Information on the processing of personal data provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679.
Dear user, this notice describes how MMW S.r.l. processes the personal data of the users, clients and visitors of its website, and of those who contact it by email, telephone, fax or post. The processing complies with Regulation (EU) 2016/679 (hereinafter the “GDPR”) and with Legislative Decree 196 of 30 June 2003 (Personal Data Protection Code), as amended by Legislative Decree 101 of 10 August 2018. Please read the following carefully before sending us any data. In case of discrepancy between this translation and the Italian text, the Italian version prevails.
Data controller
The data controller is MMW S.r.l., with registered office at Viale Giulio Cesare 71, 00192 Rome, Italy, VAT number and tax code 05994081007, email address info@mmwtraduzioni.com. The controller determines the purposes and means of the processing and is responsible for it under the applicable legislation.
MMW S.r.l. has not appointed a Data Protection Officer (DPO), since the conditions that make the appointment mandatory are not met. Any request concerning the processing of personal data may be addressed directly to the controller at the contact details given above.
Categories of data processed
In relation to the services requested, the controller processes personal and identification data (name, surname or company name), contact data (postal address, email, telephone number, IP address), tax data (tax code, VAT number) and billing data. Payments are made by bank transfer or by credit or debit card through the Stripe platform, operated by Stripe Payments Europe, Ltd., which acts as an independent controller of payment data in accordance with its own privacy notice. Card details are entered directly on Stripe’s systems and are neither stored nor processed by the controller, which receives only the confirmation of payment, the amount and the identification data of the order.
The documents sent for translation, sworn translation, legalisation or assistance in administrative procedures may contain special categories of data within the meaning of Article 9 of the GDPR, such as data relating to health, origin, religious beliefs or sexual orientation, and data relating to criminal convictions and offences within the meaning of Article 10 of the GDPR, for example in the case of criminal record certificates, medical documents or civil status records. Such data are processed solely to the extent necessary to perform the service requested.
Purposes of the processing and legal bases
Personal data are processed for the following purposes and on the corresponding legal bases.
a) Performance of the service: handling of the request, the quote, the order and the provision of translation, sworn translation, legalisation and assistance services, and the related correspondence. Legal basis: performance of a contract or of pre-contractual measures requested by the data subject, under Article 6(1)(b) of the GDPR.
b) Legal obligations: tax, accounting, administrative and record-keeping obligations. Legal basis: compliance with a legal obligation, under Article 6(1)(c) of the GDPR.
c) Security and defence of rights: security of the site and of the systems, fraud prevention and the establishment, exercise or defence of legal claims. Legal basis: legitimate interest of the controller, under Article 6(1)(f) of the GDPR.
d) Marketing to clients: sending, by email, communications concerning services similar to those already used. Legal basis: legitimate interest under Article 6(1)(f) of the GDPR, with the right to object at any time.
e) Non-technical cookies: installation of any third-party cookies other than technical cookies. Legal basis: consent of the data subject, under Article 6(1)(a) of the GDPR and Article 122 of the Italian Privacy Code, which may be withdrawn at any time. The controller does not use profiling cookies.
For the special categories of data and for the data relating to criminal convictions contained in the documents, the processing is based on the establishment, exercise or defence of legal claims under Article 9(2)(f) of the GDPR, and on the performance of the assignment on the instructions and on behalf of the data subject, who provides the documents for that purpose.
Nature of the provision of data
The provision of the data necessary for the performance of the service and for compliance with legal obligations is mandatory, and refusal prevents the provision of the service requested. The provision of data for marketing purposes is optional, and refusal does not affect the use of the services.
Methods of processing and security measures
The processing is carried out with paper and electronic means, according to logic related to the purposes stated and with technical and organisational measures adequate to guarantee the security, confidentiality and integrity of the data under Article 32 of the GDPR. Data are kept in protected environments, accessible only to authorised and trained staff. Information transmitted through the site is protected by encryption protocols. Data relating to payments, by bank transfer or by card through Stripe, are processed solely for accounting purposes and for compliance with legal obligations.
Recipients and categories of recipients
Data may be communicated to external collaborators, translators and language professionals, appointed as processors under Article 28 of the GDPR, to providers of IT and hosting services, to the card payment provider (Stripe Payments Europe, Ltd.) for the data necessary to execute the payment only, and to authorities and public administrations where required by law or necessary for the provision of the service, such as courts, notaries, consular offices, prefectures and chambers of commerce. The controller does not sell, transfer or exchange personal data with third parties for the latter’s own purposes.
Transfer of data to third countries
Where the performance of the service requires the transfer of data to third countries or international organisations outside the European Economic Area, the transfer takes place in compliance with Articles 44 to 49 of the GDPR, that is on the basis of an adequacy decision of the European Commission or, failing that, of appropriate safeguards such as standard contractual clauses, or of the derogations provided for by Article 49. The data subject may request a copy of the safeguards adopted at the controller’s contact details.
Retention period
Data are kept for the time necessary to achieve the purposes for which they were collected and in compliance with the time limits set by law. Contractual data and translated, sworn or certified documents are kept for ten years, consistently with the ordinary limitation period under Article 2946 of the Civil Code and with the obligation to keep accounting records under Article 2220 of the Civil Code, so as to allow the issue of further copies or reprints of previous translations, unless the data subject requests otherwise. Billing data are kept for the period required by tax legislation. Data processed for marketing purposes are kept until consent is withdrawn or the data subject objects.
Rights of the data subject
The data subject may exercise, towards the controller, the rights provided for by Articles 15 to 22 of the GDPR, and in particular the right of access to his or her data, of rectification, of erasure, of restriction of processing, of portability and of objection to processing based on legitimate interest. Where the processing is based on consent, the data subject has the right to withdraw it at any time, without affecting the lawfulness of the processing carried out before the withdrawal. Requests may be sent to info@mmwtraduzioni.com, with a copy of an identity document of the applicant. The controller answers requests without undue delay and in any case within the time limits set by law.
Right to lodge a complaint
A data subject who considers that the processing of his or her data infringes the applicable legislation has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), under Article 77 of the GDPR, or to bring proceedings before the competent court.
Absence of automated decision-making
The controller does not adopt automated decision-making processes, including profiling, that produce legal effects concerning the data subject or similarly significantly affect him or her within the meaning of Article 22 of the GDPR. The controller does not profile its clients.
Personal data breaches
In the event of a personal data breach that entails a risk to the rights and freedoms of data subjects, the controller notifies the breach to the Italian Data Protection Authority without undue delay and, where feasible, within seventy-two hours under Article 33 of the GDPR, and, where the breach entails a high risk, communicates it to the data subjects under Article 34.
Cookies and tracking tools
The site uses technical cookies, necessary for its operation, for which no consent is required. When the site is opened, a banner allows the user to give or refuse consent to the installation of any third-party cookies other than technical cookies, with a free and granular choice and with equal prominence given to acceptance and refusal, in compliance with the Guidelines of the Italian Data Protection Authority of 10 June 2021 and with Article 122 of the Privacy Code. The controller does not use profiling cookies or statistical analysis tools. Detailed information on the cookies installed, their type, purpose and duration is given in a dedicated cookie policy, referred to in the banner.
Changes to this notice
The controller reserves the right to update this notice to adapt it to legislative changes or to the services offered. The version in force is the one published on the site, with the date of the last update. Significant changes will be brought to the attention of data subjects with adequate notice.
MMW S.r.l. – Information on the processing of personal data – last updated 27/10/2026
