Information on the processing of personal data pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018 (“Italian Privacy Code”).
Last updated: October 2026
This policy explains how Materia Innovation S.r.l. processes the personal data of visitors to materiainnovation.com and of those who use it to contact us, request our catalogue or information about our training courses, or subscribe to our communications. It applies only to this website and not to third-party websites reachable through links.
1. Data controller
The data controller is:
MATERIA INNOVATION S.r.l.
Via Alatri, 8 – 20149 Milano (MI), Italy
VAT no. IT13378810967
Email:
The controller has not appointed a Data Protection Officer (DPO), as it is not required to do so under Article 37 GDPR. For any question about the processing of your data, please write to the email address above.
2. Data processed, purposes and legal bases
2.1 Browsing data
In the course of their normal operation, the IT systems and software running this website collect certain data whose transmission is implicit in the use of Internet communication protocols: IP address, browser type and operating system, date and time of the request, pages requested, server response code. This data is used to ensure the website works properly and securely, to prevent abuse and to establish liability in the event of computer crimes.
Legal basis: the controller's legitimate interest in the security and proper functioning of the website (Art. 6(1)(f) GDPR).
2.2 Contact form
Through the Contact page we collect first name, last name, company, email, telephone number, reason for contact and the text of your message, in order to reply to your request (technical information, sample requests, production, training, partnership or other) and, where applicable, to prepare an offer.
Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
2.3 Catalogue request
Through the Download Catalogue page we collect first name, last name, company, job role, email and area of interest, in order to send you the catalogue you requested.
Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
2.4 Training course enquiries
Through the Training page we collect full name, company or organisation, email and course of interest, in order to send you the programme and information about our master classes, laboratory courses and workshops.
Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
2.5 Newsletter and technical communications
If you give your consent — by subscribing to the newsletter or ticking the relevant box in our forms — we use your email address and area of interest to send you technical updates and news about our technologies (texturisers, delivery systems, functional actives), training courses and Materia Innovation events.
Legal basis: consent (Art. 6(1)(a) GDPR), which you may withdraw at any time via the link included in every email or by writing to the controller. Withdrawal does not affect the lawfulness of processing carried out before it.
2.6 Protection of forms against automated submissions (reCAPTCHA)
To protect the catalogue request, newsletter sign-up and training course enquiry forms from automated and abusive submissions, we use the Google reCAPTCHA service, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The service analyses the interaction with the form (and possibly the IP address and technical device data) to distinguish a real user from automated software, before the submission is processed.
Legal basis: the controller's legitimate interest in the security of its forms and in preventing abuse (Art. 6(1)(f) GDPR). Further details on the cookies set by reCAPTCHA are available in the Cookie policy.
2.7 Website usage statistics
Only with your consent, given through the cookie banner, we use Google Analytics 4 to collect aggregated information on how the website is used (pages visited, length of visit, approximate geographical origin, type of device). We do not use this data to identify you or for advertising purposes.
Legal basis: consent (Art. 6(1)(a) GDPR and Art. 122 of the Italian Privacy Code). Further details are provided in the Cookie policy.
2.8 Legal obligations and protection of rights
Data may be processed to comply with legal obligations (for example tax and accounting obligations, where a contact leads to a business relationship) and, where necessary, to establish, exercise or defend legal claims.
Legal basis: legal obligation (Art. 6(1)(c) GDPR) and legitimate interest (Art. 6(1)(f) GDPR).
3. Whether providing data is mandatory
Providing the data marked as mandatory in our forms is necessary to handle your request: without it we will not be able to reply to you or send you the catalogue or course programme. Consent to the newsletter and technical communications and consent to statistics cookies are optional: refusing them does not prevent you from browsing the website or receiving what you requested.
4. How data is processed
Data is processed using electronic and, where necessary, manual tools by authorised and trained staff, with appropriate technical and organisational measures to ensure its security, integrity and confidentiality (including encrypted HTTPS connections, access control and backups). We do not carry out automated decision-making or profiling within the meaning of Article 22 GDPR.
5. Recipients of the data
Data is not disclosed to the public. Where necessary, it may be shared with:
- Materia Innovation staff authorised to process it;
- companies belonging to our group and business partners, when the request concerns activities carried out jointly (for example production or supply);
- service providers processing data on our behalf as data processors (Art. 28 GDPR), bound by specific data protection agreements, including:
- providers of website development, maintenance and hosting services;
- providers of the email service that receives the requests sent through the forms;
- providers of the newsletter delivery platform;
- the provider of the web statistics service, only with your consent (details in the Cookie policy);
- the provider of the anti-spam protection service for the website's forms (Google reCAPTCHA);
- consultants and professionals (for example accountants and lawyers) and public authorities, where required by law.
An up-to-date list of data processors is available from the controller on request.
6. Transfers of data outside the European Union
Data is stored on servers located in the European Union. Some providers, in particular the web statistics service (enabled only with your consent) and the anti-spam protection service for forms (Google reCAPTCHA), may involve the transfer of data to countries outside the EU, such as the United States. In such cases data is transferred only to providers certified under the EU-U.S. Data Privacy Framework, recognised as adequate by the European Commission in its decision of 10 July 2023, or on the basis of the Standard Contractual Clauses approved by the Commission (Art. 46 GDPR).
7. Retention period
- Browsing data and security logs: no longer than 12 months, unless needed to investigate crimes;
- Contact, catalogue and training requests: 24 months from the last contact, unless a contractual relationship follows;
- Newsletter and technical communications: until consent is withdrawn;
- Google Analytics statistics data: 14 months;
- Data processed by Google reCAPTCHA: not retained by the controller; retention by Google is governed by its own privacy policy;
- Data relating to a contractual relationship: for the duration of the relationship and for the following 10 years, as required by Italian civil and tax law.
At the end of these periods data is deleted or anonymised.
8. Your rights
You may exercise the rights provided for by Articles 15–22 GDPR at any time:
- access to your data and to information about its processing;
- rectification of inaccurate data or completion of incomplete data;
- erasure of your data (“right to be forgotten”), where applicable;
- restriction of processing;
- portability of the data you provided, in a structured, machine-readable format;
- objection to processing based on legitimate interest;
- withdrawal of consent, without affecting the lawfulness of prior processing.
Requests should be sent to
If you believe that the processing infringes the GDPR, you have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the supervisory authority of your country of residence or work, or to bring legal proceedings.
9. Cookies
Information on the cookies used by this website and on how to give or withdraw consent is available in the Cookie policy.
10. Changes to this policy
This policy may be updated, for example when new services are introduced or regulations change. The version in force is always the one published on this page, with the date of the last update shown at the top.
