Privacy Policy
Information notice pursuant to art. 13 of the REGULATION (EU) 2016/679
In compliance with the provisions of Regulation (EU) 2016/679 (European Regulation for the protection of personal data; hereinafter "GDPR") we provide you with the necessary information regarding the processing of personal data provided. The information is provided pursuant to art. 13 GDPR and is not to be considered valid for other websites that may be consulted through links on this website in the domain of the Data Controller, which is not to be considered in any way responsible for the websites of third parties.
Processable personal data
Personal Data: any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (C26, C27, C30 GDPR).
Contracting / user data
Navigation data: Computer systems and software procedures used to the operation of this website acquire, during their normal operation, some personal data whose transmission is implicit in the internet communication protocols. This information is not collected to be associated with identified data subject, but by their nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of computers used by users who connect to the site, URI (Uniform Resource Identifier) of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the response from the server (successful, error, etc..) and other parameters regarding the operating system and computer environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site.
Personal data provided by data subjects The optional, explicit and voluntary sending of messages to the contact addresses indicated on this site and/or the filling in of data collection forms entails the subsequent acquisition of the sender's address, necessary to reply to requests, as well as any other personal data entered.
Information on the processing of personal data carried out through Social Media platforms
With regard to the processing of personal data carried out by the managers of the Social Media platforms used by the Controller, please refer to the information provided by them through their respective privacy policies. The Controller processes personal data provided by users through the pages of the dedicated Social Media platforms, in order to manage interactions with users (comments, public posts, etc.) and in compliance with the current law.
COOKIE POLICY
To have more information about the Cookies and other tracking system used by this website, please see the cookies policy in the footer of the site and at the following link.
1. DATA CONTROLLER
The Data Controller is Baleri Italia s.r.l., with its registered office in Piazza Risorgimento 7 – 20129 Milan (MI), in the person of its legal representative pro tempore. E-mail address: info@baleri-italia.com.
2. PURPOSES OF THE PROCESSING | LEGAL BASIS OF THE PROCESSING | DATA RETENTION | NATURE OF UNDERWRITING OF PERSONAL DATA
PURPOSES OF THE PROCESSING | LEGAL BASIS OF THE PROCESSING | DATA RETENTION | NATURE OF UNDERWRITING OF PERSONAL DATA |
|---|---|---|---|
WEBSITE BROWSING | Legitimate interest (art. 6, paragraph no. 1, lett. f), Recital no. 47 GDPR) data processing is necessary for the purposes of pursuing the legitimate interests of the data controller or a third party, provided that the interests or the fundamental rights and freedoms of the data subject which require the protection of personal data do not prevail, having regard to the reasonable expectations of the data subject based on his/her relationship with the data controller. Activities strictly necessary for the operation of the site and the provision of the navigation services. | Until the duration of the browsing session. See paragraph on cookies. | The provision of data is necessary for the browsing on the website. |
USE OF COOKIES AND SIMILAR TECHNOLOGIES | For necessary non-technical cookies and similar technologies, processing is based on consent to the processing of personal data (Art. 6 para. 1 lit. a and C42, C43 GDPR). Consent is given through the banner and cookie policy of the site | See the cookie policy in the footer of the site | see the cookie policy in the footer of the site |
AS well as for navigation, the data will be processed for the following purposes:
A) CONTACTS, sending contact requests, information | Execution of pre-contractual measures (art. 6, par. 1 lett. b GDPR). | 1 year | The provision of data is necessary. The non provision of personal data may result the impossibility to process your data for the present purpose |
B) DIRECT MARKETING: previous consent and until opposition, for direct marketing and promotional purposes, commercial and marketing communications through subscription to the newsletter/mailing list service. There will be no transfer of personal data | Consent (art. 6, par. no. 1 lett. a GDPR) | Until withdrawal of consent (opt-out) | Personal data provision is optional. The non-provision of personal data may result the impossibility to process your data for the present purpose, without prejudice for the other purposes |
C) REGISTRATION AREA, to access reserved contents. | Execution of a contract or pre-contractual measures (art. 6, par. 1 lett. b GDPR). | for 5 years | The provision of data is necessary. The non provision of personal data may result the impossibility to process your data for the present purpose |
D) MANAGEMENT OF YOUR REQUESTS and requests of other data subjects pursuant to art. 15 et seq. of the GDPR. | Processing is necessary for compliance with a legal obligation to which the controller is subject; (art. 6, par. 1 lett. c GDPR). | 5 years from the closing of the request, except in case of legal suits | The provision of data is mandatory as it is indispensable to be able to execute the obligations of the Law. |
E) RESPONDING TO REQUESTS made via chatbot (AINEA). | Execution of a contract or pre-contractual measures (art. 6, par. 1 lett. b GDPR). | Until the duration of the browsing session. | Personal data provision is optional. The non provision of personal data may result the impossibility to process your data for the present purpose |
5. RECIPIENTS OR CATEGORIES OF RECIPIENTS
Your personal data will be communicated to subjects who will process the data as Data Processor (art. 28 GDPR) and/or as individuals acting under the authority of the Data Controller and Data Processor (art. 29 GDPR), for the purposes listed above. In particular, the data may be communicated to recipients belonging to the following categories: Subjects that provide services for the website and communication networks, including e-mail, host and website management; Subjects that provide services for the management of the information system used by the Datra Controller and telecommunication networks; Subjects with whom the Data Controller has signed agreements and subject to prior consent, where applicable; Subjects for the management of direct marketing activities, with prior consent; Competent authorities for compliance with legal obligations and/or provisions of public bodies, upon request.
6. DATA TRANSFER TO THIRD COUNTRIES AND/OR INTERNATIONAL ORGANIZATION
Personal data will not be transferred to countries outside the E.E.A.
7. EXISTENCE OF AUTOMATED PROCESS.
We do not use decision-making processes based on automatic elaboration, including profiling.
8. DATA SUBJECT’S RIGHTS | COMPLAINT WITH THE DATA PROTECTION AUTHORITY
You may exercise your rights as expressed in Articles 15, 16, 17, 18, 19, 20, 21, 22 of the GDPR, by contacting the Data Controller at the email address : info@baleri-italia.com. You have the right, at any time, to request the data Controller to access, rectify, cancel your personal data or limit their processing and the right to the portability of your data. In addition, you have the right to object, at any time, to the processing of your data based on legitimate interest and, in the cases provided, you have the right to revoke the consent given without affecting the lawfulness of the processing based on the consent before revocation. To stop receiving automated direct marketing communications, it is always possible to write an e-mail at any time to: info@baleri-italia.com with subject "cancellation from automated" or use our automatic cancellation systems provided for e-mails only. Without prejudice to any other administrative and judicial remedy, if you believe that the processing of data concerning you violates the provisions of the GDPR, you have the right to lodge a complaint with the Italian Data Protection Authority (https://www.garanteprivacy.it/web/guest/home_en). In the case of a request for data portability, the Data Controller will provide you with the personal data concerning you in a structured, commonly used and machine-readable format, without prejudice to paragraphs 3 and 4 of Article 20 of Regulation (EU) 2016/679.
9. CHANGES OF THE PRIVACY POLICY - The Data Controller reserves the right to modify, update, add or remove portions of the current Privacy Policy at his discretion and at any time. For this reason, this privacy policy contains an indication of the last update.
Last update: 09/12/2024