Privacy notice

This notice explains what personal data we collect when you visit www.medevconsulting.com or contact us, why we use it and what rights you have under Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003. The Italian version prevails in case of discrepancies.

Data controller

Medev Consulting SRL, registered office Contrada Fondo Messere SNC, 75015 Pisticci (MT), Italy. VAT and tax code 01444100778, REA MT-220668.
Certified email (PEC): medevconsulting@pec.it
Email: info@medevconsulting.com · Phone: +39 0835 402422

What data we process and why

Browsing data

When you visit the site, the systems of the hosting provider, Aruba S.p.A., automatically log some technical data, such as IP address, browser type, pages requested, date and time. This is needed to run the site and protect it from abuse. The legal basis is our legitimate interest in the security and proper functioning of the site. This data is kept by the hosting provider for a limited period, normally no longer than 30 days, and then deleted automatically, unless it is needed to establish liability in case of abuse or computer crime.

Data you send us through the contact form

If you fill in the form, we process your name, email and, if provided, company, phone number and the content of your message. We use them to reply and, if you ask, to prepare a proposal. The legal basis is taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in replying to the requests we receive (Art. 6(1)(f) GDPR).

The message is sent by the website’s server, hosted by Aruba S.p.A. in Italy, to our mailbox; it does not go through any third-party service. We keep messages for up to 24 months after the last contact. If a working relationship follows, data is kept for its duration and, for civil and tax obligations, for up to 10 years after it ends (Art. 2220 of the Italian Civil Code).

Emails and phone calls

If you write to us or call us directly, we process the data you give us only to answer your request, on the same legal bases and with the same retention as the contact form.

Website analytics

Only if you accept in the cookie banner, we use Google Analytics, through Google Tag Manager, to learn in aggregate which pages are visited and improve the site. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time from the cookie preferences. The service is provided by Google Ireland Limited, acting as data processor. Google Analytics doesn’t store full IP addresses and analytics data is kept for no more than 14 months. Details are in the cookie policy.

Providing your data

Providing the form data is optional, but without your name, email and message we cannot reply. Consent to analytics is free: if you refuse it, the site works the same way.

Who we share data with

Data is processed by our authorised staff and by the providers that help us deliver the service, appointed as data processors:

• Aruba S.p.A., the website hosting provider, with servers in Italy;
• our email service provider;
• Google, for website analytics, only if you have given consent.

We don’t sell your data and don’t use it for marketing without your consent.

Transfers outside the European Union

Some providers may process data outside the European Economic Area. In those cases the transfer is based on a European Commission adequacy decision, such as the EU-US Data Privacy Framework, or on standard contractual clauses approved by the Commission.

Your rights

At any time you can ask us to:

• access your data and receive a copy;
• correct or update it;
• erase it or restrict its processing;
• receive it in a structured format (portability);
• object to processing based on legitimate interest;
• withdraw consent, without affecting processing already carried out.

To exercise them, write to info@medevconsulting.com. If you believe the processing breaches the law, you can lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

Automated decision-making

Your data is not used for decisions based solely on automated processing, including profiling.

Data protection officer

We have not appointed a data protection officer (DPO), as it is not required for our activity. For any privacy request write to info@medevconsulting.com.

Sostami app

The Sostami iPhone app, developed by Medev Consulting, has its own privacy notice (in Italian).

Security

We use appropriate technical and organisational measures to protect data from unauthorised access, loss or disclosure. The site uses an encrypted connection (HTTPS).

Changes

We may update this notice. The current version is always published on this page, with the date of the last update.