Information document pursuant to and for the purposes of Article 13th UE Regulation 2016/679 - GDPR - (General Data Protection Regulation).

In compliance with the provisions of EU Reg. UE 2016/679 (General Data Protection Regulation) we provide you with the necessary information regarding the processing of your personal data here provided. The information is not to be considered valid for other websites that may be consulted through links present in websites under domain of the owner which is not to be considered in any way responsible for third parties websites.

This is information provided pursuant to art. 13th of the EU Reg. 2016/679 (European Regulation for the protection of personal data) and is also inspired by the provisions of the Authority for the protection of personal data on the 5th of may 2014 regarding cookies.

Treatable Personal Data definition

«Personal data»: any information concerning an identified or identifiable natural person («interested»); considered as identifiable is a physical person who can be identified, directly or indirectly, through a particular reference of identification such as her/his name, an identification number, location data, an online identifier or one or more specific elements of her/his physical identity, physiological, genetic, psychic, economic, cultural or social (such as, for example, name, surname, date of birth, address, e-mail, telephone number, etc.).

Navigation data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data that are implicit in the transmission protocols of Internet communications. This category of data includes IP addresses or domain names of computers and terminals used by users, the URI / URL (Uniform Resource Identifier / Locator) addresses of the requested resources, time of request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (success, error, etc.) and other parameters related to the operating system and to the user’s IT environment.

Data communicated by the interested party

The optional sending of messages, explicit and voluntary to the contact addresses, as well as the filling in and forwarding of the forms present on the website of the Owner, involves the acquisition of the contact details of the sender, necessary to respond, as well as all the personal data included in the communications.

Specific information

Specific information will be present in the Web Site pages, in relation to particular services or handling of the Data provided.


For more information about the cookies used by this website, please view the cookies policy at the following link.

1. Data Controller

HOLDER OF THE DATA TREATMENT, pursuant to Articles 4 and 24 of EU Reg. 2016/679 is: 2MILA S.r.l., with registered office in Via Zoncada n. 20, 26845 Codogno (LO), in the person of its legal representative pro-tempore. The contact details of the Owner are: Tel. +39 02 39449567, e-mail

2. Purpose, legal basis of data processing, period of data retention or criteria to determining the period

The personal data provided will be processed in compliance with the conditions of lawfulness pursuant to ex art. 6 of the EU Regulation 2016/679, for the purposes here below indicated.

The processing-handling will be carried out in an automated and manual way with methods and tools aimed to guarantee maximum security and confidentiality by persons authorized to do so.
In compliance with the provisions of Art. 5 paragraph 1, letter e) of the EU Reg. 2016/679 the personal data collected will be stored in a form that allows the identification of the subjects for a period of time to not exceed the achievement of the purposes for which the personal data are processed. The storage of the personal data provided depends on the purpose of the handling, as here below indicated.

Purpose A)

Website navigation

  • LEGAL BASIS: Legitimate interest Art. 6, letter f) and recital 47: the processing-handling is necessary for the pursuit of the legitimate interest of the responsible-owner of data treatment or  third parties, provided that this does not prevail on the interests or the fundamental rights and freedoms of the Subject that requires the protection of such personal data, taking into account the reasonable expectations nurtured by the Subject and his relationship with the data controller. Activities strictly necessary for the functioning of the website and the provision of the navigation service on the platform.
  • PERIOD OF DATA STORAGE: Up to the duration of the browsing session. For the navigation please see the cookie policy.

Possible completion of the form of data collection for contacts / self-candidatures

  • LEGAL BASIS: Based on the execution of pre-contractual measures also adopted on request of the interested party – Art. 6 c. 1, letter b) GDPR (General Data Protection Regulation).
  • PERIOD OF DATA STORAGE: 12 months from receipt of the request

Purpose B)

Direct marketing: prior to the consent and up to its opposition, for direct marketing activities of the Owner, market research, direct sales, surveys of satisfaction, sending of newsletters and promotions, commercial and advertising material or material concerning the Owner’s events and initiatives by automated means of electronic mail, fax, SMS, MMS or other types of messages, as well as through telephone calls by an operator, including automated and paper mail and other informative material.

  • LEGAL BASIS: Consent art. 6 par. 1, letter a): the interested party has given his consent to the processing of his personal data for one or more specific purposes
  • PERIOD OF DATA STORAGE: Until its opposition (opt-out)

3. Recipients or categories of the data recipients

The personal data provided will be shared with subjects who will process the data as data processors (art. 28 of EU Reg. 2016/679) and / or as natural persons that are acting under the authority of the Data Controller and the Data Supervisor (art. 29 of EU Reg. 2016/679), for the purposes listed above.

The data provided may be disclosed to third parties including: IT suppliers; professional groups  or companies in the context of assistance and consultancy relationships; competent authorities for the fulfillment of legal obligations and / or provisions of public bodies, upon request. The subjects belonging to the aforementioned categories perform the function of Data Processing Manager, or they operate in total autonomy as separate Data Controllers. The list of Data Responsible is constantly updated and available at the Owner’s offices and at the contacts listed above.

4. Data transfer to a third country

The personal data provided will not be transferred to countries outside the European Union. If this becomes necessary in order to comply with the contractual obligations and for the purposes indicated above, transfers outside the European Union will take place within the limits and under the conditions of art. 44 and following Regulation (EU) 2016/679. The interested party could obtain information about the guarantees provided by the Data Controller for data transfer by writing to the contacts listed above.

5. Nature of the conferment or refusal

Except as specified for navigation data (which are necessary in order to allow the navigation of the website), the user is free to provide his personal data.

The provision of data is optional or necessary depending on the specific purpose for which the data is processed. Failure to provide the data marked with the symbol * or wording (required) will make it impossible to obtain what has been requested or to use the services offered by the data controller. The provision of data for the purpose B) is optional and in the absence of it your data will not be processed for the pursuit of that purpose, the refusal to provide the data will not affect the use of the purposes referred to in point A).

6. Rights of interested parties

You can assert your rights as expressed in articles 15, 16, 17, 18, 19, 20, 21, 22 of the Regulation (EU) 2016/679, by contacting the Owner, through the contact details listed above. You have the right, at any time, to ask the Data Controller for access to your personal data, their correction and cancellation, the limitation of the processing and the portability of your data. If your personal data is processed for direct marketing purposes, you have the right to object at any time about the processing of your personal data for these purposes, including profiling to the extent of its relation to such direct marketing.

Without prejudice to any other administrative and judicial appeal, if you believe that the processing of your data violates the provisions of EU Reg. 2016/679, pursuant to art. 15, letter f) of the aforementioned EU Reg. 2016/679, you have the right to lodge a complaint with the Guarantor for the protection of personal data (Supervisory Authority

7. Modification of the privacy statement

The Owner reserves the right to modify, update, add or remove parts of this privacy statement at  discretion and at any time. In order to facilitate this verification, the information will contain the updated date.

Latest update: 05 / 08 / 2019