Privacy policy
How we process your personal data, in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).
Last updated: 19 October 2026
1. Data controller and website publisher
MBL di Pietro M. Pallavicino
VAT number (P.IVA): 02194410995
Operating in: Italy / Switzerland
Registered office: Switzerland / Italy
Data protection contact: via the contact form or at mblwebapp@gmail.com
2. Data processed
Request form
When you use the form, we process: full name, company, email address, phone (optional), project type, description of your needs, maintenance preference, the language and page of submission and, if you have accepted statistics, the source of your visit (e.g. a search engine). This data is used only to answer your request and, where relevant, to prepare an offer.
To prevent abuse and automated submissions, a non-reversible fingerprint of your IP address (salted hash) is stored with the request. The IP address itself is not stored.
Consent to receive information is optional and separate from your request; you can withdraw it at any time.
Visit statistics
Only if you click “Accept” in the banner do we measure traffic with an in-house tool: page viewed, language, device type (mobile, tablet, desktop), referring website and a random identifier valid for the browsing session. No IP addresses, no advertising profiles and no third-party tracking tools (Google Analytics, Meta, etc.) are used.
Local storage
The site stores in your browser your choice regarding statistics and, if you switch language, your preferred language. If you accept statistics, a session identifier is stored until the tab is closed.
3. Legal bases
Processing necessary to answer your request and for pre-contractual measures (Art. 6(1)(b) GDPR); consent for statistics and information mailings (Art. 6(1)(a) GDPR); legitimate interest in website security (Art. 6(1)(f) GDPR). Under Swiss law, processing complies with the principles of Art. 6 FADP.
4. Processors and place of processing
- Database and server functions: Supabase Inc., data hosted in a data centre in the United Kingdom (a country recognised by Switzerland and the European Union as providing an adequate level of protection).
- Website hosting: GitHub Pages (GitHub, Inc., United States). For security purposes, the host may record visitors’ IP addresses in its technical logs. The transfer relies on the applicable safeguards (Swiss–EU–US Data Privacy Framework and standard contractual clauses).
Fonts are hosted on our own server; no data is sent to external font services.
5. Retention
- Contact requests: 24 months after the last exchange, unless there is a contractual relationship or a longer legal retention obligation.
- Visit statistics: no more than 13 months.
- Client and project data: for the duration of the contractual relationship, then as required by law.
6. Your rights
You may request access to, rectification or erasure of your data, restriction of processing, object to processing, request data portability and withdraw your consent at any time. You may lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) or, in the European Union, with the competent supervisory authority (e.g. the Garante per la protezione dei dati personali in Italy).
7. Security
The site is served over HTTPS. Form data is transmitted encrypted, and access to the administration area is protected by username and password, with access rules enforced at database level.
8. Cookies and settings
You can change your choice at any time:
9. Legal notice
Publisher: MBL di Pietro M. Pallavicino — P.IVA 02194410995. The content of this website is provided for information purposes. Published prices are indicative and do not constitute a binding offer; only the signed quote is binding.