privacy policy

PRIVACY POLICY – MASSINI INDUSTRIES S.r.l.

This policy describes how Massini Industries S.r.l. processes the personal data of users who visit the company’s websites and social media channels, pursuant to Regulation (EU) 2016/679 (“GDPR”) and Legislative Decree No. 196/2003 as amended by Legislative Decree No. 101/2018 (Privacy Code). Massini Industries S.r.l. operates under the trade names MF Tecno Packaging System and MIAL Advanced Industrial Technologies. This policy applies to all websites managed by the company.

TABLE OF CONTENTS

• 1. Data Controller
• 2. Collection of Personal Data
• 3. Data Retention Period
• 4. Rights of the Data Subject
• 5. Social Media and Third-Party Platforms
• 6. Data Recipients – Transfer of Data outside the EU
• 7. Complaint to the Supervisory Authority

1. Data Controller

The Data Controller is MASSINI INDUSTRIES S.r.l., with registered office at Via Porziuncola, 28, 06081, Tordandrea di Assisi (PG), Italy; VAT No. 00470880543, represented by its legal representative. The websites www.massiniindustries.com, www.mftecno.com and www.mialtecno.com are owned and managed by Massini Industries S.r.l. as sole Data Controller pursuant to Art. 13 GDPR. Pursuant to Art. 37 GDPR, Massini Industries has appointed a DPO (Data Protection Officer), reachable at: privacy@massiniindustries.com.

2. Collection of Personal Data

a) Browsing Data

Certain personal data whose transmission is implicit in the browsing of websites (including traffic data, location data, and communication data) are acquired by IT systems to enable their correct operation. Although not collected for association with identified individuals, they may allow user identification through processing and cross-referencing with third-party data. Legal basis: legitimate interest in the correct operation of the website (Art. 6(1)(f) GDPR).

b) Information and Quote Requests

Through the contact forms on the website, users may request information or assistance. Data provided by the user (first name, last name, e-mail address, phone number and information included in the message) are collected. Data may be associated with an internal CRM_ID to track interactions within the scope of commercial and marketing relationships. Legal basis: Art. 6(1)(b) GDPR.

c) Work with Us

Users may submit unsolicited applications or respond to open positions on LinkedIn or on the company’s websites. Data processed include first name, last name, e-mail and curriculum vitae. Data will be retained for the period necessary to evaluate the application and deleted upon the candidate’s request. Legal basis: Art. 6(1)(b) GDPR.

d) Newsletter

Massini Industries newsletters are sent by e-mail exclusively to users who expressly subscribe via the dedicated form. To unsubscribe, users may click the unsubscribe link included in every e-mail or write to privacy@massiniindustries.com.

e) Third-Party Data and Lead Generation

For business development activities, Massini Industries may acquire professional contact data through commercial intelligence platforms (e.g., Apollo.io), used exclusively to send commercial proposals relevant to the recipient’s professional role. Legal basis: legitimate interest (Art. 6 GDPR). The data subject may object to processing at any time by writing to privacy@massiniindustries.com or clicking the opt-out link in any communication.

f) Cookies

Massini Industries websites use technical cookies (necessary for operation), analytics cookies (usage statistics) and profiling/marketing cookies (remarketing and ad personalisation). Analytics and profiling cookies require the user’s prior consent via the cookie banner. For detailed information, please refer to the Cookie Policy at https://www.massiniindustries.com/cookies/.

g) Microsoft Clarity

Massini Industries uses Microsoft Clarity to analyse user behaviour through heatmaps and session recordings, in order to improve and market its products and services. Data are collected exclusively upon the user’s explicit consent, which may be revoked at any time via the cookie banner.

3. Data Retention Period

Personal data are retained for the periods strictly necessary for the purposes for which they were collected:

• Browsing data: 12 months
• Contact/quote requests: 24 months from the date of reply
• Job applications: 12 months (unless otherwise indicated by the candidate)
• Newsletter: until unsubscription
• Lead generation: 24 months from last contact

After these periods, data will be deleted or anonymised, unless required for ongoing or threatened legal proceedings.

4. Rights of the Data Subject

Under the GDPR, the data subject may exercise the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification or erasure (Arts. 16–17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Withdrawal of consent at any time (Art. 7 GDPR)
• Right to object to direct marketing
• Data portability (Art. 20 GDPR)
• Right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it)

To exercise these rights, please contact Massini Industries S.r.l. at: privacy@massiniindustries.com.

5. Social Media and Third-Party Platforms

Massini Industries is present on LinkedIn, Facebook, Instagram, YouTube, TikTok and WhatsApp. Where the company uses tools provided by the platforms (such as company pages or Insights features), joint controllership of processing with the platform operator may arise, pursuant to CJEU ruling C-210/16.

LinkedIn (LinkedIn Ireland Unlimited Company)

Used for institutional communication, employer branding and recruitment. Legal basis: legitimate interest (organic communication) and consent (advertising campaigns). Privacy policy: https://www.linkedin.com/legal/privacy-policy

Facebook and Instagram (Meta Platforms Ireland Limited)

Massini Industries manages company pages on Facebook and Instagram to promote its products and manage online community relations. As Page Admin, it is a joint controller with Meta for user statistical data. Legal basis: legitimate interest (organic); consent (campaigns). Privacy policy: https://www.facebook.com/privacy/policy/

YouTube (Google LLC / Google Ireland Limited)

Used for publishing corporate videos. Aggregated analytics data are provided by Google under a Data Processing Agreement. Embedding YouTube videos may activate third-party Google cookies. Privacy policy: https://policies.google.com/privacy

TikTok (TikTok Technology Limited)

Used for promotional video content. TikTok Technology Limited is based in the United Kingdom; its parent company ByteDance Ltd. is based in China. Data transfers to third countries take place on the basis of Standard Contractual Clauses. Legal basis: legitimate interest (organic content). Privacy policy: https://www.tiktok.com/legal/page/eea/privacy-policy/it

WhatsApp (Meta Platforms Ireland Limited)

Used for commercial communications and customer support. Data processed include phone number, contact name, message content and communication metadata. Legal basis: contract (pre-contractual/contractual communications); consent (marketing). Users may withdraw consent by writing to privacy@massiniindustries.com. Privacy policy: https://www.whatsapp.com/legal/privacy-policy-eea

6. Data Recipients and Transfer of Data outside the EU

Personal data collected may be shared with the following categories of recipients, acting as Data Processors (Art. 28 GDPR) or independent Data Controllers:

• IT service and hosting providers
• Email marketing and commercial communications management platforms
• Website analytics and optimisation platforms
• Commercial intelligence platforms for lead generation (e.g., Apollo.io)
• Public, judicial or supervisory authorities, where required by law

Data are not disclosed to third parties for their own purposes, except where required by law. Some providers (including Google, Meta, TikTok and LinkedIn) may process personal data outside the European Economic Area (EEA), in particular in the United States. Such transfers take place in compliance with Arts. 44–49 GDPR, via adequacy decisions, Standard Contractual Clauses (SCCs) or adherence to the EU-US Data Privacy Framework. For further information: privacy@massiniindustries.com.

7. Complaint to the Supervisory Authority

Without prejudice to any other administrative or judicial remedy, any data subject who considers that the processing of their personal data infringes the GDPR has the right to lodge a complaint with the competent supervisory authority, in particular in the Member State of their habitual residence, place of work, or place of the alleged infringement. In Italy, the competent authority is the Garante per la Protezione dei Dati Personali: Piazza Venezia 11, 00187 Rome – Tel. (+39) 06.69677.1 – www.garanteprivacy.it. To exercise your rights: privacy@massiniindustries.com.

Massini Industries S.r.l. – Via Porziuncola 28, 06081 Tordandrea di Assisi (PG), Italy – VAT No. 00470880543 – privacy@massiniindustries.com