Version 2.0 · effective from 18 October 2026
This notice describes personal data processing through www.progettomanda.it under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003.
1. Controller and contact
Progemafin S.r.l., registered name Progetto M&A - Strategical Advisor S.r.l., Via Valtellina 40, 20159 Milan, Italy; tax and VAT number 13517450964; info@progettomanda.it; certified email progettomanda@pec.it.
Progemafin develops LEIBNIZ and provides technology, a business marketplace and consultancy. Any separate engagement identifies its provider in the proposal or contract. Where a request is addressed to Studio Ricciardi, the practice processes the necessary data as a separate controller under its own notice. Privacy requests can be sent to info@progettomanda.it.
2. Purposes and legal grounds
| Activity | Data and purpose | Legal ground |
|---|---|---|
| Website security | IP address, request time, pages and browser details in server logs; operation and prevention of abuse | Legitimate interests, Article 6(1)(f) |
| Enquiries | Name, email, phone, requested service, message and originating page; answering the request and involving its intended professional recipient | Pre-contractual measures requested by you, Article 6(1)(b) |
| Account | Name, tax and business details, address, role, email and a non-reversible password hash; account and representation checks | Contract, Article 6(1)(b); fraud prevention, Article 6(1)(f) |
| Listings | Listing details, identity and company documents, accepted contracts; checks, anonymous publication and handling interested parties | Contract and legal obligations, Articles 6(1)(b) and (c) |
| Job applications | CV, cover letter and position; considering the application | Pre-contractual measures, Article 6(1)(b), and Article 111-bis of the Italian Privacy Code |
| Newsletter | Email and subscription preferences; Progetto M&A updates | Your optional consent, Article 6(1)(a) |
| Company value simulator | Financial inputs processed by the calculation service without saving them in a portal archive; email and message only if you submit an enquiry | Your request, Article 6(1)(b); separate consent for the newsletter |
| Evidence of choices | Receipt identifier, date, exact checkbox text, document version and hash; email for submitted forms, pseudonymous identifier for cookie choices | Demonstrating consent under Article 7(1), and defending rights under Article 6(1)(f) |
| Optional analytics | Online identifiers and usage information; visits, campaign attribution and conversions | Consent, Article 6(1)(a) and Article 122 of the Italian Privacy Code |
Data can also be processed to meet legal obligations and establish, exercise or defend legal claims. Required form fields are necessary to answer or provide the requested service. Newsletter and optional cookie consent are independent and can be refused without losing access to the site.
3. Recipients and transfers
Authorised personnel and suppliers receive data needed for their tasks: Hostinger for portal infrastructure, Register.it for email, HubSpot for explicitly requested newsletter subscriptions, and Google Ireland Limited for consented Analytics. Supplier roles are governed by the relevant contracts and data processing agreements. Studio Ricciardi receives enquiries intended for the practice. Listing counterparties receive identifying information only as necessary and with the interested party's permission. Advisers and public authorities may receive data where required by law.
Suppliers including Google and HubSpot may process data outside the EEA, including the United States. Applicable safeguards include adequacy decisions for certified Data Privacy Framework participants and standard contractual clauses where required. Details of applicable safeguards can be requested from the controller. Listings are published anonymously; account and supporting documents are not public.
4. Retention
| Data | Period |
|---|---|
| Server logs | Up to 12 months, unless needed to investigate wrongdoing |
| Enquiries | 24 months after the last contact, unless a relationship follows |
| Accounts and listings | While the account exists; contractual records may remain for up to 10 years after closure where necessary |
| Applications | 12 months |
| Newsletter | Until withdrawal |
| Cookie choice receipts | 12 months, unless needed for documented legal claims |
| Marketing consent and contractual evidence | During processing and afterwards as necessary for legal obligations or claims, up to 10 years |
| Cookies | See the cookie policy |
At the end of the applicable period, data is deleted or anonymised.
5. Your rights
Write to info@progettomanda.it to request access, correction, deletion, restriction, portability or to object to processing based on legitimate interests, subject to the GDPR conditions. You can withdraw consent at any time without affecting earlier lawful processing. Newsletter emails contain an unsubscribe link. Cookie choices can be changed using Cookie preferences in the footer. You may complain to the Italian Data Protection Authority.
6. Security, analytics and changes
Safeguards include HTTPS, non-reversible password hashes, restricted document access and backups. The portal serves businesses and professionals and is not intended for people under 18.
Optional analytics measures pages, campaign attribution, simulator opening and calculation completion, and form starts and successful submissions. Analytics events do not contain form values, emails, messages, account identifiers or financial inputs or results. URL fragments and unsupported query parameters are removed. Choosing statistics cookies does not subscribe you to the newsletter. We do not make eligibility decisions about visitors through these analytics events.
The current notice and version remain available here. Material changes affecting registered users are communicated as appropriate.