Privacy Policy

Last updated: May 2026

This Privacy Policy describes how 2M Consulting SRL (hereinafter "Data Controller") collects, uses, and protects the personal data of users visiting the website 2mconsulting.agency, in accordance with EU Regulation 2016/679 ("GDPR") and Italian Legislative Decree 196/2003 as amended.

1. Data Controller

2M Consulting SRL
Via Lamarmora 9, 10128 Turin, Italy
VAT 13330500011
Email: office2mconsulting@gmail.com

2. Types of data collected

The Data Controller collects the following personal data, voluntarily provided by the user through the contact form on the website:

• Full name
• Company (optional)
• City
• Phone number
• Email address
• Content of the request

The website may also automatically collect technical browsing data (IP address, browser type, operating system, pages visited) through server logs, exclusively for security and technical diagnostic purposes.

3. Purposes of processing

Personal data is processed for the following purposes:

• Response to requests: responding to information or contact requests sent through the website's form;
• Compliance with legal obligations: fulfilling regulatory, accounting, and tax obligations;
• Technical security: ensuring the security, integrity, and proper functioning of the website.

4. Legal basis for processing

The processing of data is based on:

• the user's consent expressed at the time of submitting the form (art. 6, par. 1, lett. a GDPR);
• the execution of pre-contractual measures requested by the user (art. 6, par. 1, lett. b GDPR);
• the legitimate interest of the Data Controller in the security of the website (art. 6, par. 1, lett. f GDPR).

5. Methods of processing and retention

Data is processed using electronic tools, adopting technical and organizational measures suitable to ensure security, confidentiality, and integrity. Data is retained only for the time strictly necessary to achieve the purposes for which it was collected and, in any case, no longer than 24 months from the last contact, unless other legal obligations apply.

6. Communication and transfer of data

Data will not be disseminated or transferred to third parties for commercial purposes. It may be communicated to third parties who perform ancillary activities on behalf of the Data Controller (e.g., hosting provider, email services, professional consultants), appointed as Data Processors pursuant to art. 28 GDPR.

The contact form is managed through the Netlify service (Netlify, Inc., based in the United States). Data transfer takes place in compliance with the Standard Contractual Clauses approved by the European Commission.

7. User rights

Pursuant to articles 15-22 of the GDPR, the user has the right to:

• access their personal data;
• request rectification, updating, or deletion;
• request restriction of processing or object to it;
• request data portability;
• withdraw consent at any time, without affecting the lawfulness of processing based on consent before withdrawal;
• file a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

To exercise these rights, the user can send a request to the email address office2mconsulting@gmail.com.

8. Changes to this Privacy Policy

The Data Controller reserves the right to modify this Privacy Policy at any time, providing notice through publication on the website. Users are therefore invited to consult it periodically.

For information regarding the use of cookies, please refer to the Cookie Policy.