1. Data controller
Maison CDC S.r.l., registered office at Corso Indipendenza 5, 20129 Milan, Italy, VAT number IT14308080960 (hereinafter "Maison CDC" or the "Controller"). Contact email: info@maisoncdc.it.
This notice is provided under Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR") and covers the personal data collected through maisoncdc.it and the connected channels.
2. What data we process and why
Contact form. First name, last name, brand or company, role, email, city of interest, type of request and message. We use them to answer your request and assess a collaboration. Legal basis: pre-contractual measures taken at your request (Art. 6.1.b GDPR).
Job applications. Name, email, a short introduction and, if attached, your CV. We use them to evaluate your application and get back to you. Legal basis: pre-contractual measures (Art. 6.1.b GDPR). Please do not include in your CV special categories of data (health, political opinions, religious beliefs and similar) unless strictly necessary.
Community registration. The data you enter in the "Enter" registration form, managed through the Typeform platform. We use them to review your access request, manage your participation in the community and send you invitations and communications about private sales and events. Legal basis: consent (Art. 6.1.a GDPR), which you can withdraw at any time.
Email and direct messages. If you write to info@maisoncdc.it or job@maisoncdc.it we process the data you share to handle the correspondence. Legal basis: our legitimate interest in replying (Art. 6.1.f GDPR) or pre-contractual measures.
Browsing data and cookies. The website uses technical cookies and, only with your consent, third party marketing cookies. Full details are in the Cookie policy.
Meta Pixel. With your consent the website activates the Pixel of Meta Platforms Ireland Ltd., which collects browsing data (pages viewed, clicks on the Enter button and on the contact links, browser identifiers and IP address) to measure and optimise our advertising campaigns on Facebook and Instagram and to show relevant ads. Where automatic advanced matching is enabled, some data entered in the website forms, such as the email address, may be sent to Meta in hashed form, so that Meta can match it to its own accounts without receiving the data in clear text. The same events may also be sent to Meta from our server through the Conversions API. Legal basis: consent (Art. 6.1.a GDPR), which you can withdraw at any time from the "Manage cookies" link in the footer. For this processing Meta acts as an independent or joint controller, as described in its privacy policy.
3. Provision of data
Providing the data marked as required in the forms is necessary to process your request; without them we cannot reply. All other data is optional.
4. How long we keep the data
- Contact requests: up to 24 months from the last exchange, unless a collaboration starts.
- Job applications: up to 12 months from receipt, then deleted.
- Community: until consent is withdrawn or deletion is requested.
- Data collected through cookies: for the periods stated in the Cookie policy.
5. Who receives the data
The data is processed by Maison CDC staff and collaborators authorised to do so, and by the providers that support us, appointed as processors under Art. 28 GDPR:
- Netlify, Inc. (United States): website hosting and handling of the contact and application forms.
- Typeform S.L. (Spain): community registration form.
- Meta Platforms Ireland Ltd. (Ireland): Meta Pixel, advanced matching and Conversions API, active only with your consent, for advertising campaign measurement and optimisation. For this processing Meta acts as an independent or joint controller as described in its own privacy notice.
- Email and productivity service providers.
The data is never published or sold to third parties for their own marketing purposes.
6. Transfers outside the European Union
Some providers, including Netlify and Meta, are based or host servers in the United States. Transfers rely on the European Commission adequacy decision for the EU-US Data Privacy Framework, where the provider is certified, or on the standard contractual clauses approved by the Commission.
7. Your rights
You may at any time request access to your data, rectification, erasure, restriction of processing and portability, and you may object to processing based on legitimate interest. Where processing relies on consent, you may withdraw it without affecting the lawfulness of processing already carried out. Write to info@maisoncdc.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or with the supervisory authority of your country.
8. Minors
The website and the community are intended for adults. We do not knowingly collect data from anyone under 18.
9. Changes
This notice may be updated. The version in force is always the one published on this page, with the last update date shown at the top.