Quality Policy | Privacy Policy  | Cookie Policy  |  Consent Withdrawal

 

Privacy Policy

PRIVACY POLICY – AMM ITALY S.R.L.

Last updated: November, 2025

1. Data Controller

The Data Controller is:
AMM ITALY S.r.l.
Via Italia 159, 20056 Busnago (MB) – Italia
P. IVA IT07532350969
E-mail per richieste privacy: info@ammitaly.com 

 

2. Purpose of this notice

This privacy notice describes the processing of personal data of users who visit or use the website www.ammgroup.aero, pursuant to the EU Regulation 2016/679 (GDPR), applicable national legislation, and provisions of the Italian Data Protection Authority.

 

3. Types of data processed

3.1. Navigation data

During browsing, some technical data are automatically collected (e.g., IP addresses, browser information, access times, visited pages). These data are used for statistical purposes, security, and proper functioning of the website.

3.2. Data voluntarily provided by the user

When submitting requests via forms or e-mail, the following data may be processed:

  • first and last name
  • email, telephone number
  • company and role
  • technical or commercial information regarding requested products or services
  • any files or documents voluntarily submitted

3.3. Cookies and similar technologies

The website uses technical cookies and, with consent, analytical or profiling cookies.
Complete information is available in the dedicated Cookie Policy.

 

4. Purpose of processing and legal basis

Data are processed for the following purposes:

4.1. Management of requests and commercial contacts

Responding to inquiries, requests for information, quotations, and communications regarding aerospace materials and solutions.
Legal basis: pre-contractual measures (art. 6.1.b GDPR).

4.2. Management of contractual relationship

Operational, administrative, and technical activities connected with the provision of requested products and services.
Legal basis: art. 6.1.b GDPR.

4.3. Legal obligations

Fiscal, accounting, administrative, and any other obligations required by law.
Legal basis: art. 6.1.c GDPR.

4.4. IT security and site protection

Prevention and protection against unlawful activities, malware, unauthorized access, and misuse.
Legal basis: legitimate interest of the controller (art. 6.1.f GDPR).

4.5. Direct marketing (only with consent)

Sending commercial communications, newsletters, or information about the company’s services.
Legal basis: consent (art. 6.1.a GDPR), freely revocable.

4.6. Statistical analysis

Improving the user experience and website performance using aggregated or anonymized data.
Legal basis: legitimate interest or consent, depending on the tool used.

 

5. Processing methods

Data are processed using IT tools and, where necessary, paper-based supports.
Appropriate technical and organizational measures are adopted to ensure the security, integrity, and confidentiality of data, in accordance with art. 32 GDPR.

 

6. Data recipients

Data may be communicated to:

  • authorized personnel of the Data Controller
  • providers of IT and technical services (hosting, maintenance, cloud)
  • administrative, fiscal, or legal consultants
  • business partners or group companies, when necessary for the indicated purposes
  • competent authorities, when required by law

All recipients are bound by confidentiality obligations and, if applicable, designated as Data Processors under art. 28 GDPR.

 

7. International data transfers

If it is necessary to involve suppliers, partners, or group companies located outside the European Economic Area, transfers will occur only:

  • to countries with an adequacy decision by the European Commission, or
  • with appropriate safeguards such as Standard Contractual Clauses or equivalent measures.

No transfers are made without the safeguards required by GDPR.

 

8. Data retention

Data are retained for the period strictly necessary for the purposes for which they were collected, in particular:

  • information requests / contacts: up to 24 months
  • contractual data: for the duration of the relationship and legal obligations (e.g., up to 10 years)
  • marketing: until consent is revoked
  • cookies: as specified in the Cookie Policy

 

9. Rights of the data subject

Data subjects can exercise the rights under Articles 15–22 GDPR:

  • access
  • rectification
  • erasure
  • restriction of processing
  • objection
  • data portability
  • withdrawal of consent (where applicable)

Requests should be sent to:  info@ammitaly.com 

 

10. Complaint to the supervisory authority

Data subjects can lodge a complaint with the Italian Data Protection Authority or the competent authority in the EU Member State of habitual residence.

 

11. Changes to this notice

The Data Controller may modify this privacy notice at any time.
Changes will be published with the date of last update.