Pursuant to Articles 13-14 of EU Regulation 2016/679 (GDPR) Last updated: June 15, 2026

  1. Data Controller

Company name: MICHELANGELO FILM S.r.l. Registered office: Via dell’Annunciata 7 – Milan (MI) VAT number: 14928331009 Email: info@michelangelofilm.it Phone: +39 02 62694324 Website: https://michelangelofilm.it

  1. Types of Data Collected

2.1 Data provided voluntarily by the user

Through the contact form on the website, the following personal data is collected:

  • First and last name
  • Email address
  • Phone number
  • Subject of the request
  • Message text

2.2 Data collected automatically (browsing)

While browsing the website, the IT systems automatically acquire certain data whose transmission is implicit in the use of internet communication protocols:

  • Device IP address
  • Browser type and operating system used
  • Date, time, and duration of the visit
  • Pages visited and browsing path
  • Referring website, if any (referrer)

2.3 Data collected through cookies

The website uses technical cookies necessary for its operation and, depending on user choices, analytics and third-party cookies. For full details, please refer to the Cookie Policy.

  1. Purposes and Legal Bases of Processing

a) Managing contact requests – responding to communications sent via the form. Legal basis: performance of pre-contractual measures at the data subject’s request (Art. 6(1)(b) GDPR) and legitimate interest of the Controller (Art. 6(1)(f) GDPR).

b) Managing job applications (Careers) – evaluation of professional profiles submitted spontaneously. Legal basis: consent of the data subject (Art. 6(1)(a) GDPR) and pre-contractual measures (Art. 6(1)(b) GDPR).

c) Website security and operation – prevention of abuse and fraudulent activity, technical monitoring. Legal basis: legitimate interest of the Controller (Art. 6(1)(f) GDPR).

d) Aggregate statistics – traffic analysis in aggregated and anonymized form to improve the service. Legal basis: legitimate interest of the Controller.

e) Legal compliance – tax, accounting, and regulatory obligations. Legal basis: legal obligation (Art. 6(1)(c) GDPR).

  1. Processing Methods

Processing is carried out using IT and telematic tools. Data is stored on protected servers. MICHELANGELO FILM adopts technical and organizational measures appropriate to ensure a level of security suited to the risk (Art. 32 GDPR), including:

  • Encrypted connections (HTTPS/TLS)
  • Data access restricted to authorized personnel
  • Backup and recovery procedures
  • Regular system updates
  1. Data Retention Period
  • Contact requests: 24 months from receipt, unless needed for the defense of rights in legal proceedings.
  • Job applications: 12 months from receipt, with the possibility of longer retention subject to explicit consent.
  • Browsing data: 12 months, unless needed for the investigation of cybercrimes.
  • Accounting and tax data: 10 years pursuant to Art. 2220 of the Italian Civil Code and Art. 43 of Presidential Decree 600/1973.

  1. Transfer of Data to Third Parties

Personal data is not disclosed or sold to third parties. It may be shared with:

  • IT service providers (hosting, WordPress CMS, plugins) acting as data processors pursuant to Art. 28 GDPR.
  • Google LLC (Google Fonts, any Analytics services) – transfer to a third country (USA) covered by Standard Contractual Clauses approved by the EU Commission.
  • Competent authorities, where required by law.

  1. Rights of the Data Subject

Pursuant to Articles 15-22 GDPR, the data subject has the right to:

  • Access their personal data (Art. 15)
  • Obtain rectification of their data (Art. 16)
  • Obtain erasure of their data – right to be forgotten (Art. 17)
  • Restrict the processing of their data (Art. 18)
  • Receive their data in a structured format and transmit it to another controller (Art. 20)
  • Object to the processing (Art. 21)
  • Withdraw consent at any time, without prejudice to the lawfulness of processing based on consent before its withdrawal (Art. 7(3))

Requests should be addressed to: info@michelangelofilm.it The Controller will respond within 30 days (extendable by a further 60 days in complex cases). The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) (www.garanteprivacy.it).

  1. Cookies

For detailed information on the use of cookies and consent methods, please refer to the Cookie Policy available on the website.

  1. Changes to This Notice

The Controller reserves the right to update this notice. Changes will be published on this page with an indication of the update date. Users are invited to periodically review this section.