Privacy notice
Version 1.0 of 15 October 2026. Information provided under Article 13 of Regulation (EU) 2016/679 (GDPR). The Italian version is the reference text.
1. In short
- This website uses no cookies, no analytics or profiling tools, and loads no resources from other websites (fonts, maps, videos, scripts).
- Forms do not send data to our server: when you press "Send", your email program opens with the message already filled in for info@mcftechnology.com. We receive your data only if you decide to send that email.
- The calculation tools run in your browser. Three tools save drafts and scenarios in your browser's storage (local Storage); we have no access to it. See the Cookie policy.
- As with any website, the hosting provider records technical visit data (IP address, requested page, date and time) in the server logs.
2. Controller
The controller is MCF TECHNOLOGY Zrt., Türr István utca 9, 6. em. 2. ajtó, 1052 Budapest, Hungary. EU VAT number HU32893126, Hungarian tax number 32893126-2-41. Email info@mcftechnology.com, phone +36 70 776 1831. Further company details are in the Legal notice.
SGE srl (Via Garbino 3, 48012 Bagnacavallo RA, Italy, VAT 01268070396), MCF Technology's technical partner, receives from MCF the data of requests concerning design, supply, installation or service, to the extent needed to answer them.
3. Data protection officer
No data protection officer (DPO) has been appointed, as the conditions of Article 37 GDPR do not apply. For any privacy matter, write to info@mcftechnology.com.
4. What data we process, why, and on what legal basis
4.1 Browsing the website (server logs)
- Data: IP address, date and time, requested page or file, outcome of the request, declared browser and operating system, referring page.
- Who collects it: the website's hosting provider, Aruba S.p.A. (Italy), acting on our behalf as processor.
- Why: to run the website, protect it from abuse and attacks, and detect errors.
- Legal basis: the controller's legitimate interest in a secure, working website (Art. 6(1)(f)).
- Retention: for the period set by the provider, normally no longer than 30 days, unless needed to investigate an offence.
The website uses no analytics, pixels or tracking.
4.2 Contact, quote and information requests (forms, email, phone, WhatsApp)
- Data: whatever you choose to send us. In the forms: name and surname, company, role, country, email, phone (optional), product or line of interest, capacity, indicative budget and timeline, message. With the email we also receive the sender address and name set in your email program. From the calculation tools, only the project data you decide to send us.
- How it reaches us: the form opens your email program; the message leaves from your own email account, so it also passes through your email provider.
- Why: to reply, assess technical feasibility, prepare and send an offer, and arrange meetings and site visits.
- Legal basis: if you write on behalf of your company, the controller's legitimate interest in answering business enquiries and managing commercial relationships (Art. 6(1)(f)); if you write for yourself, steps taken at your request prior to entering into a contract (Art. 6(1)(b)).
- Your consent is not needed to answer your request.
- Retention: 24 months from the last contact if no contract follows; if a contract follows, for its duration and then for the statutory retention periods for accounting and contract records (8 years in Hungary).
4.3 Optional communications
- What: the summary of industry news (News and Observatory pages) and technical and commercial updates, only if you ask for them.
- Data: email, language, supply chain of interest.
- Legal basis: your consent (Art. 6(1)(a)). It is optional and does not affect the answer to your requests.
- Withdrawal: at any time, by writing to info@mcftechnology.com or replying to one of our emails. Withdrawal does not affect the lawfulness of earlier processing.
- Retention: until you withdraw.
4.4 Requests to exercise your rights
- Data: what you state in the request and, only if we have reasonable doubts about your identity, the information needed to verify it.
- Legal basis: compliance with a legal obligation (Art. 6(1)(c), in connection with Articles 12-22 GDPR).
- Retention: 5 years from our reply, to prove that we replied.
4.5 Legal obligations and legal claims
We may process data to comply with legal obligations (for example tax and accounting; Art. 6(1)(c)) and to establish, exercise or defend legal claims (Art. 6(1)(f)), for as long as strictly necessary.
4.6 Calculation tools and browser storage
The tools' calculations take place on your device and are not sent to us. The guided configurator, the module configurator and the ROI retrofit calculator (Italian-language tools) save drafts, notes and scenarios in your browser's local storage so you can pick up your work: they stay on your device, we cannot access them, and you can delete them at any time. Details are in the Cookie policy.
5. Do you have to provide your data?
No. You are free not to write to us. Form fields marked with * are needed to understand and handle the request: without them we may not be able to reply. The other fields are optional.
6. Who we share data with
Only with those we need for the purposes above:
- Aruba S.p.A. (Italy), provider of the website hosting and of the info@mcftechnology.com mailbox, as processor (Art. 28);
- SGE srl, for the technical aspects of requests;
- consultants and professionals (for example legal, tax, IT), bound by confidentiality;
- banks, leasing companies or export credit agencies, only if you ask us to, for the financing of your project;
- authorities, where required by law.
If you contact us via WhatsApp, the service is provided by WhatsApp Ireland Limited (Meta group), which processes data as an independent controller under its own privacy notice.
We do not sell or publish data.
7. Transfers outside the European Economic Area
- Hosting and email: Aruba S.p.A. keeps website and email data on servers in Italy: these services involve no transfers outside the European Economic Area.
- WhatsApp: Meta may transfer data to the United States under the Data Privacy Framework.
- Clients outside the EU: when we answer a request from a non-EU country or arrange a site visit there, the necessary data is sent to you and your contacts in that country, as required by the pre-contractual steps you requested (Art. 49(1)(b) and (c)).
8. How long we keep data
| Data | Retention |
|---|---|
| Server logs | normally no longer than 30 days |
| Requests not followed by a contract | 24 months from the last contact |
| Client and contract data | contract duration plus statutory periods (8 years in Hungary) |
| Subscription to the summary or updates | until you withdraw |
| Requests to exercise rights | 5 years from our reply |
| Browser local storage | on your device: you delete it (see Cookie policy) |
When the period ends, data is deleted or anonymised.
9. Your rights
You may ask at any time for:
- access to your data and a copy (Art. 15);
- rectification (Art. 16);
- erasure (Art. 17);
- restriction of processing (Art. 18);
- portability (Art. 20), for data processed by automated means on the basis of consent or contract;
- withdrawal of consent (Art. 7(3)), without affecting earlier processing.
Right to object (Art. 21). You may object at any time, on grounds relating to your particular situation, to processing based on our legitimate interest. You may object at any time and without giving reasons to receiving commercial communications.
To exercise your rights, write to info@mcftechnology.com or use the GDPR requests page (in Italian). We reply without undue delay and in any case within one month, extendable by two months for complex requests (we will tell you within the first month). We ask for information to verify your identity only if we have reasonable doubts. Exercising your rights is free of charge.
10. Complaints to the supervisory authority
If you believe the processing infringes the GDPR, you may lodge a complaint with the Hungarian authority, competent for the controller's registered office: Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), Falk Miksa utca 9-11, 1055 Budapest, ugyfelszolgalat@naih.hu, www.naih.hu; or with the authority of the EU Member State where you habitually reside, work, or where the alleged infringement took place (Art. 77 GDPR). You may also go to the competent court (Art. 79 GDPR).
11. Automated decisions
We do not take decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you (Art. 22). The simulators' results are indicative estimates calculated in your browser.
12. Changes
We may update this notice. The version in force is always on this page, with its number and date at the top.