How we process and protect personal data

1. Controller

Mitilsiciliano – sole proprietorship of Mike Giardina, Frankfurter Straße 96, 63303 Dreieich, Germany. Privacy contact: info@mitilsiciliano.com.

2. Data and sources

We may process the contact person’s identity and contact details, company and tax information, product, certification, capacity, market and commercial information, requested appointment details, messages, uploaded documents and metadata, and technical security logs.

Data comes from the individual, the company contact person or documents that person is authorised to submit. Do not upload identity documents, credentials, health or criminal data, or unnecessary personal data relating to third parties. Redact signatures and private details that are not needed for the assessment.

3. Purposes and legal bases

We use the data to assess the request, prepare and organise a video call, reply to enquiries and take requested pre-contractual steps (Article 6(1)(b) GDPR). B2B relationship management may also rely on our legitimate interest in handling professional enquiries (Article 6(1)(f)); legal and accounting duties rely on Article 6(1)(c).

Acknowledging this notice is not consent to all processing. Separate consent is requested only for optional functions, such as saving a draft in the browser.

4. Required information and documents

Fields marked * are required to handle the request and arrange the meeting. Other fields and uploads are optional. Anyone submitting documents must be authorised to do so and must limit third-party data to what is genuinely necessary.

5. Recipients, storage and email notifications

Data is accessible to Mitilsiciliano and the technical providers required to operate the service, in particular Keliweb for hosting, email and technical infrastructure. Requests and files are stored in protected hosting directories that are not publicly accessible. Relevant information may be presented to selected buyers, retailers, importers, distributors or partners only within an agreed commercial process.

Uploaded files remain in private storage. Mitilsiciliano receives an email at info@mitilsiciliano.com containing the request summary and individual temporary document links rather than copies as email attachments. The links expire after 14 days; the underlying request follows the retention period below.

Transfers outside the EEA, if any, use an applicable GDPR Chapter V mechanism such as an adequacy decision or standard contractual clauses.

6. Calendar, email and video calls

A time selected in the form is a request and becomes final only after Mitilsiciliano confirms it. If an official Google Calendar/Meet or Microsoft Bookings/Teams page is used, that provider processes the necessary invitation details under its own privacy notice. The website does not automatically load an external calendar or script.

7. Retention

Portal requests and uploads receive a 180-day expiry and are removed during the next cleanup operation, unless a negotiation, contract or legal duty requires a different period. An optional local producer draft remains in the browser for no more than 30 days after the last save. Privacy preferences are requested again within 180 days or when this notice changes.

8. Security

We use proportionate technical and organisational measures including encrypted transmission, file type and size controls, restricted storage and temporary access links. No online system can be guaranteed risk-free, so submit only what is needed.

9. Device storage and cookies

We do not use advertising, profiling or analytics. The website stores the privacy choice and, only when permitted, a local producer draft. Details are set out in the cookie notice.

10. Guided form and generated drafts

The portal guide uses predefined browser content and does not send questions to an external AI service. It is not legal, tax or business advice and does not make decisions with legal effect. Any generated document is an unsigned draft that must be checked and signed by the authorised parties.

11. Rights and complaints

Subject to the GDPR, you may request access, rectification, erasure, restriction, objection and portability by writing to info@mitilsiciliano.com. Requests are normally free; Article 12(5) GDPR remains applicable to manifestly unfounded or excessive requests.

You may complain to the Hessian Commissioner for Data Protection and Freedom of Information, Wilhelmstraße 7, 65185 Wiesbaden, or another competent supervisory authority.