Privacy Policy
Last updated: 3 November 2026
This notice is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018 (“Italian Privacy Code”) to visitors of moseu.it and to anyone who contacts us through the contact form or by email.
1. Data controller
The data controller is MoS – Management of Solutions S.r.l., based in Ancona (AN) 60100, Marche, Italy, VAT no. IT02168000673 (“MoS” or the “Controller”).
For any matter concerning the processing of personal data, please write to info@moseu.it. The Controller has not appointed a Data Protection Officer (DPO), as it is not required to do so under Article 37 GDPR.
2. Data we process
a) Browsing data. The systems running the website collect, during normal operation, certain data whose transmission is implicit in the use of Internet protocols: IP address, browser type and operating system, date and time of the request, page requested and server response code. This data is used only to ensure the operation and security of the website, not to identify users.
b) Data provided through the contact form. Full name, email address, phone number, company/organisation, sector and service of interest, content of the message.
c) Data provided by email or phone. Sending an email to the addresses shown on the website involves the collection of the sender's address and any other data contained in the message.
Please do not include in your message special categories of data (e.g. health data, political opinions, religious beliefs) or data relating to criminal convictions, as they are not needed to answer your request.
3. Purposes and legal bases
- Answering requests for information or consultancy and, where requested, preparing a proposal or quote. Legal basis: steps taken at the data subject's request prior to entering into a contract (Art. 6(1)(b) GDPR) and the Controller's legitimate interest in replying to those who contact it (Art. 6(1)(f) GDPR).
- Ensuring the operation and security of the website, and preventing abuse and automated spam. Legal basis: the Controller's legitimate interest (Art. 6(1)(f) GDPR).
- Complying with legal obligations or requests from authorities. Legal basis: legal obligation (Art. 6(1)(c) GDPR).
- Establishing, exercising or defending legal claims. Legal basis: the Controller's legitimate interest (Art. 6(1)(f) GDPR).
Your data is not used for marketing, newsletters or profiling, nor is it transferred to third parties for such purposes.
4. Whether providing data is mandatory
Providing your full name, email and message is necessary to answer your request; without them we will not be able to reply. The other fields of the form are optional.
5. How data is processed
Data is processed electronically by authorised and trained personnel (Art. 29 GDPR), with appropriate technical and organisational measures to ensure its confidentiality, integrity and availability (Art. 32 GDPR), including encrypted communications (HTTPS) and credential-protected access to systems. No automated decision-making, including profiling, takes place (Art. 22 GDPR).
6. Recipients
Data may be disclosed, only to the extent strictly necessary, to:
- Netlify, Inc. – provider of website hosting and contact form processing;
- Netsons – provider of the domain and of the email services through which requests are sent and received;
- consultants and professionals assisting the Controller (e.g. tax or legal advisers), bound by confidentiality;
- public authorities, where required by law.
Providers processing data on behalf of the Controller act as data processors under Article 28 GDPR. Data is not disseminated.
7. Transfers outside the EU
Netlify, Inc. is based in the United States; browsing data and data sent through the form may therefore be processed outside the European Economic Area. Such transfers are based on the safeguards provided for in Chapter V GDPR, namely the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework (Art. 45 GDPR), where the provider participates in it, and/or the Standard Contractual Clauses adopted by the Commission (Art. 46 GDPR). A copy of these safeguards can be requested from the Controller.
8. Retention period
- Contact requests: for the time needed to handle the request and in any case no longer than 24 months from the last contact, unless a contractual relationship follows; in that case data is kept for the duration of the relationship and for the subsequent periods required by law (e.g. 10 years for accounting and tax records).
- Browsing data: for the time strictly necessary to ensure website security, according to the hosting provider's technical retention periods, unless needed to investigate unlawful activity.
9. Your rights
You may at any time exercise the rights provided for in Articles 15–22 GDPR:
- access to your data and information on its processing (Art. 15);
- rectification of inaccurate or incomplete data (Art. 16);
- erasure of your data (Art. 17);
- restriction of processing (Art. 18);
- data portability (Art. 20);
- objection to processing based on legitimate interest, on grounds relating to your particular situation (Art. 21).
To exercise your rights, write to info@moseu.it. We will reply without undue delay and in any case within one month of your request, extendable in the cases set out in Article 12(3) GDPR.
You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome – www.garanteprivacy.it) or with the supervisory authority of the EU Member State where you live or work.
10. Cookies
The website does not use cookies or any other tracking tools. For details, please see the Cookie Policy.
11. Minors
MoS services are aimed at companies, organisations and professionals. The website is not intended for children under 14 and the Controller does not knowingly collect their data.
12. Changes to this notice
The Controller may amend this notice, for example following regulatory changes or new services on the website. The updated version is always published on this page, with the date of the last update.