Privacy Policy

Data Controller

The data controller responsible for your personal data is MSZT Capital, registered at Via Garbino 18, 09126 Cagliari (CA), Italy. For any privacy-related inquiries, you may contact our Data Protection Officer (DPO), Mattia Stefano Zucca, at mattia@msztcapital.com.

Data We Collect

We collect personal data that you provide directly, as well as data generated through your use of our services. This may include:

Identity data: first name, last name, username, or similar identifiers
Contact data: email address, phone number, billing and delivery addresses
Technical data: IP address, browser type and version, time zone, operating system, device identifiers, and cookies
Usage data: information about how you use our website, products, and services
Transaction data: details of purchases and payments made through our platform
Communications data: your preferences in receiving marketing communications and your communication preferences

We do not knowingly collect data from individuals under the age of 16. If you believe we have inadvertently collected such data, please contact us immediately.

Legal Basis for Processing

We process your personal data only where we have a valid legal basis. The applicable bases include:

Consent: where you have given clear consent for a specific purpose
Contract performance: where processing is necessary to fulfill a contract with you
Legal obligation: where we must comply with applicable laws or regulations
Legitimate interests: where processing is necessary for our legitimate business interests, provided these are not overridden by your rights

How We Use Your Data

We use your personal data for the following purposes:

To register you as a user and manage your account
To process and deliver orders, including managing payments and collections
To manage our relationship with you, including notifying you of changes to our terms or policy
To personalize your experience and deliver relevant content
To send marketing communications, where you have consented or where permitted by law
To administer and protect our business and website, including troubleshooting, data analysis, and system testing
To comply with legal and regulatory obligations

Data Sharing and Third Parties

We do not sell your personal data. We may share your data with carefully selected third parties in the following circumstances:

Service providers: companies that provide IT, payment processing, customer support, or other services on our behalf, bound by data processing agreements
Professional advisors: lawyers, auditors, and consultants under professional secrecy obligations
Regulators and authorities: where we are legally required to disclose data
Business transfers: in the event of a merger, acquisition, or sale of assets

Where we transfer data outside the European Economic Area (EEA), we ensure adequate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process your data, and applicable legal requirements. When your data is no longer needed, it is securely deleted or anonymized.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance functionality, analyze usage patterns, and deliver relevant advertising where applicable. Cookies are small text files stored on your device. You can control the use of cookies through your browser settings or by responding to our cookie consent banner.

We use the following types of cookies: strictly necessary cookies (required for the website to function), performance cookies (to analyze how visitors use our site), functional cookies (to remember your preferences), and targeting cookies (to deliver personalized content, used only with your consent).

Your Rights

Under the GDPR and applicable data protection laws, you have the following rights regarding your personal data:

Right of Access: request a copy of the personal data we hold about you
Right to Rectification: request correction of inaccurate or incomplete data
Right to Erasure: request deletion of your personal data (“right to be forgotten”)
Right to Restriction: request that we limit the processing of your data in certain circumstances
Right to Data Portability: receive your data in a structured, machine-readable format
Right to Object: object to processing based on legitimate interests or for direct marketing purposes
Rights related to automated decision-making: not to be subject to solely automated decisions that significantly affect you

To exercise any of these rights, please use the Data Management Request form at the top of this page, or contact us at mattia@msztcapital.com. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority.

Data Security

We have implemented appropriate technical and organizational security measures to prevent your personal data from being accidentally lost, used, accessed, altered, or disclosed without authorization. Access to your data is limited to employees, contractors, and third parties who have a business need to know. All parties are subject to a duty of confidentiality.

We have procedures in place to deal with suspected personal data breaches and will notify you and applicable regulators where legally required.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically. Where changes are material, we will notify you by email or by a prominent notice on our website prior to the changes becoming effective.