Privacy Policy

Last updated: 9 August 2026

This Privacy Policy describes how M.G.T. S.r.l. processes the personal data of users who visit www.groupmarconetrivellazioni.it, in any of its language versions, or who contact the company through the form available on the website, by email or through the other contact details provided.

1. Data Controller

The Data Controller is M.G.T. S.r.l., with registered office at C.da Santa Domenica, 85054 Muro Lucano (PZ), Italy, Italian tax code and VAT number 01828330769, registered with the Potenza Companies Register under number 01828330769.

Contact details:

telephone: +39 0976 77203;
email: This email address is being protected from spambots. You need JavaScript enabled to view it..

2. Categories of data processed

2.1 Browsing and technical data

During their normal operation, the IT systems and software procedures used to operate the website acquire certain data whose transmission is inherent in the use of Internet protocols. This category may include the IP address, the date and time of the request, the address of the requested resource, the method used, the server response code, the type of browser and device, the operating system, the referring website and other technical parameters relating to the user’s IT environment.

These data are used to make the website pages available, ensure the security and integrity of the website, prevent abuse, diagnose anomalies and obtain aggregate statistical information.

2.2 Data submitted through the contact form

The contact form may collect the user’s first name, surname, company, address, email address, telephone number, the content of the message, confirmation that the Privacy Policy has been read and the technical data required for correct transmission and spam prevention. Fields marked as optional may be left blank.

The ALTCHA anti-spam system used by the form operates locally on the website and, based on the findings available, does not involve sending data to an external CAPTCHA provider.

2.3 Data provided directly

When a user contacts M.G.T. S.r.l. by email, telephone or through other contact channels, the company processes the data and information voluntarily provided, as well as any data needed to respond to and manage the request.

Please do not enter special categories of personal data in the form, such as health data, information concerning religious or political beliefs, biometric data or any other information that is not necessary for the request.

3. Purposes, legal bases and retention periods

Purpose	Legal basis	Retention
Provide the website and ensure the technical operation of its pages.	Performance of the service requested by the user and the Controller’s legitimate interest in keeping the website operational, pursuant to Article 6(1)(b) and (f) GDPR.	For the duration of the session; technical logs are generally retained for no longer than 30 days, unless required for security purposes or to investigate unlawful activity.
Prevent abuse, cyberattacks, automated submissions and fraudulent activity.	Legitimate interest in system security and in protecting the Controller’s rights, Article 6(1)(f) GDPR.	For the time needed to analyse the event and, in the event of an incident or unlawful activity, until the relevant investigations have been completed.
Respond to requests for information, site inspections, availability, quotations or other pre-contractual enquiries.	Steps taken at the request of the data subject prior to entering into a contract, Article 6(1)(b) GDPR.	Until the request has been closed and, if no contractual relationship is established, for a maximum of 24 months from the last communication, unless a dispute arises.
Manage a contractual relationship and comply with administrative, accounting and tax obligations.	Performance of a contract and compliance with legal obligations, Article 6(1)(b) and (c) GDPR.	For the duration of the relationship and, as a general rule, for 10 years after its conclusion, without prejudice to different periods required by law.
Establish, exercise or defend legal claims.	Legitimate interest in protecting the Controller’s rights, Article 6(1)(f) GDPR.	For as long as necessary and in any event within the applicable limitation periods, which may be longer in the event of legal proceedings.
Produce website usage statistics through ShinyStat when the service is enabled in accordance with the user’s preferences.	Consent, Article 6(1)(a) GDPR and Article 122 of Italian Legislative Decree 196/2003.	Until consent is withdrawn; persistent ShinyStat statistical identifiers have a stated maximum duration of 6 months.
Display interactive Google Maps.	Consent, Article 6(1)(a) GDPR and Article 122 of Italian Legislative Decree 196/2003.	Until consent is withdrawn; any data collected by Google are retained in accordance with the provider’s own policies.
Load the Open Sans font used by the contact form through Google Fonts.	Legitimate interest in displaying the form correctly, Article 6(1)(f) GDPR. The Controller has chosen to remove the remote request and host the font locally in order to reduce the disclosure of data to third parties.	The technical request lasts only for the time required to download the resource; Google applies its own retention policies to the data received.

Confirming that the Privacy Policy has been read, as required in the form, does not constitute consent to the processing needed to respond: for this purpose, processing is based on the pre-contractual steps requested by the user.

4. Provision of data

Providing the data marked as mandatory in the form is necessary to submit the request and receive a reply. Failure to provide those data prevents the form from being submitted. Providing data in optional fields is not required.

Consent to statistical services and interactive maps is optional. Refusing or withdrawing consent does not prevent users from viewing the essential content of the website or contacting M.G.T. S.r.l.; replacement content may be shown instead of the map.

5. Processing methods

Data are processed using IT tools and, where necessary, organisational and documentary tools, with appropriate measures in place to protect them against unauthorised access, loss, destruction, disclosure or unlawful use. Data are processed by persons who have been authorised and instructed in relation to their respective duties.

The website does not use solely automated decision-making processes that produce legal effects or similarly significantly affect the user, and it does not carry out commercial profiling through the contact form.

6. Recipients and service providers

Within the limits of what is necessary, data may be disclosed or made accessible to:

authorised personnel and collaborators of M.G.T. S.r.l.;
hosting, maintenance, security, IT support and website management providers, including the infrastructure provider Keliweb;
email and communications service providers used by the Controller;
consultants, professionals and parties providing administrative, legal or technical services;
ShinyStat, for the statistical service, when enabled;
Google, for Google Maps and any Google Fonts resources called by the website;
authorities, public bodies or other parties to whom disclosure is required by law or necessary to protect a right.

Service providers process data as processors pursuant to Article 28 GDPR or, where they independently determine the purposes and means of processing, as independent controllers.

7. External services available on the website

7.1 ShinyStat

The website uses ShinyStat to obtain statistical information about visits. The service may process technical and browsing data such as an anonymised IP address, the page visited, date and time, referral source, browser and device type, screen resolution and approximate geographical area. ShinyStat states that it anonymises sessions and IP addresses and does not retain the full IP address.

Further information and the provider’s specific withdrawal tool are available in the ShinyStat Privacy Notice and on the ShinyStat opt-out page.

7.2 Google Maps

The “Where We Are” and “Completed Works” pages contain interactive maps provided by Google Maps. The service is loaded only after the user has made a positive choice in the preferences panel. When the map is enabled, Google may receive the user’s IP address, browser and device data, the address of the page visited and information about interactions with the map.

For further information, please refer to the Google Privacy Policy and the Google Maps Additional Terms of Service.

7.3 Google Fonts

Some contact form resources may call fonts from Google Fonts. The resource request may disclose the IP address and technical browser data to Google. M.G.T. S.r.l. does not use Google Fonts for advertising or profiling purposes. For further information, please refer to the Google Privacy Policy.

8. Transfers to countries outside the European Economic Area

Form data and the content of communications are processed primarily through providers located in the European Union. Enabling Google services may involve data being accessed or processed in countries outside the European Economic Area. In such cases, transfers are made on the basis of the instruments provided for in Chapter V GDPR, such as adequacy decisions, standard contractual clauses and any applicable supplementary measures.

For up-to-date information on the safeguards used by Google, please refer to its Privacy Policy.

9. Data subject rights

In the circumstances provided for in Articles 15–22 GDPR, data subjects may request:

confirmation as to whether or not personal data concerning them are being processed and access to those data;
rectification of inaccurate data and completion of incomplete data;
erasure of data;
restriction of processing;
portability of the data provided, where applicable;
to object, on grounds relating to their particular situation, to processing based on legitimate interests;
to withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.

Requests may be sent to This email address is being protected from spambots. You need JavaScript enabled to view it.. The Controller may request only the information strictly necessary to verify the requester’s identity.

Data subjects also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or with the competent supervisory authority in the Member State in which they reside or work, or in which they consider that the infringement occurred.

10. Managing preferences and withdrawing consent

Preferences relating to statistics and maps may be changed at any time by selecting Cookie Preferences. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

11. Links to other websites

The website may contain links to third-party websites. M.G.T. S.r.l. does not control the processing carried out by those parties; users are encouraged to read the privacy notices published on the websites they visit.

12. Updates

This Privacy Policy may be updated following regulatory, organisational or technical changes. The current version is published on this page together with the date on which it was last updated.