Privacy Notice

1. Data controller

MSD Engineering & Project Services S.r.l., Italy. Privacy contact: info@msdeps.com. Full corporate details are available in the Legal Notice.

2. Data processed

• contact and professional data voluntarily provided by email or through the project brief;
• request content, RFQs, scope and technical information sent by the user;
• data contained in CVs and spontaneous applications;
• technical data strictly necessary for website operation and security;
• privacy preferences and, only with consent, campaign attribution parameters.

3. Purposes and legal bases

• responding to commercial and technical enquiries and taking requested pre-contractual steps: GDPR Art. 6(1)(b);
• managing applications and professional contacts: GDPR Art. 6(1)(b) and, where applicable, employment-law obligations or rights;
• complying with legal obligations: GDPR Art. 6(1)(c);
• protecting the website, preventing abuse and managing security: controller’s legitimate interest, GDPR Art. 6(1)(f);
• activating non-essential analytics or marketing tools: consent, GDPR Art. 6(1)(a). No third-party analytics or marketing provider is currently configured.

4. Provision of data

Providing the information needed to answer an enquiry or assess an application is voluntary, but without it MSD may be unable to handle the request. Special-category data should not be provided unless strictly necessary and lawfully processable.

5. Retention

Commercial and technical enquiries are retained for as long as needed to manage the relationship and ordinarily no longer than 24 months after the last substantive interaction, unless legal obligations apply or a contract is established. CVs received for spontaneous applications are ordinarily retained for up to 12 months, subject to specific legitimate needs or applicable obligations. Privacy preferences are reviewed after 180 days.

6. Recipients and transfers

Data may be processed by IT, hosting, professional or advisory providers acting for MSD and only to the extent necessary. MSD does not intentionally transfer personal data outside the EEA through this website. If future suppliers involve such transfers, GDPR safeguards will be implemented and this notice will be updated.

7. Your rights

• access, rectification, erasure and restriction of processing;
• objection where applicable;
• data portability where applicable;
• withdrawal of consent at any time without affecting previous lawful processing;
• the right to lodge a complaint with the competent supervisory authority.

8. Exercising your rights

Write to info@msdeps.com and provide enough information to identify your relationship with MSD and the request.

9. Updates

This notice may be updated when services, suppliers or processing activities change. The version published on the website is the current version.