MDA Tech - Engineering Consulting

1. Data Controller

The data controller is MDA di Marco Di Goro, based in Italy, VAT number IT13501960960 (hereinafter "MDA", "we", or "us"). For any questions regarding the processing of your personal data, you may contact us at info@mda-tech.it.

2. Data Collected

We collect minimal personal data, limited to what is strictly necessary for the operation of our services. This includes: (a) contact information you voluntarily provide through our contact form (name, email address, company, phone number, and message content); (b) technical data automatically collected when you visit our website (IP address, browser type, device information, pages visited, and access timestamps) for security and maintenance purposes; (c) data processed through third-party API integrations as part of the services we provide to our clients.

3. Purpose of Processing

Your personal data is processed for the following purposes: (a) responding to your inquiries submitted via the contact form (legal basis: your consent, Art. 6(1)(a) GDPR); (b) providing and delivering our developer tools and API integration services to clients (legal basis: performance of a contract, Art. 6(1)(b) GDPR); (c) complying with legal obligations (legal basis: Art. 6(1)(c) GDPR); (d) website security and maintenance (legal basis: legitimate interest, Art. 6(1)(f) GDPR). We do not sell or rent your personal data.

4. Third-Party Services

In the course of providing our services, we may integrate with third-party APIs and platforms on behalf of our clients. These include, but are not limited to: TikTok APIs, Meta (Facebook/Instagram) APIs, and Google APIs. Data shared with these third parties is limited to what is necessary for the specific integration and is governed by their respective privacy policies. We act as a data processor when handling data on behalf of our clients through these integrations. We do not share your personal contact data with these third parties.

5. Data Retention

Contact form submissions are retained for a maximum of 12 months from the date of your inquiry, after which they are deleted unless a contractual relationship has been established. Technical log data is retained for up to 90 days for security and maintenance purposes. Client data processed through API integrations is retained only for the duration of the service agreement and deleted upon termination, unless retention is required by law.

6. Data Storage and Security

Personal data is stored on secure servers located within the European Union. We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction, including HTTPS encryption for all data in transit and access controls for stored data.

7. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the right to: (a) access your personal data (Art. 15); (b) rectify inaccurate data (Art. 16); (c) erase your data — "right to be forgotten" (Art. 17); (d) restrict processing (Art. 18); (e) data portability (Art. 20); (f) object to processing (Art. 21); (g) withdraw consent at any time without affecting the lawfulness of prior processing (Art. 7(3)). You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

8. Cookies

Our website uses only essential cookies required for basic functionality (such as remembering your language preference). We do not use tracking cookies or third-party analytics cookies. No consent is required for strictly necessary cookies under EU regulations.

9. Policy Updates

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. Continued use of our website after modifications constitutes acceptance of the updated policy.

10. Contact

For any questions about this Privacy Policy, to exercise your data protection rights, or to file a complaint, please contact: MDA di Marco Di Goro, VAT IT13501960960, Email: info@mda-tech.it.