Privacy Policy

The data controller is Meccaniche Creative, a brand of Your Marketing Lab S.r.l., Via Bligny 10, 10122 Turin (TO), VAT 13110990010 — info@meccanichecreative.it — +39 350 136 5282.

A Data Protection Officer (DPO) has not been appointed: for any request relating to personal data you may write directly to the addresses above.

We process exclusively the data you provide us or that is collected automatically while you browse:

• Contact and company data: first and last name, company, role, email, phone, website, sector and target markets, the content of the message, any attached files.
• Application data: curriculum vitae, portfolio and any information contained in the documents sent through the Lavora con noi page.
• Browsing data: IP address (truncated / anonymised where provided for), browser and device type, operating system, pages visited, time spent, referrer, cookie identifiers and similar technologies.

Providing the data marked as mandatory in the forms is necessary to follow up on the request: without it we cannot reply. Providing the other data is optional. Consent to analytics, marketing and session-recording cookies is always free and may be withdrawn at any time without consequences for browsing.

For the management and measurement of the site we use the following services, which may process data as processors or independent controllers:

• Google Analytics 4 (Google Ireland Ltd.) — aggregated statistics on site usage, activated only after consent, with anonymised IP and the non-essential advertising features disabled.
• Google Ads (Google Ireland Ltd.) — conversion measurement and remarketing, activated only after consent to marketing cookies.
• Meta Pixel (Meta Platforms Ireland Ltd.) — measures the results of campaigns on Facebook and Instagram and enables remarketing, activated only after consent to marketing cookies.
• Microsoft Clarity (Microsoft Ireland Operations Ltd.) — records the session (scrolling, clicks, path) to understand how the site is used and what does not work, activated only after consent to session recording.
• Google Search Console (Google Ireland Ltd.) — aggregated and anonymous data on ranking in search results; it sets no cookies on the user's device.
• Hosting providers, e-mail (Google Workspace) and productivity tools, and the sales CRM (EspoCRM), appointed processors of the data under Art. 28 GDPR.

Some providers (in particular Google, Meta, and Microsoft) may transfer data to third countries, including the United States. These transfers take place on the basis of the applicable adequacy decisions (EU-US Data Privacy Framework) and/or the Standard Contractual Clauses adopted by the European Commission, supplemented by additional security measures.

• Contact requests not followed by a contractual relationship: 24 months from the last contact.
• Contractual, accounting and tax data: 10 years, as required by law.
• Unsolicited applications: 24 months, unless earlier erasure is requested.
• Statistical and measurement data: for the durations stated in the Cookie Policy, in any case no longer than 14 months for Google Analytics identifiers.

Data may be known to authorised personnel of the controller, to the collaborators and partners involved in providing the service (always bound by confidentiality obligations), to the technology providers appointed as processors under Art. 28 GDPR — including Google Ireland Limited (Google Analytics 4, Google Ads, and Google Search Console), Meta Platforms Ireland Ltd. (Meta Pixel), and Microsoft Ireland Operations Ltd. (Microsoft Clarity) — and to the competent authorities where required by law. No dissemination of the data to unspecified persons.

You may exercise at any time the rights set out in Articles 15–22 GDPR:

• access to your data and to information about the processing;
• rectification of inaccurate data and completion of incomplete data;
• erasure (right to be forgotten) in the cases provided for;
• restriction of processing and objection to processing based on legitimate interest;
• data portability in a structured, machine-readable format;
• withdrawal of consent at any time, without affecting the lawfulness of processing carried out before it.

Requests should be sent to info@meccanichecreative.it: we reply within 30 days. You may also lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).

We adopt technical and organisational measures adequate to protect the data from unauthorised access, loss or disclosure. The site is not directed at those under 16 and we do not knowingly collect their data.

This notice may be updated to adapt it to regulatory changes or to the services used. The version in force is always published on this page, with its last-updated date. For the management of cookies, see the Cookie Policy.