Privacy policy.
This Privacy Policy explains how NMC Consulting collects, uses, protects and manages personal data when you visit our website or contact us about Salesforce, Marketing Cloud and IT consulting services.
NMC Consulting provides Salesforce, Salesforce Marketing Cloud, Data Cloud and marketing-technology consulting services. We treat privacy and information security as part of a well-designed technical architecture — not as an afterthought.
Joint Controllers
Who is responsible for your data?
NMC Consulting is a professional collaboration operated by two independent professionals. In relation to personal data collected through this website and requests for consulting services, the professionals listed below act as joint controllers.
The joint controllers have defined their respective responsibilities for compliance with applicable data-protection law. You may exercise your privacy rights through info@nmcconsulting.it.
Data categories
Data we may collect
We collect only the personal data necessary to respond to your request, arrange a consultation and operate this website securely.
Contact form data
When you submit the contact form, we collect your name, email address, company name, telephone number and the information you provide about your goals or project requirements.
Technical & security data
Our website and security tools may process technical information, including IP address, browser and device data, log information and data needed to protect the website against spam or abuse.
Cookie preferences
CookieYes records your consent choices in relation to cookies and similar technologies used on this website.
Please do not submit special-category personal data, credentials, API keys, production exports or other confidential customer data through the website contact form.
Processing purposes
How we use personal data
Respond to your request
To review your enquiry, contact you, answer questions and arrange an introductory call or consultation.
Assess a potential engagement
To understand your Salesforce, Marketing Cloud or technology needs, prepare proposals and determine whether our services are suitable.
Operate the website securely
To maintain the website, prevent spam and abuse, diagnose technical problems and protect our infrastructure.
Meet legal obligations
To comply with legal, tax, accounting, contractual or security obligations where applicable.
GDPR Article 6
Our legal bases
Depending on the context, we process personal data on one or more of the following legal bases.
- Pre-contractual steps: to respond to your request and take steps at your request before potentially entering into a service agreement.
- Legitimate interests: to operate and secure our website, manage professional enquiries, prevent spam and protect our business and systems.
- Legal obligations: where processing or retention is required by applicable law.
- Consent: for non-essential cookies or similar technologies, where consent is required.
Sharing & infrastructure
Who may process your data?
We do not sell personal data. We may use carefully selected providers that support the operation of this website and the handling of enquiries.
Some providers may process data outside the European Economic Area. Where required, appropriate safeguards may include an adequacy decision or standard contractual clauses, subject to the relevant provider’s applicable terms.
Data lifecycle
How long we retain data
We retain personal data only for as long as necessary for the purpose for which it was collected, including legal, accounting, tax, security and contractual requirements.
Your control
Your privacy rights
If the GDPR applies to you, you may have the right to request access, correction, deletion, restriction, objection, portability and withdrawal of consent where processing is based on consent.
To exercise your rights, write to info@nmcconsulting.it. We may need to verify your identity before responding.
You may also lodge a complaint with the competent supervisory authority, including the Italian Data Protection Authority (Garante per la protezione dei dati personali), if you believe your rights have been infringed.
Security practices
How we protect information
We use technical and organisational measures appropriate to the nature of the information and the services being provided. These measures may include access controls, least-privilege practices, secure authentication, contractual confidentiality obligations and controlled delivery processes.
Access control
Access is limited to people who need it for a legitimate business purpose.
Secure delivery
Client work is performed through approved environments and agreed access channels.
Data minimisation
We seek to use only the information necessary to perform the requested work.
Cookies & similar technologies
How cookies are used
This website uses essential cookies required for core website functions, security and performance. CookieYes is used to manage consent preferences. Non-essential cookies or similar technologies, if added in the future, will be activated only after consent where required by applicable law.
Google reCAPTCHA is used to protect the contact form from spam and automated abuse. reCAPTCHA may process technical, device and interaction information in accordance with Google’s applicable privacy terms.
Contact
Questions about privacy?
If you have a privacy question, a data-subject request or a security concern related to our website, contact us directly.