1. Data Controller
The Data Controller is:
CMM Group Srl
Via Pisa 16
64021 Giulianova (TE), Italy
VAT No. and Tax Code: 09378510961
Email: info@cmmgroupsrl.it
Certified email (PEC): cmmgroupsrl@pec.it
2. Personal data processed
Through this website, CMM Group Srl may process the following categories of personal data:
- identification and contact details, such as name, surname, company name, email address, and telephone number;
- data related to the request submitted, such as material type, estimated quantity, collection location, and description of operational requirements;
- any additional information voluntarily provided by the user through the contact form or email communications;
- technical browsing data automatically collected by IT systems and communication protocols used to operate the website.
3. Purposes and legal basis for processing
Personal data are processed for the following purposes:
- to manage requests for information, assessments, collections, or contact submitted by users;
- to reply to received communications and provide information about CMM Group Srl services;
- to assess the feasibility of collection, logistics, recovery, and materials management services;
- to comply with legal, regulatory, tax, administrative, or authority requirements;
- to protect the Controller's rights, manage potential disputes, and prevent improper or fraudulent use of the website.
The legal basis for processing is the performance of pre-contractual measures taken at the data subject's request pursuant to Article 6(1)(b) GDPR, compliance with legal obligations pursuant to Article 6(1)(c) GDPR, and the legitimate interest of the Controller pursuant to Article 6(1)(f) GDPR, within the limits provided by applicable law.
4. Whether provision of data is mandatory
The provision of data requested through contact forms is voluntary. However, failure to provide data marked as necessary may make it impossible to respond to the request or provide the requested assessment, contact, or service.
5. Processing methods
Personal data are processed using electronic tools and, where necessary, paper-based tools, with appropriate organisational and technical measures in place to protect data against unauthorised access, loss, disclosure, alteration, or destruction.
6. Recipients of personal data
Personal data may be processed by persons authorised by CMM Group Srl and, where necessary, disclosed to external parties acting on behalf of the Controller or as independent controllers, including:
- IT service providers, hosting providers, website maintenance providers, and email service providers;
- administrative, tax, legal, or technical consultants;
- suppliers, operational partners, or parties involved in providing the requested services;
- public authorities, supervisory bodies, or other parties where required by law.
Personal data are not subject to indiscriminate disclosure.
7. Transfers outside the European Economic Area
The Controller processes data primarily within the European Economic Area. If, due to technical requirements related to the services used, a transfer to countries outside the European Economic Area becomes necessary, the transfer will be carried out in compliance with the safeguards required by the GDPR.
8. Data retention period
Data collected through contact, assessment, or collection requests are retained for the time necessary to manage the request and, subsequently, for a period not exceeding 24 months, unless a longer retention period is required by law, for the establishment or performance of a contractual relationship, or to protect the Controller's rights.
9. Data subject rights
Where provided for by applicable law, data subjects may exercise the rights granted by Articles 15-22 GDPR, including:
- access to personal data;
- rectification of inaccurate data or completion of incomplete data;
- erasure of personal data;
- restriction of processing;
- objection to processing;
- data portability, where applicable;
- withdrawal of consent, where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.
To exercise these rights, users may contact: info@cmmgroupsrl.it.
Data subjects also have the right to lodge a complaint with the Italian Data Protection Authority or another competent supervisory authority.
10. Automated decision-making
CMM Group Srl does not carry out automated decision-making, including profiling, that produces legal effects concerning data subjects or similarly significantly affects them.
11. Cookies and third-party services
The website may use technical cookies required for its operation. The possible use of analytics or profiling cookies, maps, embedded content, or third-party services may require the publication of a specific Cookie Policy and, where required, the collection of user consent in accordance with applicable law.
12. Updates to this Privacy Policy
CMM Group Srl may update this Privacy Policy to reflect legal, organisational, or technical changes. The updated version will be published on this page.
Last updated: 11 October 2026.