Privacy policy

Last updated: 23 October 2026

1. Data controller

The data controller is Magic Robotica S.r.l., VAT no. 11721360961, with registered office at Via Marengo 22, 20841 Carate Brianza (MB), Italy. For requests concerning personal data protection, write to info@magicrobotica.it.

2. Data processed

The website may process the following categories of data:

• data voluntarily provided by email or contact request, such as name, surname, company, email address, subject and message;
• technical browsing data generated by IT systems and internet protocols, such as IP address, request date and time, requested page, response status and browser or device information;
• any additional data contained in documents or communications spontaneously submitted by the data subject.

3. Purposes and legal bases

Commercial, technical and support requests

Data is used to answer requests, prepare technical or commercial information and take pre-contractual steps requested by the data subject. The legal basis is the performance of pre-contractual or contractual measures.

Website security and operation

Technical data may be processed to ensure security and availability, prevent misuse and diagnose faults. The legal basis is the controller's legitimate interest in the security of its systems and digital services.

Legal obligations and protection of rights

Data may be processed to meet regulatory, accounting or tax obligations and to establish, exercise or defend a legal claim. The legal bases are compliance with legal obligations and the controller's legitimate interest.

4. Processing methods

Processing is carried out using electronic and, when necessary, paper-based tools, with technical and organisational measures appropriate to the risk. Contact requests submitted through the form are processed by the website on Aruba hosting and sent by email to info@magicrobotica.it. The website does not store message contents in its own database. Messages received are managed in the company email system. To prevent repeated submissions, the server temporarily stores a keyed hash of the source IP address and submission times; this record contains no message text or email address and is used only to limit requests within a 15-minute window. Expired records are removed during subsequent requests.

5. Provision of data

Providing data marked as mandatory is necessary to submit a complete request. Failure to provide it may prevent Magic Robotica from responding. Please do not submit special-category or unnecessary data.

6. Recipients

Data may be processed by authorised personnel and disclosed, where necessary, to IT, hosting, email, maintenance and professional advisory providers, or to public authorities where required by law. Providers processing data on behalf of Magic Robotica are appointed as processors where required.

7. Transfers outside the European Economic Area

If a provider entails transferring data outside the European Economic Area, the transfer will comply with Articles 44 and following of the GDPR, based on an adequacy decision or appropriate safeguards.

8. Retention

Contact requests are retained for the time needed to handle and follow up the request. Where a contractual relationship begins, the applicable contractual and statutory retention requirements apply; data may also be retained where needed to establish, exercise or defend legal claims. Technical logs are retained only for the period necessary for service security and operation, according to the hosting provider's settings.

9. Data subject rights

Data subjects may request access, rectification, erasure, restriction of processing, data portability where applicable, and may object to processing based on legitimate interest. They may also lodge a complaint with the Italian Data Protection Authority. Requests may be sent to info@magicrobotica.it.

10. Updates

This notice may be updated following regulatory, organisational or technical changes. The date at the top identifies the current version.