Privacy policy

MMB has appointed (under Article 37(b) of the GDPR) a Data Protection Officer (hereafter DPO), whose job (Article 39 of the GDPR) includes monitoring compliance with the applicable data processing regulations. You can contact our DPO for the exercise of your rights under the GDPR using the following e-mail address: rpd@mmbsoftware.it.

MMB processes personal data for the following purposes:

1. to provide a service or respond to a request made by the user; the legal basis in this case is for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract:
   • if you use our contact details on the website or use the "Please contact me" service in order to obtain commercial information regarding our activities, services or products or to request assistance in these matters, the purpose will be to follow up your specific request;
   • if you use the "Find A Dealer" search box and consent to using the "Automatically detect your location" function, we will use your geolocation coordinates to display a list of Dealers handling our products that are located closest to you; if you do not provide us with your geolocation coordinates, we will only use the information you enter when compiling the form to achieve the same result;
2. to allow us to assess whether your profile meets our needs (e.g. open job positions) and for managing employee and staff recruitment activities in general. If necessary, we also use your data to contact you in order to schedule and carry out interviews or selection tests, should you decide to send us your curriculum vitae through the "Job Applications" function, interfaced with our dedicated e-mail. The legal basis in this case is in order to take steps at your request prior to entering into a contract; however, if you freely provide us with special and sensitive data, such as data revealing your state of health (e.g. belonging to protected categories), because you believe that this type of data is useful for a better understanding of your position, the legal basis for the processing of this type of data will be your consent, which you can give at the end of our specific policy published in the "work with us" section of our website;
3. to allow us to send you, with your consent, communications by email for commercial, promotional and advertising activities, direct sales concerning our company's products and services, if you decide to subscribe to our "Newsletter";
4. to fulfil legal obligations (e.g. by order of the authorities or courts, etc.). This requirement provides the legal basis for the resulting processing;
5. to protect MMB's legal claims, i.e. a legitimate interest of the data controller, whether in court proceedings or in an out-of-court procedure.

Data communicated by the user
Data that you freely communicate to us in order to make use of the services offered are processed. For the "Please contact me" service: first name, surname, company, sector, email, telephone, reason, message, which we will retain until the declared purpose is achieved and according to the request made. For the "Find a Dealer" service via the "Automatically detect your location" function: geolocation coordinates that we will use for the time necessary for achieve the purpose without storing them on our systems. For the "Newsletter" service: first name, surname, company, email address, which we will keep until you decide to withdraw your consent by means of a simple message addressed to the controller using the contact details you have been given for the exercise of your rights, or by following the unsubscribe instructions, which you will find at the end of the emails we send you. For spontaneously submitting a job application: identification and/or personal details, contact details (address, tel. email), work and training experience, qualifications, images (photos that an applicant may attach to their CV), relating to personal interests, habits and/or preferences, cover letter/references and, where deemed necessary, membership of job-protected categories, which we will keep for a period not exceeding 12 months; in the event of an interview, the applicant's file regarding the outcome of the interview and CV will be kept for a period not exceeding 5 years, subject to their explicit consent, which they may freely express during the initial selection phase.
The optional, explicit and voluntary sending of messages to the contact addresses on the site requires us to obtain the sender's contact data, which are necessary to reply to requests, as well as all personal data included in the communication. As a general rule, we will delete any data we hold relating to or referring to the user as soon as it is no longer required to achieve the stated purposes.
Browsing data
The computer systems and software procedures used to operate this site gather certain personal data during their normal operation and transmission of this data is an intrinsic part of using Internet communication protocols. This category of data includes IP addresses or domain names of computers and terminals used by users, addresses of required resources in URI/ URL (Uniform Resource Identifier/Locator) notation, time of the request, the method used to submit the request to the server, size of the file obtained in response, a numerical code indicating the status of the response from the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment. This data is used in order to obtain anonymous statistical information on the use of the site and to check its correct operation; to allow - depending on the architecture of the systems used - the correct provision of the various functions requested, for security reasons and to ascertain responsibility in the event of hypothetical computer crimes against the site or third parties. Browsing data are generally not retained for more than seven days (except in the case of criminal investigations by judicial authorities).
Cookies and other tracking systems
Our site uses cookies to personalise content and adverts, to provide social media features and to analyse our traffic. For detailed information on the use of cookies and to express your cookie preferences, please click on the banner at the following link:

The processed data may be communicated to:

1. third-party companies for the provision of services used in the operation of the website (hosting, storage of the site's integral database, statistical analysis, sending commercial messages) acting as data processors;
2. companies belonging to the MMB group, including sister, parent, subsidiary and associated companies for administrative and commercial purposes;
3. oversight bodies, judicial authorities and all entities to which disclosure is mandatory by law (Article 6(1)(c) of the GDPR).

To obtain a full list of the data processors, you may contact the data controller at any time using the contact details provided at the end of this document. Your personal data will not be disclosed.

For the performance of certain activities, which require the processing of personal data of a common nature, we use the cloud services of our suppliers that involve transferring data to countries outside the EU, specifically to the USA. Standard contractual clauses (SCCs) adopted by the Commission (Article 46 GDPR "Transfers subject to appropriate safeguards") are included in contracts signed with suppliers which act as data processors under Article 28 of GDPR 2016/679, to safeguard the transfer of data to a non-EU country in the absence of an adequacy decision by the European Commission. You may obtain a copy of the aforementioned safeguards by making a specific request to the Data Controller in the manner indicated in the section on Rights of the data subject, or by clicking on the following links:

• https://www.salesforce.com/eu/blog/2021/09/salesforce-dpa-update-contractual-clauses (Schedule 1)
• https://business.safety.google/adsprocessorterms/ (2. Definitions and interpretation)

You are entitled to exercise your rights at any time (Article 15 et seq. of the GDPR), in particular:

1. you can confirm whether or not we hold personal data concerning you and, if we do, you can request:
   • - any available information as to their source;
   • - the purposes of the processing and its legal basis;
   • - the recipients of your personal data and how they are protected during transfer, as well as the aim pursued, and the limitations imposed on the recipient;
   • - the intended period for which your data will be stored;
   • - the rectification of inaccurate data including the completion of incomplete personal data;
   • - the restriction, or withdrawal of your consent to the processing;
2. you may also object (Article 21 of the GDPR) to the processing of your data;
3. you may request the deletion of your personal data (Article 17 of the GDPR). A request for deletion will be met only be made if storage is not compulsory under a European Union or Member State law;
4. you may obtain a copy of your data in a structured, commonly used and machine- readable format that you can also use to transmit those data to third parties;
5. if you consider that your data is being processed in breach of the GDPR, you may refer the matter to the Italian Data Protection Authority www.garanteprivacy.it.

You may assert your rights by contacting our DPO, using the contact details we have provided above, or by using the following e-mail address: trattamentodati@mmbsoftware.it. You may also exercise your rights using the form made available by the Italian Data Protection Authority at 

MMB may supplement and/or update this privacy policy in order to incorporate Italian and/or EU regulatory changes that may affect the applicable privacy legislation. MMB will inform you of any material amendments to this policy by publishing the changes on this website.