Privacy policy
MBNF supply customer portal (mbnf.supply) · updated 14 October 2026
Who processes the data
Controller: MBNF SRL, Via Sofia 1, 47924 Rimini (RN), Italy — VAT IT04697970400. For any request: [email protected].
What data
- Account: company, full name, email, phone (optional), country, VAT number and the result of its check in the EU VIES register.
- Sign-in: we only keep an irreversible hash of your password (Argon2id): nobody, not even MBNF, can read it. For passkeys we only keep the public key. For two-step verification, the secret used to generate the codes. If you sign in with Google or Apple, we receive your account identifier, email and name from them.
- Requests and offers you send from the portal or through the API.
- Technical data: IP address and time of sign-in attempts, for security (blocking repeated attempts), kept for 30 days.
Why and on what basis
- Managing your B2B account, showing you availability and prices, answering requests and offers: pre-contractual measures and contract (Art. 6(1)(b) GDPR).
- Protecting accounts and the service: legitimate interest (Art. 6(1)(f)).
- Tax documents for orders (proformas, invoices): legal obligation (Art. 6(1)(c)).
We do not use the data for advertising, we do not sell it and we do not profile you.
Who receives it
Only the providers we need to run the portal, as processors: Fly.io (servers, in Europe), Cloudflare (network and protection), Resend (sending emails), Discord (internal MBNF alerts about new sign-ups, requests and offers); Google or Apple if you choose to sign in with them; the European Commission for the VIES VAT check; Have I Been Pwned, which only receives the first 5 characters of a hash of the chosen password (never the password) to check it is not among stolen ones. Some of these providers are based in the United States: transfers rely on the safeguards provided by the GDPR (EU-US Data Privacy Framework or standard contractual clauses).
How long
As long as your account is active. From Account → «Delete account» you immediately delete your account, cart, requests and passkeys from the portal. Any tax documents issued are kept for the period required by law (10 years).
Cookies
Only strictly necessary technical cookies (your sign-in session and language) and, in your browser, your theme choice. No profiling or third-party cookies.
Your rights
You can request access, rectification, erasure, restriction, portability and object to processing by writing to [email protected]. You can also lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or your local authority.