Privacy Policy

Last updated: 4 November 2026

This notice explains how the personal data of visitors to www.moscaframe.com, and of anyone who fills in the forms on the Contact page, are processed, as required by Article 13 of Regulation (EU) 2016/679 (GDPR).

Data controller

The data controller is Windoor Tech S.r.l., owner of the MOSCA brand, based at Zona Ind.le C.da Coppa Sant’Agata, 71010 Cagnano Varano (FG), Italy, VAT no. 04197780713. For any question about personal data, write to info@moscaframe.com or call +39 0884 853499.

Data collected

Browsing data

As with any website, the systems that run this site record some technical data about each visit: IP address, date and time, requested page, browser and operating system. These data are used only to run the site and protect it from misuse and cyber attacks, and are not used to identify visitors.

Data sent through the forms

These are the data that users choose to enter in the forms on the Contact page:

  • Request information: first name and surname, email, phone (optional), town or city, profile, subject and message;
  • Work with us: first name and surname, email, phone, area of interest, CV and an optional introduction;
  • Become a partner: company name, contact person, email, phone, type of business, area covered and message.

Please do not include health data or other special categories of data in your CV unless they are needed for the application (for example, membership of a protected category).

Purposes and legal basis

  • Answering requests for information, quotations and after-sales support, and assessing partnership proposals: the processing is needed to follow up the data subject’s request (Art. 6(1)(b) GDPR).
  • Assessing job applications: pre-contractual measures requested by the data subject (Art. 6(1)(b) GDPR); no consent is needed for CVs sent on the candidate’s own initiative (Art. 111-bis of the Italian Privacy Code, Legislative Decree 196/2003).
  • Sending marketing communications and updates about MOSCA products: only with the optional consent given in the information request form (Art. 6(1)(a) GDPR).
  • Keeping the site running and secure: the controller’s legitimate interest (Art. 6(1)(f) GDPR).

The data are not used for profiling or automated decision-making.

Providing your data

The fields marked as required are needed to reply: without them the form cannot be sent. All other data, and consent to marketing communications, are optional.

Who processes the data

The data are processed electronically by authorised staff of Windoor Tech S.r.l. and are not disclosed or passed on to third parties for their own purposes. To run the site we use providers acting as data processors (Art. 28 GDPR):

  • Aruba S.p.A. (Italy), which hosts the site and the archive of requests;
  • Resend (United States), which delivers the requests sent through the forms by email;
  • the provider of the company email service.

Data may be disclosed to the competent authorities where required by law.

Transfers outside the European Union

The service that delivers the form emails is based in the United States. Any transfer of data takes place with the safeguards provided for by Articles 45 and 46 GDPR: the European Commission’s adequacy decision on the EU-US Data Privacy Framework or the standard contractual clauses.

Retention

  • Information requests and partnership proposals: for as long as needed to handle them and no longer than 24 months after the last contact; if a contract follows, for the period required by law for that relationship.
  • Job applications: 24 months from receipt.
  • Data for marketing communications: until consent is withdrawn and in any case no longer than 24 months after the last contact.
  • Browsing data: only for as long as strictly needed for the security of the site, unless they are required to investigate an offence.

Rights of the data subject

Data subjects may at any time request access to their data, rectification, erasure, restriction of processing and portability, and may object to processing based on legitimate interest (Articles 15–22 GDPR). Consent to marketing communications can be withdrawn at any time, without affecting processing already carried out. Requests should be sent to info@moscaframe.com.

Anyone who believes that the processing of their data infringes the GDPR may lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

Cookies

The site uses technical cookies only: see the Cookie Policy for details.

Changes to this notice

This notice may be updated, for example if the services offered on the site change. The date of the latest update is shown at the top of the page.