Privacy Policy

1. Data Controller

The Data Controller is CUIC – Corrieri Uniti In Cooperativa, with registered office at Via Mercalli 14, 20122 Milan (MI), VAT number and Tax Code 13164400965.

For any request regarding your personal data, you can contact the Data Controller via email at [email protected] or by phone at +39 329 813 8710.

2. Data Controller

For the provision of hosting services and for the development and maintenance of the web platform, the data is processed on behalf of the Data Controller by Master of Puppets Dev (VAT ID 13489650963), appointed as Data Processor pursuant to Art. 28 of the GDPR. The relevant appointment act is available upon request by contacting the Data Controller.

3. Personal data processed

Depending on your interaction with the site, we process the following categories of data:

• Contact and request data: name and surname, email address, phone number, company name and VAT number, provided voluntarily through the quote request or contact forms.
• Booking and delivery data: pickup and delivery addresses, shipment details (type, weight, quantity), and any logistics notes.
• Browsing data: IP address in anonymized form, device and browser type, pages visited, and statistical usage data, collected by the site's analysis systems.
• Account data: if you log in via the MOP authentication service, we process your email address and account identifier to link you to your orders and your reserved area.

4. Purposes and legal bases for processing

• Respond to quote and contact requests and execute the related pre-contractual measures (art. 6, par. 1, let. b, GDPR).
• Manage pickup and delivery bookings and send order-related communications, including confirmation emails and tracking links (art. 6, par. 1, let. b, GDPR).
• Comply with legal obligations, in particular tax and accounting obligations (Art. 6, par. 1, let. c, GDPR).
• Process statistics on site usage; for non-anonymous statistics, the legal basis is your consent (Art. 6, par. 1, let. a, GDPR).
• Ensure site security and prevent abuse and fraud, based on the Data Controller's legitimate interest (Art. 6, par. 1, let. f, GDPR).

5. Nature of the provision of data

The provision of data marked as mandatory in the forms is necessary to process your request or booking; failure to provide such data makes it impossible to fulfill the request. The provision of other data is optional.

6. Methods of processing and security

The data are processed using electronic tools and adequate technical and organizational measures are adopted to ensure their security, including the encryption of data in transit (TLS), access control, and the principle of data minimization. The data are not subject to automated decision-making or profiling processes.

7. Data recipients

The data may be communicated to the following categories of recipients, exclusively for the purposes indicated above:

• CUIC member workers and collaborators in charge of performing pickups and deliveries;
• the technical provider of the platform (Master of Puppets Dev), for hosting and maintenance activities;
• infrastructure and transactional email service providers, located in the European Union or otherwise bound by adequate contractual guarantees, appointed as Data Processors;
• competent authorities, where required by law.

The data is not disclosed, nor is it transferred or sold to third parties for marketing purposes.

8. Data transfer to third countries

The data is stored on servers located within the European Union. If the use of certain providers involves a transfer of data to third countries, such transfer takes place exclusively in the presence of an adequacy decision by the European Commission or appropriate safeguards, such as Standard Contractual Clauses (Art. 44-46 GDPR).

9. Retention period

• Contact and quote request data: stored for a maximum of 24 months from the last contact, unless deletion is requested earlier.
• Data relating to orders and deliveries: kept for the duration of the relationship and, for the fulfillment of tax and accounting obligations, up to 10 years.
• Statistical and browsing data: kept for the periods indicated in the cookies section.

10. Rights of the data subject

As a data subject, you have the right to obtain access to your personal data and their rectification or erasure, the restriction of processing, data portability and to object to the processing, as well as to withdraw your consent at any time, without prejudice to the lawfulness of the processing performed before the withdrawal (art. 15-22 GDPR).

To exercise these rights, you can write to [email protected] at any time.

11. Right to lodge a complaint

You also have the right to lodge a complaint with the Data Protection Authority (www.garanteprivacy.it) if you believe that the processing of your data violates current regulations.

12. Cookies

The site uses technical cookies necessary for its operation, including the «cookie_consent» cookie which stores your preferences for one year. Non-anonymous cookies and statistical technologies are activated only after consent, which can be expressed via the appropriate banner by selecting «Accept all». You can change your preferences at any time by deleting cookies from your browser.

13. Minors

The site and services are not intended for minors under 14 years of age. The Data Controller does not knowingly collect personal data of minors; should any such processing be detected, the data will be deleted.

14. Changes to this policy

The Data Controller reserves the right to update this policy to adapt it to regulatory changes or the services offered. The updated version will be published on this page, indicating the date of the last update.

Last update: July 12, 2026