The personal data collected on this website, along with any other information that may be associated with you directly or indirectly, is processed and used in compliance with the principles established by Regulation (EU) 679/16 (GDPR).

Pursuant to the aforementioned Regulation, the DATA CONTROLLER informs you that any data acquired through this website will be processed mainly using IT and electronic tools for the following purposes:

• responding to your inquiries;

• maintaining a database of frequently asked questions, proposals, and communications;

• subscribing you to our newsletter;

• technical management of navigation (see also the “Cookies Processing” section).

Providing the requested Registration Data is mandatory. Failure to provide, even partially, the data expressly marked as necessary for the above purposes will make it impossible for MORODER PLACE SRL to respond to your inquiries.
The legal basis for processing is Article 6(1)(b) of Regulation 679/16, meaning the processing is necessary for the performance of a contract to which the data subject is party, or for the execution of pre-contractual measures taken at the data subject’s request.

Your data may be accessed exclusively by MORODER PLACE SRL employees who are specifically authorized to process such data in their capacity as data processors and solely for the purpose of carrying out the activities you requested. These individuals are bound by confidentiality obligations and internal regulations. In any case, the data will never be disclosed to third parties.

Your data will be stored for the period required by applicable laws and regulations.

The Data Controller is MORODER PLACE SRL, represented by its legal representative, to whom you may apply to exercise your rights under Articles 15, 16, 17, 18, 20, 21, and 77 of Regulation 679/16.
These rights may also be exercised with the Data Protection Officer, if appointed, by writing to: m.moroder@moroderconsulting.com.

The exercise of the above rights is subject to the limitations, rules, and procedures set out in the Regulation, which you must be aware of and follow. In accordance with Article 12(3), the Controller will provide the data subject with information on the action taken without undue delay and, in any case, no later than one month from receipt of the request. This period may be extended by two months if necessary, taking into account the complexity and number of requests. The Controller will inform the data subject of any such extension and the reasons for the delay within one month of receiving the request.