Privacy Policy

PRIVACY NOTICE PURSUANT TO ART. 13 OF REGULATION (EU) 2016/679

This privacy notice is provided pursuant to Art. 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”) and, where applicable, Legislative Decree 196/2003 as amended by Legislative Decree 101/2018, by 3MA SRLS, in its capacity as Data Controller, regarding the personal data collected through navigation on the corporate website or the use of the services offered.

1. Data Controller

3MA SRLS
Registered office: Via Leopoldo Cassese snc, 84084 – Fisciano (SA), Italy
Tax code and business registration no.: 06124460657
REA no.: SA - 499104
Certified email (PEC): 3ma.srls@pec.it

2. Types of Personal Data Processed

• Browsing data: IP address, access logs, device identifiers, browser type, OS, visited pages, time spent, etc.
• Identification and contact data: name, surname, email address, phone number, company, professional role.
• Voluntary data: provided via forms or direct email.
• Special categories of data: not processed unless strictly necessary and with explicit consent.
• Data of minors: processed only with parental/legal guardian consent as required by law.

3. Purpose and Legal Basis of Processing

• 3.1 Contractual and pre-contractual purposes: responding to requests, managing services or contracts – Legal basis: Art. 6(1)(b) GDPR.
• 3.2 Legal obligations: tax, accounting, civil, IT security – Legal basis: Art. 6(1)(c) GDPR.
• 3.3 Legitimate interest: fraud prevention, legal defense, service improvement – Legal basis: Art. 6(1)(f) GDPR.
• 3.4 Direct marketing (with consent): promotional emails, newsletters, events – Legal basis: Art. 6(1)(a) GDPR.
• 3.5 Profiling (with consent): analyzing preferences and behaviors to personalize offers – Legal basis: Art. 6(1)(a) GDPR.

4. Processing Methods

Data is processed using electronic and, where necessary, paper tools by authorized personnel. Appropriate technical and organizational measures are adopted to ensure data security and confidentiality in compliance with Articles 5 and 32 of the GDPR.

5. Data Sharing and Recipients

Data may be shared with:

• Employees and collaborators, as authorized processors.
• Service providers (e.g., hosting, IT consultants, cloud providers, CRM, marketing tools).
• Legal, tax, and other professional consultants.
• Public authorities where required by law.
• Commercial partners (with explicit consent for marketing purposes).

6. Data Transfers Outside the EU

No data transfers outside the EEA are currently in place. Future transfers, if any, will comply with Articles 44 et seq. of the GDPR using appropriate safeguards (e.g., adequacy decisions, standard contractual clauses).

7. Data Retention

Data will be retained only as long as necessary for the intended purposes:

• Contractual data: 10 years.
• Marketing: until consent withdrawal or 24 months max.
• Profiling: up to 12 months.
• Technical/security logs: 12 months, extendable for investigations.

8. Data Subject Rights

Under Articles 15–22 of the GDPR, data subjects have the right to:

• Access their personal data and obtain confirmation of processing.
• Request rectification, deletion, restriction or update of data.
• Object to processing, in whole or in part.
• Withdraw consent at any time, without affecting prior lawful processing.

Requests can be sent to:

• PEC: privacy@3malog.com
• Postal address: 3MA SRLS – Via Leopoldo Cassese snc, 84084 – Fisciano (SA), Italy
• Italian Supervisory Authority: www.garanteprivacy.it

9. Updates to This Policy

This notice may be updated at any time due to legal or operational reasons. Users are encouraged to check the latest version published on the company website.