1. Data Controller

The Data Controller for the data collected through the mysteryauditai.com website is Marcello Peluso, VAT number 09474110963, based in Milan, contactable at the email address info@mysteryauditai.com.

2. What data we collect

We only collect the data you voluntarily provide through the contact form on the page Contact: name, email address, company name if provided, and the content of the message sent.

The site also automatically collects technical browsing data (IP address, browser type, pages visited) necessary for the site's operation and security, without any profiling purpose.

3. Purposes and legal basis of processing

• Responding to contact and information requests (legal basis: precontractual measures taken at the request of the data subject, Art. 6.1.b GDPR).
• Managing the business relationship, should the request turn into a business collaboration. Legal basis: performance of a contract (Art. 6.1.b GDPR).
• Website security and abuse prevention (e.g. anti-spam system). Legal basis: legitimate interest of the Data Controller (Art. 6.1.f GDPR).

4. Data retention

Data collected through the contact form is retained for as long as necessary to handle the request and, if a business collaboration begins, for the duration of that relationship and for the period required by legal obligations (e.g. tax and accounting).

5. Recipients and data transfer

Data is processed using IT tools and stored on the servers of the hosting provider Infomaniak Network SA, based in Switzerland, a country covered by a European Commission adequacy decision pursuant to Art. 45 GDPR.

The site loads typefaces (fonts) from the Google Fonts service, provided by Google LLC (USA). Loading this external resource involves transmitting the visitor's IP address to Google's servers, solely for the technical purpose of delivering the fonts; the service does not set tracking cookies. For more information, see the Google privacy policy.

Data submitted through the contact form is managed through the WPForms plugin, which saves it exclusively on the site's server, without sharing it with third parties.

6. Cookies

The site uses only technical cookies, necessary for its operation and security. For the detailed list, see our Cookie Policy.

7. Rights of the data subject

You have the right to request, at any time, access to your personal data, rectification, erasure, restriction of processing, data portability, and to object to processing (Articles 15-22 GDPR). You can exercise these rights by writing to info@mysteryauditai.com.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) (www.garanteprivacy.it), should you believe that the processing of your data violates applicable law.

8. Data security

We adopt appropriate technical and organisational measures to protect personal data from unauthorised access, loss or disclosure, including encrypted HTTPS connections and anti-spam protection systems on contact forms.

9. Changes to this notice

This notice may be updated periodically to reflect regulatory changes or changes to the services used by the site. The date of the last update is shown at the top of the page.