Advanced Search


MAURIZIA SERRA SRL, headquartered in Via Salvini 10, Milan (Italy), Phone. 02 66661260, Mail:, Pec:
, Data Controller of personal data informs that, in accordance with current legislation, each operation concerning them will be based on the principles of lawfulness, fairness and transparency.
Pursuant to and for the purposes of article 13 of European Regulation n. 679/2016 (GDPR), the following information is provided.


The processing will concern the data provided directly by the interested party when completing the “Contact us” and “Entrust your property to us” forms, and in particular: name, surname, email address and telephone number, and will be carried out with electronic and paper methods to respond to requests for information and/or appointments made by the data subject.
With the express consent of the data subject, personal data may be processed for the sending of communications of an informative and commercial nature (so-called direct marketing) via newsletter


The legal basis that makes the processing legitimate, is the fulfillment of pre-contractual obligations at the request of the data subject.
Subscription to the newsletter will instead take place only with the express consent expressed by the data subject.


The collection of personal data for the purposes indicated above is optional, as the failure to collect data will respectively make it impossible to respond to requests made by completing the form, and to send informative and commercial communications, without any repercussions on the regular execution of any existing contractual relationship.


The processing will take place exclusively by the Data Controller, or in any case by authorized and specifically trained personnel. The data collected, if it is necessary or instrumental for the execution of the indicated purposes, may be processed by third parties appointed as external data processors, including companies that carry out services connected to the execution of the purposes indicated above (including: hosting of the site and companies’ newsletter management). The updated list of external data controllers can be consulted by contacting the data controller by email at
The data collected will not be transferred outside the EU.


Personal data will be stored only until the purpose of responding to the information requests submitted has been completed.
The data processed for direct marketing purposes will be processed until the consent is revoked, and in any case, for a maximum period of 5 years from the date of the relevant collection (to be understood as the period in which the interest in receiving informative communications and advertising communications is presumed to exist), unless the data subject expresses his desire to continue to receive the communications, even after this period.


Except in the cases referred to in article 23 concerning legal obligations, public interest or exercise of public powers, the data subject may exercise the rights provided by the articles 15-22 towards the data controller.

  • Confirmation as to whether or not personal data concerning you are being processed and, in this case, to obtain access right of access) art. 15;
  • the rectification of inaccurate personal data, or the integration of incomplete personal data (right of rectification) art.16;
  • the erasure of the data itself, if one of the reasons provided for by the Regulation exists (right to erasure) art.17;
  • the restriction of processing when one of the hypotheses provided for by the Regulation occurs (right to restriction of processing) art.18;
  • to receive the personal data you have provided to the owner in a structured, commonly used and machine-readable format and to transmit such data to another data controller (right to data portability) art.20.
  • object at any time to the processing of personal data (right to object) art.21.
  • the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you (Automated individual decision-making, including profiling) art. 22.

The exercise of rights is not subject to any formal constraints and is free.


In the event of a request by the data subject for information relating to his or her data to be made by email to the addresses indicated above, the Data Controller must proceed without delay – unless it proves impossible or involves a disproportionate effort – and, in any case, at the latest within 1 month of receiving the request. The deadline can be extended up to 3 months, if necessary, considering the complexity and number of requests received by the Data Controller. In such cases, the Data Controller will inform you within one month of receiving your request and inform you of the reasons for the extension.