Privacy policy

Last updated: 7 November 2026

1. Data controller and website publisher

MBL di Pietro M. Pallavicino
VAT number (P.IVA): 02194410995
Operating in: Italy / Switzerland
Registered office: Switzerland / Italy
Data protection contact: via the contact form or at mblwebapp@gmail.com

2. Data processed

Request form

When you use the form, we process: full name, company, email address, phone (optional), project type, description of your needs, maintenance preference, the language and page of submission and, if you have accepted statistics, the source of your visit (e.g. a search engine). This data is used only to answer your request and, where relevant, to prepare an offer.

To prevent abuse and automated submissions, a non-reversible fingerprint of your IP address (salted hash) is stored with the request. The IP address itself is not stored.

Consent to receive information is optional and separate from your request; you can withdraw it at any time.

Visit statistics

Only if you consent to statistics in the banner do we measure traffic with an in-house tool: page viewed, language, device type (mobile, tablet, desktop), referring website and a random identifier valid for the browsing session. These in-house statistics use no IP addresses, no advertising profiles and no third-party tools such as Google Analytics.

Marketing cookies (Meta Pixel)

Only if you consent to the “Marketing” category in the banner does the site load the Meta Pixel, provided by Meta Platforms Ireland Ltd. (Merrion Road, Dublin 4, Ireland). The Pixel records the pages you visit and actions such as submitting the form or clicking “Call” and “WhatsApp”, and sets the _fbp cookie and, if you arrive from an ad, the _fbc cookie (lifetime up to 90 days). When you submit the form with this consent active, we also send the request event to Meta through the Conversions API, together with your email and phone in irreversibly hashed form (SHA-256), IP address and browser, solely to match the request to the ad it came from. The text of your message is never sent.

For the collection and transmission of this data we are joint controllers with Meta (Art. 26 GDPR, joint controller addendum); Meta is responsible for any further processing (Meta privacy policy). Data may be transferred to Meta Platforms, Inc. in the United States under the EU–US and Swiss–US Data Privacy Framework. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time in the cookie settings.

Local storage

The site stores in your browser your cookie choices and, if you switch language, your preferred language. If you accept statistics, a session identifier is stored until the tab is closed.

3. Legal bases

Processing necessary to answer your request and for pre-contractual measures (Art. 6(1)(b) GDPR); consent for statistics and information mailings (Art. 6(1)(a) GDPR); legitimate interest in website security (Art. 6(1)(f) GDPR). Under Swiss law, processing complies with the principles of Art. 6 FADP.

4. Processors and place of processing

• Database and server functions: Supabase Inc., data hosted in a data centre in the United Kingdom (a country recognised by Switzerland and the European Union as providing an adequate level of protection).
• Website hosting: GitHub Pages (GitHub, Inc., United States). For security purposes, the host may record visitors’ IP addresses in its technical logs. The transfer relies on the applicable safeguards (Swiss–EU–US Data Privacy Framework and standard contractual clauses).

Fonts are hosted on our own server; no data is sent to external font services.

5. Retention

• Contact requests: 24 months after the last exchange, unless there is a contractual relationship or a longer legal retention obligation.
• Visit statistics: no more than 13 months.
• Client and project data: for the duration of the contractual relationship, then as required by law.

6. Your rights

You may request access to, rectification or erasure of your data, restriction of processing, object to processing, request data portability and withdraw your consent at any time. You may lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) or, in the European Union, with the competent supervisory authority (e.g. the Garante per la protezione dei dati personali in Italy).

7. Security

The site is served over HTTPS. Form data is transmitted encrypted, and access to the administration area is protected by username and password, with access rules enforced at database level.

8. Cookies and settings

You can change your choice at any time: Cookie settings

9. Legal notice

Publisher: MBL di Pietro M. Pallavicino — P.IVA 02194410995. The content of this website is provided for information purposes. Published prices are indicative and do not constitute a binding offer; only the signed quote is binding.