Unified Notice — Privacy, Chatbot Terms, Cookies

Unified Notice — Privacy, Chatbot Terms, Cookies

Last update: 14/08/2025

1) Who we are

Controller: Mabiloft S.r.l.
Headquarters: Via Cadorna 2, 35020 Albignasego (PD), Italy
Privacy email: privacy@mabiloft.com
VAT No.: 05157070284

2) Scope of application

This notice covers:

• the website mabiloft.com
• contact forms and commercial requests
• the Mabiloft WhatsApp chatbot
• call booking with the team

3) Types of data processed

Website / contact form

• name, email/phone, message text
• technical metadata (IP, user-agent, pages viewed)

WhatsApp Chatbot

• phone number, profile name (if visible)
• exchanged messages
• consent confirmation (phrase or action clearly expressing it)
• useful interactions (e.g., link opened, call booked)

Calendar / call

• name, contact, time, possible notes

We invite you not to send sensitive data (health, religion, political opinions, etc.). If received, they are deleted where not necessary.

4) Purposes and legal bases

• Responding to requests and organizing calls → Art. 6(1)(b)
• Security, abuse prevention, service improvement → Art. 6(1)(f)
• Marketing (email/WhatsApp/SMS, only with your consent) → Art. 6(1)(a)
• Legal obligations → Art. 6(1)(c)

Possible use of “soft opt-in” (Art. 130(4) Privacy Code): for existing clients, information on similar services; you can object at any time.

5) Consent and withdrawal methods

• WhatsApp: the conversation continues only if the user clearly expresses the will to proceed and receive information.
• Withdrawal: at any time, by sending a message expressing the will to stop or not continue.
• Contact form: separate checkbox to authorize marketing; if not selected, no promotional communication will be sent.

All expressions of consent/withdrawal are recorded (text, date/time, version of notice).

6) Retention periods

• Chats and consent logs: up to 12 months from conversation closure
• Leads/quotes: up to 24 months
• Data for legal obligations: for the time required by law

7) Recipients and providers

We use external providers processing data on our behalf:

• WhatsApp / Meta Platforms Ireland – chat channel
• Microsoft Clarity (Microsoft Ireland) – analytics/session replay (only with consent)
• Umami (Umami Software): analytics
• Meta Pixel (Meta Platforms Ireland) – marketing/retargeting (only with consent)
• Google Tag Manager (Google Ireland) – tag container
• Hosting, CRM, calendar tools

Some may operate outside the EEA: in such cases we use SCCs and, where applicable, the Data Privacy Framework.

8) Minors

Service intended for individuals aged at least 14. For minors, parental/guardian consent is required.

9) Security

• Encryption in transit
• Access control
• Data minimization
• Consent recording and tracking

10) User rights

You may request at any time: access, rectification, deletion, restriction, objection, portability, consent withdrawal.
Write to privacy@mabiloft.com.
We reply within 30 days (extendable). We may request identity confirmation.
You have the right to lodge a complaint with the Data Protection Authority.

11) Terms of Use – Mabiloft WhatsApp Chatbot

What it is
Automated assistant providing information about Mabiloft and, if useful, instructions on how to book a call.

Limitations

• Responses are informative, not legal/tax/medical/professional advice.
• It does not handle emergencies.
• It does not perform profiling or make decisions with legal effects; it only customizes based on the context of your questions.

Liability
Within the limits of the law, Mabiloft is not liable for damages resulting from exclusive reliance on the bot’s responses. Fraud and gross negligence are excluded.

12) Cookie Policy

What they are
Files or similar technologies that store/read information on the device.

What we use

• Necessary: site operation and preference banner
• Analytics: Microsoft Clarity (only with consent)
• Anonymous analytics: Umami (no cookies, personal data excluded — for technical statistical purposes only).
• Marketing: Meta Pixel (only with consent)
• Container: Google Tag Manager

Legal basis

• Necessary → legitimate interest/necessity
• Analytics/Marketing → consent via banner

Preference management
You can modify choices at any time: [link/action CMP “Open cookie preferences”]

Duration and third parties
Durations and details in the CMP banner. Third-party providers have their own notices.

13) Contacts

Privacy: privacy@mabiloft.com
General: hello@mabiloft.com
Headquarters: Via Cadorna 2, 35020 Albignasego (PD), Italy