
Purposes: ensuring the operation, stability and security of the website, detecting abuse and intrusion attempts, establishing liability in the event of computer crimes against the website.
Legal basis: the Controller’s legitimate interest in the security of its infrastructure and in knowing how the website is used (Art. 6.1.f GDPR).
Server statistics: the server derives aggregate traffic statistics from the logs (AWStats software), which may list the most frequent IP addresses; only the Controller and the hosting provider can consult them, and no cookies are used.
4. Technical cookies
Data: language preference and the choice made in the cookie notice, stored on the user’s device.
Purposes: delivering the service requested by the user.
Legal basis: Article 122 of Italian Legislative Decree 196/2003, which does not require consent for technical cookies, together with the Controller’s legitimate interest (Art. 6.1.f GDPR). Full details are given in the Cookie policy.
5. Visit statistics (Google Analytics)
Data: pseudonymous online identifiers (_ga cookies), pages visited, date and duration of the visit, referring site, device type, browser and operating system, approximate geographic location. Google Analytics 4 does not log or store the IP addresses of users in the European Union.
Purposes: aggregate statistics on how the website is used, in order to improve its content and operation. They are not used to profile individual visitors or for advertising.
Legal basis: the user’s consent (Art. 6.1.a GDPR and Article 122 of Italian Legislative Decree 196/2003), given with the “Accept” button in the cookie notice and revocable at any time through the “Cookie preferences” link at the bottom of every page. Without consent these data are not collected. Details are given in the Cookie policy.
Whether providing data is mandatory
Providing the data marked as required in the forms is necessary in order to handle your request or subscription: without them we cannot reply. All other data are optional and their absence does not affect the service.
Retention periods
Data are kept only for as long as is strictly necessary for the purposes for which they were collected, and in any case according to the periods below, unless a legal obligation or the need to establish or defend a legal claim requires otherwise.
| Contact form | 24 months from the last exchange of correspondence. If the enquiry leads to a business relationship, the data become part of the contractual and accounting records and follow the statutory periods (10 years, Art. 2220 of the Italian Civil Code). |
|---|---|
| Newsletter | Until consent is withdrawn or the subscription is cancelled. Evidence of the consent given is kept for 24 months after withdrawal, for the sole purpose of demonstrating the lawfulness of the processing (Art. 7.1 GDPR). |
| System logs | Website access logs: 10 days. Aggregate statistics derived from the logs: 12 months. Longer retention only if required by the judicial authorities. |
| Technical cookies | Durations are listed in the Cookie policy (12 months at most). |
| Statistics (Google Analytics) | Cookies on the device: 13 months. Statistical data held by Google: up to 14 months, according to the retention setting of the Google Analytics property. |
Recipients of the data and external processors
Data are processed by staff of the Controller who are expressly authorised and instructed under Article 29 GDPR and Article 2-quaterdecies of Legislative Decree 196/2003.
The following parties may also access the data, within the limits of their respective duties and as data processors appointed under Article 28 GDPR:
- the provider of hosting and technical maintenance for the website and the email service;
- consultants and professionals assisting the Controller, where access to the data is necessary for their work;
- Google Ireland Limited, provider of the Google Analytics service, only for visitors who have consented to statistics cookies.
An up-to-date list of the data processors is available on request by writing to mital@mital.com. Data are never disseminated and are never sold or transferred to third parties for their own marketing purposes.
Transfers outside the European Union
Data collected through the website’s forms and system logs are processed and stored on servers located within the European Union.
Only for visitors who consent to statistics cookies, Google Analytics data may be transferred to Google LLC in the United States. The transfer is based on the European Commission’s adequacy decision of 10 July 2023 on the EU-U.S. Data Privacy Framework, in which Google LLC participates (Art. 45 GDPR). No other transfer to third countries or international organisations takes place; should one become necessary, it will only occur on the basis of an adequacy decision or of appropriate safeguards under Articles 44 et seq. GDPR, and this notice will be updated accordingly.
Automated decision-making and profiling
The Controller carries out no profiling and applies no automated decision-making producing legal effects or similarly significantly affecting the data subject, within the meaning of Article 22 GDPR.
Security of processing
The website is only reachable over an encrypted HTTPS connection. The Controller implements technical and organisational measures appropriate under Article 32 GDPR to protect data against destruction, loss, unauthorised access or unlawful processing, including access control, systems updating and regular backups.
Your rights (Articles 15-22 GDPR)
You may exercise the following rights at any time:
- Access (Art. 15): obtain confirmation as to whether your data are being processed and receive a copy together with all the prescribed information.
- Rectification (Art. 16): have inaccurate data corrected or incomplete data completed.
- Erasure (Art. 17): obtain the deletion of your data, where no retention obligation applies.
- Restriction (Art. 18): ask for processing to be suspended in the cases provided for by law.
- Portability (Art. 20): receive, in a structured, commonly used and machine-readable format, the data you provided on the basis of consent or a contract, and have them transmitted to another controller.
- Objection (Art. 21): object at any time, on grounds relating to your particular situation, to processing based on legitimate interest.
- Not to be subject to automated decisions (Art. 22), which does not apply here.
How to exercise your rights
Simply send a request, in any form, to mital@mital.com or by post to Mital Srl — Via Cherso, 21 — 31045 Motta di Livenza (TV), Italy, stating the right you wish to exercise. The Controller may ask for information needed to verify your identity. The reply is free of charge and is provided within one month of receipt of the request; this may be extended by a further two months where the request is particularly complex, in which case you will be informed within the first month (Art. 12 GDPR).
Withdrawing consent
Where processing is based on consent, you may withdraw it at any time, as easily as it was given, without having to give reasons and at no cost (Art. 7.3 GDPR). For the newsletter, use the unsubscribe link included in our messages or write to mital@mital.com. For statistics cookies, use the “Cookie preferences” link at the bottom of every page and choose “Reject”. Withdrawal does not affect the lawfulness of processing carried out before it.
Complaint to the supervisory authority
If you believe that the processing of your data infringes data protection law, you may lodge a complaint with the supervisory authority of the country where you live or work, or where the alleged infringement took place (Art. 77 GDPR). In Italy:
| Authority | Garante per la protezione dei dati personali (Italian Data Protection Authority) |
|---|---|
| Address | Piazza Venezia 11 — 00187 Rome, Italy |
| Phone | +39 06 696771 |
| garante@gpdp.it | |
| Certified email | protocollo@pec.gpdp.it |
| Website | www.garanteprivacy.it |
Your right to an effective judicial remedy under Article 79 GDPR remains unaffected.
Children
This website addresses professionals, dealers and adult customers and is not intended for children under 14. The Controller does not knowingly collect personal data from children; should it become aware of such data, it will delete them without delay.
Changes to this notice
This notice may be updated to reflect changes in the law or in the service offered. The version published on this page is the one in force and the date below indicates its latest revision. Newsletter subscribers will be informed of any substantial change.
Last updated: 15 October 2026