Privacy and cookie policy
How MAS Consulting processes the personal data of those who visit the site and contact us, and how cookies are used.
Last updated: 29 October 2026
Data controller
The data controller is MAS Consulting S.r.l., VAT no. 03108610134, with offices at Via Antonio Ghislanzoni 20, 23900 Lecco (LC), Italia (PoliHub, Politecnico di Milano). For any request about your personal data you can write to welcome@mas-co.it. MAS Consulting is part of the Terranova group.
Data we process
- Browsing data: IP address, browser type, pages visited and time of the request, collected by the servers that host the site for security and proper operation.
- Data you provide through the contact and demo request forms: name, surname, company, role, business e-mail, telephone (optional), products of interest, profiling answers (type of operator, size, systems in use, timing) and the text of your message.
- Cookies and similar technologies, as described in the cookie section below.
We do not ask for special categories of data. Please do not include them in free-text fields.
Purposes and legal basis
| Purpose | Legal basis | Retention |
|---|---|---|
| Replying to contact and demo requests, organising meetings and demos | Pre-contractual measures taken at your request (art. 6.1.b GDPR) | 24 months from the last contact, unless a contract follows |
| Sending updates on products, events and regulation (newsletter) | Consent, given by ticking the optional box (art. 6.1.a) | Until consent is withdrawn |
| Site security and prevention of abuse | Legitimate interest (art. 6.1.f) | Server logs: up to 6 months |
| Statistics on site use | Consent through the cookie banner (art. 6.1.a) | See cookie table |
| Measuring marketing campaigns | Consent through the cookie banner (art. 6.1.a) | See cookie table |
| Fulfilling legal obligations and defending rights | Legal obligation and legitimate interest (art. 6.1.c and f) | For the time required by law |
Providing the data marked as mandatory in the forms is necessary to reply to you. Everything else is optional.
Who processes the data
Data is processed by authorised MAS Consulting staff and by suppliers acting as data processors under art. 28 GDPR, including:
- the hosting provider of the website;
- HubSpot Inc., CRM in which contact requests are recorded;
- Google Ireland Ltd, for statistics (only with consent);
- LinkedIn Ireland, for campaign measurement (only with consent);
- Esri, which provides the map on the contact page (loaded only if you allow external content).
Data may be shared with companies of the Terranova group for organisational purposes linked to your request. It is not sold or disclosed to third parties for their own marketing.
Transfers outside the EU
Some suppliers (Google, HubSpot, LinkedIn, Esri) belong to groups based in the United States. Where data is transferred outside the European Economic Area, this takes place on the basis of the EU–US Data Privacy Framework adequacy decision or the European Commission's standard contractual clauses.
Your rights
You can ask at any time for access to your data, rectification, erasure, restriction of processing, portability and you can object to processing based on legitimate interest (articles 15–22 GDPR). Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing; for newsletters, use the link in each e-mail. Write to welcome@mas-co.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
Cookie policy
Cookies are small text files that the site stores on your device. We use:
- Necessary cookies, always active: they make the site work and remember your choices. They do not require consent.
- Statistics cookies: they help us understand how the site is used, in aggregate form. Active only with consent.
- Marketing cookies: they measure the effectiveness of our campaigns. Active only with consent.
- External content: the map on the contact page is provided by Esri and is loaded only if you allow it.
On your first visit a banner lets you accept all, reject all or choose by category. Closing the banner with the × keeps only the necessary cookies. You can change your choice at any time from , also linked in the footer of every page. Fonts are hosted on our own server: no visitor data is sent to third parties to display them.
| Cookie | Provider | Category | Purpose | Duration |
|---|---|---|---|---|
mas_cc | MAS Consulting (first party) | Necessary | Stores the cookie choices made in the banner | 6 months |
PHPSESSID | MAS Consulting (first party) | Necessary | Technical session for the secure submission of forms, if enabled by the server | Session |
_ga, _ga_* | Google Ireland Ltd (Google Analytics 4) | Statistics | Aggregate measurement of visits, only with consent | 13 months |
hubspotutk, __hstc, __hssc | HubSpot Inc. | Marketing | Links visits to contacts who submit a form, only with consent | Up to 13 months |
li_sugr, bcookie, lidc | LinkedIn Ireland | Marketing | Measurement of LinkedIn campaigns (Insight Tag), only with consent | Up to 6 months |
