Privacy Notice on the Processing of Personal Data
This Privacy Policy describes how the personal data of users visiting www.malaboadvisoring.it are processed, in accordance with Regulation (EU) 2016/679 (“GDPR”) and the applicable Italian data protection legislation.
The website is primarily intended for informational and institutional purposes. The domain malaboadvisoring.it, historically associated with Malabo S.r.l., is currently maintained online as a transitional website in connection with the continuation of the professional activities carried out by Studio MRA Bozzetti.
At present, the website does not provide for user registration or the creation of personal accounts.
1. Data Controller
The Data Controller is:
Studio MRA Bozzetti
Via Savona 26
20144 Milan, Italy
VAT No. 14780330966
Email:
Any request concerning the protection of personal data may be sent to the email address indicated above.
2. Data Processed During Browsing
During normal browsing activities, the IT systems and software procedures used to operate the website may collect certain data whose transmission is inherent in the use of Internet communication protocols.
Such data may include, by way of example, IP addresses, browser type, operating system, date and time of requests and other technical data necessary for the operation and security of the website.
Such information is used solely to ensure the proper functioning of the website, to protect its security and to diagnose any technical issues.
3. Data Voluntarily Provided by Users
The voluntary sending of messages to the email addresses indicated on the website entails the acquisition of the sender’s email address and any other personal data contained in the communication, solely to the extent necessary to reply to the request received.
The website does not currently provide for user registration forms or restricted user areas.
4. Purposes and Legal Bases of Processing
Personal data may be processed for the following purposes:
- enabling browsing and the proper functioning of the website;
- ensuring the security and integrity of IT systems;
- responding to communications or requests voluntarily submitted by users;
- complying with any applicable legal obligations.
The processing of technical data necessary for browsing is carried out in order to provide the service requested by the user and, where applicable, on the basis of the Data Controller’s legitimate interest in ensuring the security and proper management of the website.
Data voluntarily provided by email are processed in order to respond to the relevant request.
5. Processing Methods
Personal data are processed using IT and electronic tools and appropriate technical and organisational measures designed to ensure their security, integrity and confidentiality.
6. Data Retention
Personal data are retained for the period strictly necessary to fulfil the purposes for which they were collected and, thereafter, for any additional period required under applicable law.
Technical and security data that may be contained in server logs are retained in accordance with the settings and policies of the hosting service provider.
7. Recipients of Personal Data
Personal data may be processed by service providers supplying technical services necessary for the operation and maintenance of the website, such as the hosting provider, where appointed as data processors pursuant to Article 28 GDPR, where required.
The website is currently hosted on infrastructure provided by Aruba.
Personal data are not publicly disclosed.
8. Transfers to Third Countries
At present, the website does not use, in connection with its ordinary browsing functions, profiling or analytics tools specifically intended to transfer personal data to third countries.
Should services involving such transfers be introduced in the future, this Privacy Policy will be updated accordingly.
9. Data Subject Rights
Where applicable under the GDPR, data subjects may exercise the rights provided for under Articles 15 et seq. GDPR, including the rights of access, rectification, erasure, restriction of processing, objection and data portability.
Requests may be sent to
Data subjects also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
10. Links to Third-Party Websites
The website may contain links to websites operated by third parties.
Studio MRA Bozzetti does not control the processing activities carried out by such third parties, which are governed by their respective privacy policies.
11. Updates
This Privacy Policy may be amended as a result of changes in applicable law, technical developments or changes to the website’s features.
Last updated: September 2026.
