Controller and contact

MB Consulting di Mattia Barmasse, based in Georgia, Tbilisi, Vake district, Vazha-Pshavela avenue, block II, building 1, entrance 1, floor 1. Use the contact below for personal-data requests.

privacy@mbconsulting.it

Data and purposes

We process the information you provide: name, contact details, city or country, vehicle preferences, budget and message. Business enquiries may include company and tax details. We use these to answer, search for a vehicle and coordinate a quotation. The legal basis is steps requested before a contract (GDPR Article 6(1)(b)), or legitimate interests in managing business relationships when you represent a company (Article 6(1)(f)). Legal obligations rely on Article 6(1)(c). Technical operation and security rely on our legitimate interest in protecting the website. There is no newsletter, personalised advertising or automated decision-making with legal effects. Providing data is optional, but we may be unable to answer without contact details and necessary information. Do not enter identity documents or sensitive data in the forms.

How the forms work

Commercial enquiry forms prepare a message and open your email application: transmission occurs when you send it from that application. The “Request access” form works differently: it submits and stores your application directly on the website and sends a confirmation email.

Recipients

MB Consulting receives enquiries. The controller personally decides which official manufacturer dealer to involve; the website does not automatically forward your data to official manufacturer dealers. We share only what is needed for the enquiry and inform you of the official manufacturer dealer before sharing your contact details. The official manufacturer dealer is an independent controller for quotations, sales and delivery under its own notice. People providing technical assistance, website maintenance and security may access data as necessary for these tasks. Infrastructure and email services may process data needed to deliver their services. Our commercial mailbox uses Google Gmail. Data are not published or sold.

Retention

Commercial enquiries are kept for 12 months after closure. Documents subject to legal retention remain for the applicable statutory period. Privacy requests and replies are kept as necessary to manage them and demonstrate compliance, limiting data and considering any disputes. MB aggregate visit counts are deleted after 90 days. Evidence of any consent is retained as necessary to demonstrate the processing based on it, without indiscriminate retention.

Cookies, favourites and statistics

CookieAdmin manages cookie choices. Technical cookies support operation and remember preferences. Non-essential cookies require a positive choice before activation. Accept, reject or change your choice using the cookie-preferences button. Favourites store selected vehicle IDs in your browser (localStorage key mbc-saved-cars), without sending MB Consulting a personal list. Remove them by deselecting vehicles or clearing this site’s browser data. Comparison works within the page. The MB counter records totals by day, page and estimated country only, using the IP temporarily with a local geographical database, without storing it in the counter or sending it to external geolocation services. It does not identify unique visitors. Separate hosting logs support service delivery and security. The technical cookie cookieadmin_consent remembers your choice for 365 days. CookieAdmin’s consent register records a consent identifier, choice, date and time, country and a truncated IP address to document preferences. This register is separate from MB aggregate statistics and is not automatically emailed.

International processing

The website server is hosted in Italy. The controller operates in Georgia and may access enquiries there. Georgian data protection law applies, together with the GDPR for services offered to people in the European Union. The page language alone does not determine the applicable law. Technical and email services may involve processing in other countries. Provider details, locations and applicable safeguards must be completed before public opening; this version remains under review in the restricted preview.

Your rights

You may request access, rectification, erasure, restriction and, where applicable, portability; object to processing based on legitimate interests; and withdraw any consent without affecting earlier lawful processing. We respond within the applicable legal deadlines. The GDPR normally allows one month, with any justified extension notified within that period. You may complain to the competent EU supervisory authority, including in your country of residence or work, or to the State Audit Office of Georgia under Georgian law. The Italian authority is the Garante per la protezione dei dati personali.

Trade area

Trade area update of 17 October 2026. We record company name, address, country, contact person, email, phone, optional website and tax identifier, together with notice acknowledgement, email confirmation and access decisions. These support application review and management of the business relationship and account, under the legal bases in “Data and purposes”. Approval is manual. WordPress stores passwords as hashes unreadable by the administrator. Email confirmation links expire after 24 hours. Temporary security counters use identifiers derived by hashing the IP and email; the form does not store the plain IP. WordPress technical cookies maintain sign in; “Remember me” extends their duration according to site settings. Account data are used during the active relationship; after closure the stated 12-month period for commercial enquiries applies, except for legal obligations or disputes. To close your account or exercise your rights, use the privacy contact above.