LEGAL INFORMATION
Galaxy M63 srl
Via Moriggia, 3
I-20900 Monza (MB)
VAT number 06682010969
galaxym63@registerpec.it
Fully paid-in capital € 25.000,00
REA MB-1863599
Ref. Italian Law 4/2013

1. Data Controller Identification
This privacy notice is issued by Galaxy M63 srl (Via Moriggia 3, 20900 Monza – MB, VAT no. 06682010969), represented by its legal representative Elvezia Sironi, who can be contacted at dataprotection@galaxym63.com.
A Data Protection Officer (DPO) has not been appointed, as the conditions set out in Article 37 of the GDPR do not apply.

2. Purpose and Legal Basis of Data Processing
Galaxy M63 collects and uses personal data for the following purposes:
- operational management and response to service requests or inquiries (Art. 6(1)(b) GDPR);
- compliance with legal, fiscal, or administrative obligations (Art. 6(1)(c) GDPR);
- communication or marketing initiatives, only with explicit consent (Art. 6(1)(a) GDPR).
Providing personal data is necessary for contractual purposes: failure to provide such data may prevent the provision of services or the response to inquiries.

3. Data Processing Methods and Security
Data is processed using manual, electronic, and digital tools, with technical and organizational measures in place in accordance with Article 32 of the GDPR, ensuring the confidentiality, integrity, and availability of the information.

4. Data Retention Period
Personal data will be retained:
- for the time necessary to carry out the requested activities;
- according to the timeframes established by law (e.g., tax obligations);
- for a longer period if consent has been given for marketing communications, until such consent is revoked.

5. Data Recipients
Data may be disclosed to:
- external consultants, technical partners, or IT service providers as necessary for operations;
- administrative authorities or public bodies, only when required by law.
Data will not be transferred to third parties for purposes other than those stated.

6. International Data Transfers
For technical or organizational reasons, some data may be transferred outside the EEA, including to the United States (e.g., through CRM tools or external cloud platforms).
Such transfers occur only if:
- covered by an adequacy decision of the European Commission (e.g., EU-U.S. Data Privacy Framework), or
- protected by approved Standard Contractual Clauses (SCCs), or
- supported by other appropriate safeguards in compliance with Articles 44–49 of the GDPR.

7. Data Subject Rights
Under the GDPR (Articles 15–22), data subjects have the following rights:
- access, rectification, erasure, restriction of processing, objection;
- data portability;
- withdrawal of consent (with effect only for the future).
Requests can be sent to dataprotection@galaxym63.com, either in writing or electronically. A complaint can also be submitted to the Italian Data Protection Authority (www.garanteprivacy.it).

8. Use of Cookies and Tracking Technologies
This website uses technical and analytics cookies to ensure security and functionality.
Profiling or third-party cookies are used only with the user's explicit consent.
For more detailed information, please refer to the dedicated Cookie Policy.

9. Policy Updates
Galaxy M63 reserves the right to update this privacy notice at any time. Users are advised to review it regularly to stay informed about any updates or changes.