Form IS – Updated 02/2026

 

Privacy Notice for the Processing of Personal Data
Articles 13 and 14 of REGULATION (EU) 2016/679
Italian Legislative Decree 196/2003, as amended by Legislative Decree 101/2018

 

Dear Data Subject,

This notice describes how this website is managed with regard to the processing of personal data of users who visit it, as well as the data-processing practices carried out through the website. Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR), the following information is provided to users of this Website. It relates exclusively to processing carried out through this Website and not to third-party websites that may be accessed through links, whose respective privacy notices should be consulted.
This Website and any services offered through it are intended for persons aged 18 or over. The Data Controller does not intentionally process personal data relating to minors under 18 and, upon request, will promptly erase any such data collected inadvertently.

1. Data Controller
The Data Controller is Multimac srl, with registered office at Via W. Baffin, 10 – 35136 Padova (PD), Italy, Tax Code 01633140239 and VAT No. 01281830289. Contact details: telephone +39 049 713267, e-mail info@multimac.it. The Data Controller may appoint a web agency or consultant as Data Processor for technical assistance, maintenance, technical management and similar activities relating to this Website. Details may be provided upon request. The Data Controller and any Data Processor may process users’ data through duly appointed and instructed authorised personnel.

2. Categories of data processed and sources
The following categories of data may be processed:
• Browsing data: IT systems and software procedures used to operate this Website acquire, during normal operation, certain personal data whose transmission is implicit in Internet communication protocols. These include IP addresses, browser type, operating system, domain name and addresses of websites from which access or exit occurred, information on pages visited, access time, time spent on individual pages, internal browsing paths and other parameters relating to the user’s operating system and IT environment. Such technical data are collected and used in aggregate and anonymous form to enable and monitor proper use of the Website and obtain anonymous statistical information, and are deleted after processing.
• Cookies; please refer to our Cookie Policy.
• Data voluntarily provided by the user, including ordinary personal data such as identification, personal and billing data; only exceptionally, special categories of data under Article 9 GDPR or data relating to criminal convictions and offences under Article 10 GDPR.
Sources may include browsing activity, other websites, cookies and similar technologies, the user and public sources.
Data may therefore originate from automated sources, voluntary disclosures by the user or related persons, or public sources such as registers and public databases.

3. Purposes of processing
Personal data of Website users will be processed in accordance with the GDPR for the operation of the Website, including page browsing, data-collection procedures, contact forms, any registration/access to restricted areas, newsletter subscriptions and similar functions. In particular, data may be processed:
• to respond to specific requests submitted by users through the Website and its communication tools, including contact and information-request forms;
• to provide information concerning the Data Controller’s services following requests sent by e-mail or through contact forms;
• to manage registration for events organised by the Data Controller and related activities, including attendance checks and notices of updates or changes;
• for other ancillary purposes connected with the above and falling within the activities of the Website.
Data collected automatically during browsing, including technical cookies, are processed to verify and control access and proper operation of the Website. Analytics cookies may be treated as technical cookies where the applicable requirements are met; where used, IP addresses are anonymised and the processing is configured in accordance with the applicable guidance. Please refer to the Cookie Policy for further information.
Payment purposes: Multimac srl, as an independent Data Controller, does not store users’ credit-card data. Multimac has contractual relationships with Payment Service Providers and/or banks for payment collection. The connection between Multimac as supplier, the user as debtor and the Payment Service Providers and/or banks takes place through procedures supplied directly by those providers or banks, which act as independent Data Controllers. Users should consult their privacy policies. Subject to the user’s consent, card data may be stored and managed by Payment Service Providers and/or banks to facilitate subsequent purchases or refunds.

4. Legal basis for processing
Processing is based on the performance of contractual or pre-contractual obligations relating to the user’s request, such as requests for information or quotations, and, where necessary, on consent given freely and knowingly through the relevant fields and checkboxes.
Providing information in fields necessary to submit a request is inherent in that request and therefore relates to a pre- contractual or contractual obligation depending on the context. Consent may subsequently be requested for additional processing. Specific privacy notices will be provided wherever necessary. Processing may also be based on the Data Controller’s legitimate interests as described below.

5. Legitimate interests of the Data Controller
Processing may also be based on the Data Controller’s legitimate interests, including exercising its rights in the information society, performing contractual services and carrying out direct marketing activities in the manner, by the means and within the limits permitted by applicable law.

6. Mandatory or optional provision of data
The provision of browsing data depends in part on the privacy settings enabled or disabled in the user’s browser.
Disabling certain functions may affect browsing. For some Website functions, browsing data and/or technical cookies are necessary for proper operation.
Certain personal data are necessary due to the structure of the Website and its procedures. Any request for optional additional data will be accompanied by the appropriate consent mechanism. All other data are optional according to the information the user chooses to provide.
For example, an e-mail address and other fields marked as mandatory are necessary to respond to a request submitted through a contact form. Failure to provide data necessary for the requested action makes it impossible for the Data Controller to fulfil that request.

Provisions applicable to all processing
Where consent has been given, the data subject remains free to withdraw it at any time. Pursuant to Article 21 GDPR, the data subject has the right to object at any time to processing of personal data concerning him or her for the purposes described above; where the objection applies, the personal data may no longer be processed for those purposes.

7. Possible recipients of personal data
Data may be disclosed to companies connected with, affiliated to or controlled by the Data Controller, consultants and third parties acting also on behalf of the Data Controller for purposes connected with this notice, within or outside the EU, in the latter case only where the requirements of applicable law are met.
Browsing data and similar information, as well as third-party profiling cookies, may be communicated to the relevant third parties where those parties do not process them directly as independent controllers. Data may also be made available to Data Processors and duly instructed authorised persons. A detailed list is available at our registered office.

8. Retention period
Data voluntarily provided by the data subject will be retained until an express request for deletion or withdrawal is made, including through browser settings, cookie deletion or another clear request. Browsing data will be retained, in accordance with the principle of proportionality, in identifiable form for no longer than is necessary for the purposes for which they were collected or subsequently processed.
Longer retention may apply where necessary to establish, exercise or defend a legal claim or to comply with legal obligations or orders of competent authorities.

9. Rights of the data subject
As a data subject, you have the rights provided for by Articles 15 to 22 GDPR, including the right to obtain confirmation as to whether personal data concerning you are being processed and, where that is the case, access to such data; information on the purposes of processing, categories of data, recipients or categories of recipients, retention period or criteria used to determine it, and, where the data were not collected from you, available information as to their source.
You also have the right to rectification, erasure (right to be forgotten), restriction of processing, data portability, and to object to processing at any time. Pursuant to Article 21 GDPR, where personal data are processed for direct marketing purposes, including related profiling, you have the right to object at any time and the data may no longer be processed for those purposes.
You have the right to be informed of the existence of automated decision-making, including profiling, and, where applicable, to object; to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal; and to lodge a complaint with a supervisory authority, in Italy the Garante per la protezione dei dati personali.
The Data Controller will respond as soon as possible and in any event within one month of receipt of the request.

10. Withdrawal of consent and exercise of rights
Where applicable, consent may be withdrawn at any time and rights may be exercised by sending a registered letter with return receipt to Multimac srl at the address above or an e-mail to info@multimac.it.

11. Complaints
Each data subject has the right under Article 77 et seq. GDPR to lodge a complaint with a supervisory authority. In Italy, the competent authority is the Garante per la protezione dei dati personali. This is without prejudice to other available administrative or judicial remedies.

12. Profiling
Personal data provided through browsing this Website and through forms published on it may be subject to profiling by third-party providers through third-party cookies. Such providers act as independent Data Controllers for their own profiling purposes. Profiling may enable them to evaluate aspects relating to preferences, interests and browsing activity in order to provide more specific and targeted services. Please refer to the Cookie Policy for further information.

13. Data Controller, authorised persons and Data Processors
Data Controller: Multimac srl is responsible for the lawful and proper use of your personal data and may be contacted at telephone +39 049 713267 or e-mail info@multimac.it.
The updated list of authorised persons is kept at the Data Controller’s registered office. A detailed list of Data Processors is available at our registered office.

14. Social media plug-ins
This Website may contain social media plug-ins (for example, Facebook). These tools incorporate social-network functions directly into the Website and are identified by the relevant platform logo. When a user visits a page and interacts with a plug-in, the corresponding information is transmitted by the browser directly to the social-network platform and stored by it. For information on the purposes, categories and methods of collection, processing, use and retention of personal data by the social platform, and on how to exercise your rights, please consult the privacy policy of the relevant social network.

15. Links to third-party websites
This Website may contain links to third-party websites. The Data Controller accepts no responsibility for the processing of personal data by third-party websites or for the management of authentication credentials provided by third parties.

16. Cookies
Cookies are information packages sent by a web server (for example, this Website) to the user’s Internet browser, automatically stored on the user’s device and automatically sent back to the server on subsequent visits. For information on cookie characteristics, types, use and the options available to remove, delete or disable cookies, please refer to the specific Cookie Policy.


The Data Controller
MULTIMAC SRL


Contact us
Multimac srl welcomes comments regarding this Privacy Notice. Please contact us at info@multimac.it.