Privacy Policy.

This Notice describes how Montesino processes personal data collected through the montesino.it website and in the course of professional relationships with clients, counterparties, and candidates. It is provided pursuant to art. 13 of EU Regulation 2016/679 (GDPR) and D.Lgs. 196/2003 (Italian Data Protection Code), as amended.

Data controller

Montesino — registered office at Via della Guastalla 5, 20122 Milano (Milan), Italy. Tax ID and VAT 12792910965. Email: privacy@montesino.it.

Types of data collected

Contact data — first name, last name, professional role, company name, email, phone, address. Collected when the user contacts Montesino through site channels or in the course of a professional relationship.

Transaction and mandate data — economic, financial, tax, contractual, and asset information necessary for the provision of advisory services. Processed with the client's consent and under professional secrecy.

Navigation data — information collected automatically through the site logging systems (IP addresses, browser type, operating system, pages visited). Processed in aggregate form for statistical and security purposes.

Candidate data — CVs and curricular information provided by candidates interested in positions at Montesino.

Purposes and legal basis of processing

Performance of a contract or pre-contractual measures (art. 6.1.b GDPR) — management of contact requests, execution of advisory mandates, evaluation of candidate applications.

Compliance with legal obligations (art. 6.1.c GDPR) — retention of accounting, tax, and anti-money-laundering records (D.Lgs. 231/2007, the Italian AML statute).

Legitimate interest of the Controller (art. 6.1.f GDPR) — site security, fraud prevention, management of professional relationships, periodic informational communications to clients and counterparties already in a relationship with the company.

Consent (art. 6.1.a GDPR) — where specifically required, for example for the sending of commercial communications or newsletters.

Processing methods

Data is processed by IT and manual means, with technical and organizational security measures adequate to ensure a level of protection consistent with the risks of processing, in compliance with art. 32 GDPR. Access to data is limited to authorized personnel and to external consultants bound by confidentiality agreements.

Communication and transfer of data

Data may be communicated to third parties appointed as Data Processors under art. 28 GDPR (cloud and hosting service providers, accounting, tax, and legal consultants, banks and financial institutions, public authorities when required by law). Data is not disclosed to the public nor transferred to third parties for marketing purposes.

Any transfers of data outside the European Economic Area occur only to countries that guarantee an adequate level of protection, on the basis of European Commission Adequacy Decisions or Standard Contractual Clauses (SCC).

Retention periods

Data is retained for the time strictly necessary to pursue the purposes for which it was collected and, in any case, in compliance with the terms provided by applicable law (10 years for accounting and tax documentation, 10 years for anti-money-laundering records, duration of the professional relationship for mandate-related data). Data of non-selected candidates is retained for a maximum of 24 months, save explicit consent to extended retention.

Rights of the data subject

At any time, the data subject may exercise the rights provided by arts. 15-22 GDPR with respect to the Controller — right of access, rectification, erasure, restriction of processing, portability, objection, and the right not to be subject to automated decisions. Requests may be sent to privacy@montesino.it.

The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) if they consider that the processing of their data violates applicable law.

Updates

This notice may be modified to adapt to regulatory developments or to changes in the services offered. The current version is always the one published on this page, with the date of last update indicated.

Last update: April 2026 — Montesino — Tax ID and VAT 12792910965 — Via della Guastalla 5, 20122 Milano (Milan), Italy