Privacy & Cookies

1. Who is responsible for your data

The controller is MLMD SRL, trading as MLMD Heritage, VAT ID IT13795740961, Via Montenapoleone 21, 20121 Milan, Italy. For enquiries about your personal data and to exercise your rights, write to mlmdheritage@gmail.com. This notice applies to mlmdheritage.com, its contact forms and the related correspondence.

2. Enquiries and quotation requests

We process the name, email address, type of renovation, property area or municipality, budget range and message you provide, together with subsequent correspondence, to answer your enquiry and prepare or discuss a quotation. The legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR). General correspondence that does not concern a proposed contract is handled on the basis of our legitimate interest in responding to enquiries (Article 6(1)(f)).

Providing information is voluntary. Fields marked as required are needed to handle the request; without sufficient contact and project details we may be unable to respond or prepare a quotation. Please do not include health information, identity documents, payment details or confidential information about other people.

3. Professional collaboration

The “Work with us” form collects your name, email, telephone number, business name, professional category, location and service area, experience, portfolio or website link, and professional profile. We use these details to evaluate and respond to your proposed collaboration and, where relevant, discuss an assignment. The legal basis is precontractual steps requested by you. Keeping relevant professional profiles available for matching with project opportunities for the period below is based on our legitimate interest in organising our professional network; you may object at any time.

Submitting either form does not subscribe you to a newsletter or give permission for unrelated promotional messages. By ticking the privacy checkbox, you acknowledge that you have read this notice. This does not give consent to marketing.

4. How long we keep your information

Quotation enquiries and professional applications that do not lead to an assignment are kept for no more than 12 months from the last contact, then deleted or anonymised. You may request earlier deletion where the applicable conditions are met. If a contractual relationship starts, relevant records are kept for its duration and subsequently for the periods required by accounting, tax and other legal obligations, or as necessary to establish, exercise or defend legal claims. Access to records retained solely for these purposes is restricted.

Technical logs and supplier data follow the periods necessary for security and service operation. Automattic states that its web server logs and IP addresses used for site statistics are generally retained for about 30 days. Copies in backups follow the provider’s backup lifecycle and are not used for ordinary correspondence.

5. Website operation, security and service providers

The website uses WordPress.com and Jetpack (Automattic) for hosting, page delivery and forms, Akismet for spam prevention, Weglot for language versions, and Google Gmail for email correspondence. Technical information such as IP address, browser, referring page and access time may be processed for service operation and security. Form content and technical data may be checked by Akismet to detect spam. Our basis for necessary security processing is the legitimate interest in protecting the website and communications (Article 6(1)(f)).

Data may be accessed by authorised personnel, relevant technical providers and professional advisers where necessary for their tasks, or by public authorities where required by law. Providers operate according to their contractual roles and published privacy notices. Contact requests and professional profiles are not published on the website.

• Automattic: visitors to WordPress.com and Jetpack sites
• Jetpack and Akismet: information about data processing
• Weglot privacy policy
• Google privacy policy

6. International processing

The providers listed above may process data in countries outside the European Economic Area, including the United States. Their notices explain the destinations and safeguards applicable to their services, including adequacy decisions where applicable and standard contractual clauses. You can contact us for information about the safeguards relevant to your data and how to obtain a copy. A link to a third-party website, including a portfolio, is governed by that website’s own privacy notice.

7. Cookies and website statistics

We use Complianz to display cookie choices and save your preferences. Use “Accept all”, “Reject all” or “Preferences” in the banner. Necessary technologies remain enabled. You can reopen the controls at any time using “Cookie preferences”. See our Cookie Policy for further information and preference controls.

Cookies and similar technologies support website operation, security and language preferences. The website also uses Jetpack Stats: a tracking pixel processes technical visit information to produce traffic statistics, including pages viewed and approximate geographic origin. For details about the provider’s processing and available choices, see Automattic’s visitor notice and tracking and opt-out information.

You can manage and delete cookies through your browser’s privacy settings. Restricting necessary cookies may affect website functions, and deleting cookies may remove stored preferences. Browser cookie settings alone do not necessarily block all tracking pixels. To ask about the use of your data or exercise your rights, contact us using the email above.

8. Your rights

Subject to the conditions of the GDPR, you may request access, correction, erasure, restriction and portability of your personal data. You may object to processing based on legitimate interests for reasons relating to your situation. Where processing relies on consent, you can withdraw it at any time without affecting the lawfulness of earlier processing.

Send your request to mlmdheritage@gmail.com. We may ask for information reasonably necessary to verify your identity. You may lodge a complaint with the Italian Data Protection Authority (Garante) or the competent supervisory authority in your country. Enquiries and collaboration decisions are handled by people; we do not use these forms to make decisions based solely on automated processing that produce legal or similarly significant effects.

9. Updates

This notice may be updated when our services or processing change. The current version and date are published on this page.