Mocchi's

    Privacy Policy

    This notice describes how the personal data of users who visit www.mocchis.com and use its services is processed, under Regulation (EU) 2016/679 (GDPR).

    Last updated: 9 June 2026

    1. Data controller

    Mocchi's S.r.l.
    Via Tiziano Vecellio 17/B — 31020 San Pietro di Feletto (TV), Italy
    VAT / Tax code 05076170264 — REA 424203
    Email: amministrazione@mocchis.com

    2. Types of data collected

    The personal data processed by this site, directly or through third parties, includes:

    • Data provided voluntarily by the user: the contact form collects name, email address, company, phone number and the content of the message sent.
    • Data collected automatically: usage and browsing data (for example IP address, browser and device type, pages visited, date and time of requests) through system logs and, with consent, analytics tools; identifiers associated with cookies and tracking technologies (see the Cookie Policy).

    The user takes responsibility for any third-party personal data they communicate and warrants that they have the right to do so.

    3. Purposes and legal bases of processing

    • Responding to enquiries sent via the contact form — performance of pre-contractual measures and legitimate interest in following up on requests (Art. 6(1)(b) and 6(1)(f) GDPR).
    • Operation and security of the site, prevention of abuse and fraudulent activity — legitimate interest (Art. 6(1)(f) GDPR).
    • Aggregated, anonymous usage statistics (Google Analytics) — the user's consent, which may be withdrawn at any time (Art. 6(1)(a) GDPR).
    • Display of the site's content, including the interactive 3D model in the hero loaded from a CDN — necessary to provide the service the user requested (Art. 6(1)(b) and 6(1)(f) GDPR).
    • Compliance with legal obligations — Art. 6(1)(c) GDPR.

    4. Methods and place of processing

    Processing is carried out using IT and telematic tools, with security measures appropriate to prevent unauthorised access, disclosure, modification or destruction of the data. Access is limited to authorised personnel and to the suppliers acting as data processors (see section 5).

    The site is hosted on Amazon Web Services (AWS) infrastructure, with servers located in the European Union (Europe region — Frankfurt, eu-central-1). Some third-party suppliers may also process data outside the European Economic Area: in those cases the transfer takes place on the basis of appropriate safeguards (European Commission Standard Contractual Clauses, adequacy decisions or the EU-US Data Privacy Framework).

    5. Third-party services and suppliers

    To deliver the service, this site relies on the following suppliers, acting as data processors on behalf of the controller:

    • Amazon Web Services EMEA SARL — site hosting and delivery of the emails generated by the contact form (Amazon SES). Place of processing: European Union. Privacy policy: aws.amazon.com/privacy.
    • Spline (Spline Design, Inc.) — the interactive 3D model in the hero, hosted on our own servers; the engine that renders it downloads a technical module from a third-party CDN (unpkg.com, operated by Cloudflare). It is technical content necessary to display the site: it sets no cookies, but that CDN does receive the user's IP address. Privacy policy: spline.design.
    • Google Analytics 4 (Google Ireland Limited) — aggregated usage statistics with the IP address anonymised, activated only with prior consent. Privacy policy: business.safety.google/privacy — opt-out: tools.google.com/dlpage/gaoptout.

    6. Retention period

    • Contact form data: retained for as long as needed to handle the enquiry and any relationship arising from it, and in any case no longer than 24 months from the last contact, save for legal obligations or the need to establish or defend legal claims.
    • Statistical data (Google Analytics): retained according to the lifetime of the relevant cookies (up to 2 years) and the Google Analytics retention settings.
    • System logs: retained for the technical period necessary for security and diagnostic purposes.

    7. Rights of the data subject

    Users may exercise the rights set out in Articles 15-22 GDPR at any time:

    • access their personal data and obtain a copy of it;
    • request its rectification or updating;
    • request its erasure (the "right to be forgotten");
    • request restriction of processing;
    • object to the processing;
    • obtain data portability;
    • withdraw consent at any time, without affecting the lawfulness of processing based on consent given before withdrawal;
    • lodge a complaint with the supervisory authority (the Italian Data Protection Authority — garanteprivacy.it).

    Requests can be sent to amministrazione@mocchis.com free of charge; the controller normally replies within one month.

    8. Cookies and tracking tools

    For detailed information on the cookies and tracking tools used, and to manage your preferences, see the Cookie Policy.

    9. Further information

    System logs and maintenance. For operational and maintenance purposes, this site and the third-party services it uses may collect system logs that record interactions and may contain personal data such as the IP address.

    Legal defence. Personal data may be used by the controller for legal defence purposes, or in the preparatory stages, against misuse of the site or its related services.

    10. Changes to this notice

    The controller reserves the right to change this notice at any time, giving notice on this page and updating the "last updated" date. Users are encouraged to consult it periodically.

    This English text is a courtesy translation. In the event of any discrepancy, the Italian version prevails.