1Data Controller

The Data Controller for personal data collected through the Site is:

Mimetika S.r.l.
Registered office: Corso Dante Alighieri, 55 — 17014 Cairo Montenotte (SV), Italy
VAT / Tax ID: 01770500096
Email: info@mimetikayachtwrapping.com
Phone: +39 019 450 6034 — WhatsApp: +39 351 742 6450

For any request concerning the processing of your personal data, you may contact the Data Controller at the details above.

2Types of Data Collected

Mimetika may collect the following categories of personal data:

The Site does not intentionally collect special categories of data (Art. 9 GDPR, e.g. health data) or data relating to minors. Please do not include such information in contact forms or in conversations with the virtual assistant.

3Purposes and Legal Basis

Providing data for the purpose of responding to business enquiries is necessary: without it, we will not be able to provide quotes or assistance. Providing data for marketing purposes is instead optional and does not affect access to our other services.

4How Data Is Processed

Data is processed using IT and telematic tools, following logic strictly related to the purposes indicated above, and in any case in a way that ensures its security and confidentiality. The Data Controller adopts appropriate technical and organisational measures to prevent loss, unlawful or improper use, and unauthorised access to data.

5Virtual Assistant (Chatbot)

The Site provides a virtual assistant that answers frequently asked questions about Mimetika's services. Questions typed by the user are processed solely to generate a relevant answer and are stored for a maximum of 6 months for service improvement purposes. Please do not share unnecessary personal data with the virtual assistant (e.g. payment details, identity documents).

Conversations started via WhatsApp are also subject to the privacy policy of WhatsApp/Meta Platforms, Inc., available on the provider's website.

6Disclosure to Third Parties and External Services

Personal data may be disclosed, strictly within the limits necessary for the purposes described above, to the following parties, acting as data processors or as independent controllers:

• Hosting and technical management providers for the Site;
• Email and messaging service providers (e.g. WhatsApp Business/Meta);
• Any providers of website traffic analytics tools (e.g. Google Analytics), if active on the Site;
• Consultants and professionals (e.g. accountant, lawyer), for matters within their remit;
• Public authorities, where required by law.

Data is never sold to third parties or used for purposes other than those set out in this Privacy Policy.

7International Data Transfers

Some of the providers listed in section 6 (for example Google, Meta) may process data on servers located outside the European Economic Area. In such cases, the transfer takes place in compliance with the safeguards required by the GDPR, such as the Standard Contractual Clauses approved by the European Commission or the providers' adherence to recognised adequacy frameworks (e.g. the EU-U.S. Data Privacy Framework).

8Data Retention Period

Personal data is retained for the time strictly necessary to achieve the purposes for which it was collected, and in any case:

• data relating to quote requests not followed by a contractual relationship is retained for a maximum of 24 months from the last contact;
• data relating to ongoing contractual relationships is retained for the duration of the relationship and, subsequently, for the period required by applicable tax and civil law (generally 10 years);
• data processed on the basis of consent (e.g. marketing) is retained until such consent is withdrawn.

9Your Rights

As a data subject, you have the right to request from the Data Controller, at any time:

• Access to your personal data (Art. 15 GDPR);
• Rectification of inaccurate or incomplete data (Art. 16 GDPR);
• Erasure of your data, in the cases provided for by law (Art. 17 GDPR);
• Restriction of processing (Art. 18 GDPR);
• Portability of the data you have provided (Art. 20 GDPR);
• Objection to processing based on legitimate interest or for marketing purposes (Art. 21 GDPR);
• Withdrawal of consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

Requests can be sent to info@mimetikayachtwrapping.com. You also retain the right to lodge a complaint with the competent data protection supervisory authority — in Italy, the Garante per la Protezione dei Dati Personali (www.garanteprivacy.it), or the supervisory authority of your own country of residence — if you believe the processing violates applicable law.

10Cookies

The Site uses technical cookies necessary for its correct functioning, and may use third-party cookies (e.g. for traffic statistics or third-party features such as WhatsApp) only with the user's consent, where required by applicable law. For further details on the types, purposes and management of cookies, please refer to the

11Minors

The services offered through the Site are intended for adults. Mimetika does not knowingly collect personal data from minors. Should we become aware of the unintentional processing of a minor's data, such data will be deleted promptly.

12Changes to This Policy

The Data Controller reserves the right to modify or update this Privacy Policy, in whole or in part, including as a result of regulatory changes. Any changes will be published on this page, together with the date of the last update. We encourage you to review this page periodically.