This policy explains how MPCO handles the personal data of people who visit this website or contact us, in line with the EU General Data Protection Regulation (GDPR, Regulation 2016/679) and Italian privacy law. We collect only what we need to answer you and to work together.

1. Data controller

Martina Paola Pastorino, trading as MPCO
Milano (MI), Italy · VAT IT10758320963
Email: martina.pastorino@mpco.it · PEC: martinapastorino@pec.it

2. What data we process

• Browsing data. When you visit the site, the servers that host it automatically record technical data such as IP address, browser type, pages requested and time of the request. We use these data only to keep the site running and secure.
• Data you send us. If you email us, call us or book a call, we process your name, email address, phone number, company and any information you choose to share.
• Booking data. Introductory calls are booked through Google Calendar's appointment booking page. When you book, Google collects your name, email address and any notes you add, and shares them with us so we can hold the call on Google Meet.

We do not ask for special categories of data, such as health information or political opinions. Please do not include them in your messages.

3. Why we process your data, and on what legal basis

Answering your requests and organizing the introductory call

Steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).

Managing the consulting relationship, if one starts, and meeting tax and accounting obligations

Performance of a contract and legal obligations (Art. 6(1)(b) and 6(1)(c) GDPR).

Keeping the site secure and defending our rights if needed

Our legitimate interest (Art. 6(1)(f) GDPR).

We do not use your data for newsletters, marketing or profiling, and we do not sell them or share them for those purposes.

4. Who receives the data

Your data are processed by the data controller and, where needed, by service providers acting as data processors under Art. 28 GDPR:

• Google Ireland Limited, for Google Calendar, Google Meet and email services;
• Netlify, Inc. (San Francisco, USA), which hosts this website;
• our accountant, for invoicing and tax obligations, if a contract starts.

Data may also be disclosed to public authorities when the law requires it.

5. Transfers outside the European Union

Some providers, such as Google and Netlify, may process data in the United States. These transfers rely on the EU–US Data Privacy Framework or on the Standard Contractual Clauses approved by the European Commission.

6. How long we keep the data

• Browsing data: for the period set by the hosting provider, unless needed to investigate a security incident.
• Contact and booking requests that do not lead to a contract: up to 24 months from the last contact.
• Contract and invoicing data: 10 years, as required by Italian law (Art. 2220 of the Civil Code).

7. Your rights

Under Articles 15–22 GDPR you can ask to access, correct or delete your data, to restrict or object to their processing, and to receive them in a portable format. To exercise these rights, write to martina.pastorino@mpco.it or to the PEC address above. We reply within one month.

If you believe your data are processed unlawfully, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).

8. Is providing data required?

No. However, without your name and email address we cannot answer your request or book a call. We do not make decisions based solely on automated processing.

9. Changes to this policy

We may update this policy from time to time. The date at the top of the page shows the latest version.

Cookie policy

This website uses only technical cookies and similar browser storage that are strictly necessary for it to work, for example to remember the project filters you select during your visit. Under the Italian Data Protection Authority's guidelines on cookies (2021), these do not require your consent.

We do not use analytics, advertising or profiling cookies, and we do not use third-party tracking tools.

The button to book a call opens Google Calendar's booking page on Google's website. That page is covered by Google's own privacy and cookie policies, available at policies.google.com.

Fonts are served directly from this website, with no connection to third-party servers.

You can delete or block cookies at any time from your browser settings.