Last updated: October 2026
Pursuant to Article 13 of Regulation (EU) 2016/679 (the “GDPR”) and Italian Legislative Decree No. 196/2003 (the “Italian Privacy Code”), EOS Mktg & Communication S.r.l. provides the following information on the processing of personal data relating to visitors to eosmarketing.it, individuals requesting information, newsletter subscribers and customers.
Data Controller
EOS Mktg & Communication S.r.l.
Via Pietro Mascagni 8, 20811 Cesano Maderno (MB), Italy
VAT No.: 06695850963
Telephone: 0362 503215
Email: info@eosmarketing.it
Certified email (PEC): eosmktg@legalmail.it
The Data Controller has not appointed a Data Protection Officer (DPO). For any request concerning your personal data, you may write to info@eosmarketing.it.
Categories of Data Processed
- Browsing data: IP address, browser and device type, pages visited, and date and time of access, collected automatically by the systems that operate the website.
- Personal and identification data: for example, first name, last name, company, address, telephone contact details and email address, provided through the contact form, newsletter subscription or in connection with a contract.
- Tax and banking data (customers only): billing information and IBAN for payments.
- Email communication interaction data: information collected through tracking pixels and tracked links in newsletters, namely whether a message has been opened, the date and time of opening, number of openings, link clicks, device and email client type, and IP address.
For information about cookies and other tracking technologies used on the website, please refer to the Cookie Policy.
Purposes, Legal Bases and Retention Periods
| Purpose |
Data |
Legal basis |
Retention period |
| Website operation and security |
Browsing data |
Legitimate interests of the Data Controller (Article 6(1)(f) GDPR) |
For the time necessary to manage the technical transmission |
| Responding to requests for information (contact form, email, telephone) |
Personal and identification data |
Steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR) |
For the time necessary to handle the request |
| Management of the contractual relationship and requested services (consultancy and marketing, drafting and publication in magazines, training and certification, administration and invoicing) |
Personal and identification data; tax and banking data |
Performance of a contract (Article 6(1)(b) GDPR) |
For the duration of the contract and the following 10 years; indefinitely for certificates relating to qualification courses and the management of continuing professional education credits |
| Compliance with legal obligations (tax, accounting, requests from authorities) |
Personal and identification data; tax and banking data |
Legal obligation (Article 6(1)(c) GDPR) |
For the duration of the contract and the following 10 years |
| Protection of the Data Controller's rights, including in legal proceedings |
Personal and identification data; banking data |
Legitimate interests of the Data Controller (Article 6(1)(f) GDPR) |
For the duration of the contract and the following 10 years |
| Sending newsletters and marketing communications |
Personal and identification data; email address |
Consent (Article 6(1)(a) GDPR) |
Until consent is withdrawn |
| Sending customers communications about services similar to those already purchased |
Email address provided in the context of the contract |
Article 130(4) of the Italian Privacy Code, unless you object |
Until you object |
| Tracking opens and clicks in newsletters for individual recipients (see next section) |
Email communication interaction data |
Consent (Article 6(1)(a) GDPR) |
12 months from collection and, in any event, until consent to tracking is withdrawn |
The Data Controller does not make decisions based solely on automated processing. Data are processed using paper-based, electronic and telematic means, with appropriate security measures in place.
Newsletters and Tracking Pixels in Emails
You may subscribe to the newsletter using the form on the website. Subscription is optional and requires your consent, which also covers the tracking described below.
Newsletters and marketing communications are sent through the MailUp platform and contain a tracking pixel, i.e. an invisible image. When a message is opened with image display enabled, the pixel makes it possible to detect the opening, its date and time, the number of openings, the type of device and email client, and the IP address. Links in the messages also make it possible to track clicks.
This information relates to each individual recipient. We use it to measure the effectiveness of our communications and to send a second message to recipients who did not open the first one. Any statistics provided to third parties, such as advertisers featured in newsletters, are exclusively aggregated and anonymous and do not allow individual recipients to be identified.
At any time, you may:
- disable tracking only, while continuing to receive the newsletter, by using the “Manage Preferences” link at the bottom of each email or by writing to info@eosmarketing.it. From that point on, your opens and clicks will no longer be associated with your email address and will be counted only anonymously in the overall statistics;
- unsubscribe from the newsletter using the unsubscribe link at the bottom of each email.
Suggested wording for the subscription form (unticked checkbox):
I consent to receive newsletters and marketing communications from EOS Mktg & Communication by email, including tracking of message opens and link clicks, as described in the Privacy Notice. I may disable tracking alone at any time while continuing to receive the newsletter.
Recipients of Personal Data
For the purposes indicated, personal data may be disclosed to:
- employees and collaborators of the Data Controller, authorised to process data within the scope of their duties;
- providers of the newsletter delivery platform (MailUp), website and other IT services, acting as data processors pursuant to Article 28 of the GDPR;
- external advisers assisting the Data Controller (for example, with accounting, tax and legal matters);
- banks, for the management of receipts and payments;
- public bodies, judicial authorities and supervisory authorities, upon their request, acting as independent controllers.
An up-to-date list of data processors is available on request. Personal data are not made publicly available.
Transfers to Countries Outside the EU
Personal data are stored on servers located in the European Union, including those of the MailUp platform. The Data Controller does not transfer data outside the European Union.
Whether Providing Data Is Mandatory
Providing the data necessary to respond to requests and manage the contract is mandatory: without them, the Data Controller cannot process the request or provide the service. Providing data for newsletters and marketing is optional: refusal has no effect on the services requested.
Rights of the Data Subject
You may exercise your rights under Articles 15–22 of the GDPR at any time:
- access your data and receive a copy (Article 15);
- rectify inaccurate data (Article 16);
- erase data (Article 17);
- restrict processing (Article 18);
- data portability (Article 20);
- object to processing based on legitimate interests and, in any event, to direct marketing (Article 21).
To exercise your rights, you may write to info@eosmarketing.it or to the certified email (PEC) address eosmktg@legalmail.it.
Withdrawal of Consent
You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal:
- for newsletters and marketing, by using the unsubscribe link at the bottom of each email or writing to the addresses indicated above;
- for tracking of opens and clicks only, by using the “Manage Preferences” link at the bottom of each email, while continuing to receive the newsletter.
Right to Lodge a Complaint
If you believe that the processing breaches the GDPR, you may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), following the procedures set out on the Authority's website.
Changes to this Privacy Notice
The Data Controller may update this notice, including following changes in legislation. The version in force is always published on this page, together with the date of the latest update.