Privacy and Cookie Policy

Last updated: 1 October 2026

1. Data controller

I am the data controller: Maria Antonietta Principalli (MM Science Studio). You can write to me at info@mmsciencestudio.com.

2. What data I process

• Contact form and email: your name, email address and the content of the message you send me.

• Browsing data: the website provider processes technical data, such as your IP address and server logs, to run and protect the site. If you accept the platform analytics cookies, the provider produces aggregated statistics (number of views and country of origin), which I look at without identifying individual visitors.

3. Why I use your data and on what legal basis

• Replying to your enquiry and preparing a quote: Art. 6(1)(b) GDPR, steps taken at your request before entering into a contract.

• Carrying out the assignment, if one follows: Art. 6(1)(b) GDPR, performance of a contract.

• Meeting tax and accounting obligations: Art. 6(1)(c) GDPR, legal obligation.

• Keeping the site secure and working: Art. 6(1)(f) GDPR, legitimate interests.

I do not use your data for marketing or profiling, and I do not make decisions based on automated processing.

4. How long I keep it

Messages and emails from people who do not become clients are deleted 12 months after I receive them. If an enquiry leads to an assignment, I keep the data needed for the relationship, and tax and accounting records, for the period required by law (generally 10 years for accounting documents). Technical data is kept for the periods set by the website provider.

5. Who I share data with

I do not sell or publish your data. It is processed on my behalf by Hostinger, which provides the website, the contact form and email, as a data processor. For usage statistics, which are enabled only with your consent, Hostinger relies on the analytics service Amplitude and acts for its own purposes (improving the user experience and its own products): in that case it processes data under its own privacy policy. I may share it with professionals who help me with tax and accounting, only if an assignment arises.

6. Transfers outside the European Economic Area

The provider may process data outside the European Economic Area; Amplitude, the analytics service it uses, is a US company. Transfers rely on the safeguards provided by the GDPR, such as adequacy decisions or standard contractual clauses.

7. Your rights

You can ask me for access to your data, rectification, erasure, restriction of processing and portability, and you can object to processing (Articles 15-22 GDPR). Write to info@mmsciencestudio.com and I will reply within one month. You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority in your own country.

8. Providing your data

Providing your data is optional, but without your name and email I cannot reply to your enquiry.

9. Cookies

This site uses technical cookies, which are necessary for it to work and to keep it secure and do not require consent. With your consent it also uses a platform analytics cookie, which provides aggregated statistics on visits (views and country of origin). It does not use marketing or profiling cookies. In the banner you can accept all, reject all or choose categories, and you can change your choices at any time. You can also delete cookies in your browser settings. The analytics service is Amplitude, used through Hostinger: it collects usage data that does not directly identify you and is switched on only if you accept it.

10. Links to external sites

The site links to Instagram, LinkedIn and Substack. These are third-party services with their own privacy policies. Gating, my newsletter, is hosted on Substack, which processes subscribers' data as an independent controller: https://substack.com/privacy.

11. Changes

I may update this policy. The date at the top shows the latest version.