Skip to main content

Privacy Policy

This is a courtesy translation. In case of any discrepancy, the Italian version prevails.

This notice describes how Magnet Communication S.R.L. (hereinafter also “Magnet”, “we”) processes the personal data of users who visit the website magnetmilano.it or who interact with the forms and services made available on the website.

This notice is provided pursuant to Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018 (“Italian Privacy Code”), and is addressed to anyone who interacts with the web services accessible online from the address above.

Data controller

The data controller is:

Magnet Communication S.R.L.
Registered office: Via Carlo d’Adda 4/4, 20019 Settimo Milanese (MI), Italy
Operational office: Via Albert Einstein 16, 20057 Assago (MI), Italy
VAT number and tax code: 11402850967
Email: info@magnetmilano.it
Website: magnetmilano.it

Types of data processed

Through the website we may collect, directly or through third parties, the following types of data: contact data (name, email address, subject and content of the message sent through the contact form), browsing data collected automatically by the IT systems that run the website, strictly necessary cookies and, only with your consent, statistical data collected through Google Analytics.

Data you provide through the contact form

When you fill in the contact form on the website, we collect the following data that you provide:

  • Name — to address you correctly in our replies
  • Email address — so that we can reply to you
  • Subject and message — to understand your request
  • Date and time of submission — for technical and auditing purposes

To protect the service technically (spam and abuse prevention), we may record a technical identifier derived from your IP address (encrypted and non-reversible) and your browser’s User-Agent at the time of submission. This data is not used for profiling and is not shared with commercial third parties.

Browsing data

The IT systems and software procedures that run the website acquire, in the course of their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified data subjects, but by its very nature it could, through processing and association with data held by third parties, allow users to be identified.

This category includes: the IP addresses or domain names of the computers used, the URI addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the server’s response and other parameters relating to the user’s operating system and IT environment.

Statistical data (Google Analytics)

If you accept statistical cookies in the banner, the website uses Google Analytics 4, a service of Google Ireland Limited, to collect aggregated and pseudonymous information on how the website is used: pages visited, length of the visit, device and browser type, approximate geographic area and source of the visit. Google Analytics 4 does not log or store full IP addresses. If you do not give your consent, Google tags run in consent-denied mode (Google Consent Mode) and do not set cookies; Google may only receive cookieless technical signals, used in aggregated form. Details are in the Cookie Policy.

Purposes and legal basis of processing

Your personal data is processed for the following purposes and on the following legal bases:

  • Replying to requests sent through the contact form — legal basis: performance of pre-contractual measures at the request of the data subject (Art. 6(1)(b) GDPR)
  • Statistics on website use through Google Analytics — legal basis: consent of the data subject (Art. 6(1)(a) GDPR), which can be withdrawn at any time from the “Cookie preferences” link at the bottom of every page
  • Aggregated, cookieless measurement of traffic and campaign effectiveness (Google Consent Mode) — legal basis: legitimate interest of the Controller (Art. 6(1)(f) GDPR)
  • Ensuring the security of the website and preventing fraudulent activity (e.g. spam, abuse attempts) — legal basis: legitimate interest of the Controller (Art. 6(1)(f) GDPR)
  • Complying with legal, accounting and tax obligations — legal basis: legal obligation to which the Controller is subject (Art. 6(1)(c) GDPR)
  • Establishing, exercising or defending legal claims — legal basis: legitimate interest of the Controller (Art. 6(1)(f) GDPR)

How data is processed

Data is processed using IT and online tools, with organizational methods and logic strictly related to the purposes stated. Contact form data is stored on servers located within the European Union and is protected by appropriate technical and organizational measures to ensure its confidentiality, integrity and availability, in accordance with Articles 25 and 32 GDPR.

No automated decision-making or profiling within the meaning of Article 22 GDPR takes place.

Data retention period

Personal data collected through the contact form is kept for as long as strictly necessary to handle your request and, after that, for a maximum of 24 months from the last contact in order to maintain a business relationship, unless you request otherwise. After this period, the data is deleted or anonymized, without prejudice to retention obligations provided by law (for example for tax or accounting purposes, for which the retention periods are those set by the applicable rules).

Browsing data is not kept longer than technically necessary to manage the website and to establish liability in the event of possible computer crimes against the website. Google Analytics statistical data is kept for a maximum of 14 months, according to the retention settings of the Google Analytics property.

Recipients of the data

The personal data collected is not transferred, sold or disclosed to third parties for marketing purposes. It may be shared with:

  • Employees and collaborators of Magnet Communication S.R.L., within the limits of their respective duties and after being designated as persons authorized to process the data
  • Technical service providers (hosting, website maintenance, transactional email delivery) acting as Processors pursuant to Art. 28 GDPR
  • Google Ireland Limited, provider of Google Analytics and Google tags, as Processor pursuant to Art. 28 GDPR
  • Public authorities, where required by a legal obligation or by an order of the judicial authority

Contact form data is not transferred outside the European Economic Area (EEA). Statistical data collected through Google Analytics and the signals of Google tags may also be processed by Google in the United States: Google LLC participates in the EU-U.S. Data Privacy Framework, recognized as adequate by the European Commission in its decision of July 10, 2023 (Art. 45 GDPR). Any other transfers outside the EEA will take place only to countries deemed adequate by the European Commission or with appropriate safeguards pursuant to Articles 46 et seq. GDPR (for example Standard Contractual Clauses).

Cookie

The website magnetmilano.it uses strictly necessary technical cookies and, only with your consent, Google Analytics statistical cookies. It does not use profiling or marketing cookies. You can give, refuse or withdraw your consent at any time from the “Cookie preferences” link at the bottom of every page. For full details, see our Cookie Policy.

Your rights as a data subject

As a data subject, you have the right at any time to exercise the rights provided by Articles 15–22 GDPR, in particular:

  • Right of access (Art. 15) — to obtain confirmation as to whether or not your personal data is being processed and, if so, to obtain access to it
  • Right to rectification (Art. 16) — to have inaccurate data corrected or incomplete data completed
  • Right to erasure (Art. 17) — to have your personal data erased in the cases provided by law (“right to be forgotten”)
  • Right to restriction of processing (Art. 18) — to obtain restriction of processing where specific conditions apply
  • Right to data portability (Art. 20) — to receive the personal data concerning you in a structured, commonly used and machine-readable format, and to transmit it to another controller
  • Right to object (Art. 21) — to object at any time to the processing of data concerning you based on the Controller’s legitimate interest
  • Right to withdraw consent (Art. 7) — to withdraw the consent given at any time, without affecting the lawfulness of processing carried out before the withdrawal

To exercise your rights, you can send a written request to info@magnetmilano.it or by registered mail with return receipt to the registered office of Magnet Communication S.R.L.

Right to lodge a complaint

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the Garante per la protezione dei dati personali, the Italian supervisory authority, located at Piazza Venezia 11, 00187 Roma (www.garanteprivacy.it), or to bring proceedings before the competent courts pursuant to Article 79 GDPR.

Changes to this notice

Magnet Communication S.R.L. reserves the right to change this notice at any time by publishing the changes on this page. We therefore invite you to check it periodically. If the changes concern processing based on consent, Magnet will, where necessary, collect the data subject’s consent again. Last updated: October 1, 2026.

Contact

For any question or request about the processing of your personal data, you can contact us at info@magnetmilano.it.