PRIVACY NOTICE FOR NEWSLETTER SUBSCRIBERS

Who is responsible for processing your personal data?

MVM S.r.l., with its registered office at Via del Progresso 14, Correggio (RE), Italy, acts as the Data Controller and is committed to protecting the confidentiality and security of your personal data.

To this end, the Data Controller adopts appropriate policies and procedures governing the collection, use and protection of personal data, as well as the exercise of the rights granted to data subjects under applicable data protection legislation. The Data Controller regularly reviews and updates these policies and procedures, particularly in response to regulatory or organisational changes that may affect the processing of your personal data.

The Data Controller has appointed a Data Protection Officer (DPO) whom you can contact at dpo@mvmsrl.it if you have any questions regarding the policies and practices adopted.

How does MVM S.r.l collect and process your data?

In relation to the newsletter service, the Data Controller collects and/or receives information about you, such as your first name, surname and email address, following your request to subscribe to the Company’s newsletter. Providing this data is optional but necessary to enable the Data Controller to manage the sending of MVM S.r.l.’s thematic newsletters – therefore, subscription to the newsletter is based on consent pursuant to Article 6(1)(a) of EU Regulation 679/2016 - This consent also covers the possible use of tools to monitor interaction with such communications, such as tracking pixels or similar technologies, in line with the provisions set out by the Data Protection Authority in the Guidelines on the use of tracking pixels in email communications dated 17 April 2026 and within the limits described in this privacy notice.

Your personal data is primarily disclosed to third parties and/or recipients whose activities are necessary for the performance of tasks relating to the aforementioned purposes, in particular MAILUP – TeamSystem S.p.A. – https://www.mailup.it, which manages the platform used to send newsletters in its capacity as Data Processor, and also to comply with certain legal obligations. Any disclosure that does not serve these purposes will be subject to your prior consent.

Please note that newsletters may include tracking tools, such as tracking pixels or equivalent technologies, designed to detect user interaction with the message received (for example, opening the message or viewing its contents), in order to measure the effectiveness of information and promotional campaigns, improve the content provided and understand the level of user interest in the Company’s initiatives.

Your personal data will not be disclosed or shared with unspecified parties in any way.

The Data Controller does not transfer your personal data outside the European Union.

In the course of providing the Service, certain personal data may be transferred to parties established in countries outside the European Economic Area.

In such cases, the Data Controller ensures that the transfer takes place in accordance with the conditions set out in Articles 44 et seq. of the Regulation and, in particular, on the basis of:

• an adequacy decision adopted by the European Commission;
• the Standard Contractual Clauses approved by the European Commission;
• further appropriate safeguards provided for by current legislation;
• one of the derogations specifically provided for in Article 49 of the Regulation, where applicable.

What happens if you do not provide your personal data?

The personal data relating to you and which identifies you is optional; therefore, it is not necessary for the purpose of fulfilling your request to subscribe to the MVM S.r.l. newsletter and, if not provided, makes it impossible for the Data Controller to fulfil your requests.

Should the User wish to withdraw this consent, they shall be entitled to withdraw, separately, both consent for marketing/newsletter purposes and consent for the use of tracking pixels by using the specific unsubscribe and opt-out links provided in the email communications received.

The data subject also has the right to object at any time to the processing of their personal data carried out for the purpose of tracking interactions with promotional communications via tracking pixels or equivalent tools, by using the specific opt-out link provided in the communications received or by contacting the Data Controller at the contact details set out in this policy.

How and for how long is your data stored?

The processing of your personal data is carried out using both electronic and manual means and tools made available to individuals acting under the authority of the Data Controller, who have been authorised and trained for this purpose.

Personal data is stored in electronic archives protected by effective and appropriate security measures designed to counter the risks of breach identified by the Data Controller and implemented by the data processor, Your personal data will be retained for 24 months from the last interaction with the user and/or until you request to stop receiving the newsletter or unsubscribe from it by clicking on the relevant link at the bottom of each message or by ticking the appropriate boxes for managing subscriptions to MVM newsletters, which can always be accessed via the links in every communication, except in cases where contractual relationships are established or events occur that require the intervention of the competent authorities – including in collaboration with third parties or recipients entrusted with the Data Controller’s data security activities – to carry out any investigations into the causes of the event.

What are your rights?

Subject to the limits – particularly the time limits – established for the processing of your personal data, the rights granted to you ensure that you always retain control over your data. Your rights are as follows:

• access;
• rectification;
• erasure;
• restriction of processing;
• objection to processing;
• data portability.

Your rights are guaranteed without any specific charges or formalities for requesting to exercise them; this is essentially provided free of charge. You have the right:

• to obtain a copy, including in electronic format, of the data to which you have requested access. Should you request further copies, the Data Controller may charge you a reasonable fee to cover costs;
• to have your personal data erased or the processing restricted, or to have your personal data updated and rectified, and to ensure that third parties/recipients, should they receive your data, also comply with your request, unless there are legitimate grounds that override those that led to your request (e.g. environmental investigations and risk mitigation arising from an emergency managed on their behalf by the Data Controller);
• to receive, without delay and in any event within one month of your request, any relevant information regarding the actions taken following the exercise of your rights; this period may be extended, with justification, to up to two months, in which case you will be duly notified.

For any further information, or to submit your request, please contact the Data Controller at infoprivacy@mvmsrl.it

Where can you lodge a complaint?

Without prejudice to any other administrative or judicial proceedings, you may lodge a complaint with the data protection supervisory authority, unless you are resident in or carry out your professional activities in another Member State. In the latter case, or where the breach of data protection legislation occurs in another EU country, the supervisory authorities established in that country will have jurisdiction to receive and examine the complaint.

You will be notified promptly of any updates to this privacy notice by appropriate means, and you will also be informed if the Company intends to process your data for purposes other than those set out in this privacy notice, before proceeding and in good time for you to give your consent if necessary.

Please note that consent is deemed to have been freely given by ticking the box “I accept the privacy policy and confirm that I have read it”. Failure to do so will mean that you cannot subscribe to the newsletter service.

Last updated: 30/10/2026