PRIVACY
The Data Controller scrupulously respects the privacy of its customers and users of this Site. This page is intended to describe in a transparent, detailed and exhaustive manner the methods of management of the Site itself with reference to the processing of the personal data of users who consult it.
This information is provided in compliance with art. 13 of Legislative Decree no. 196/2003 (“Personal Data Protection Code”) and the provision of the Privacy Guarantor of 8 May 2014, with reference to the processing of personal data of users of the bbariosto26.it website (referred to as the “Site”) by the Data Controller.
On the other hand, this privacy policy does not refer to the services offered by third parties (which may be accessed through links on this Site) and their methods of processing the user’s personal data.
This information may be supplemented or modified in order to make it updated with respect to the legislation and/or adequate with respect to any technical changes made to the Site or any changes in the purposes or methods of data processing.
The Data Controller will inform you of any changes with appropriate notices, but we recommend that you check this page periodically to stay up to date. Any updated versions, which will bear the date on which the update was made, will be published promptly on this web page and will become effective immediately after publication.
***
- Data Controller
The Data Controller of the personal data collected through this Site is Stefano Bonato, with registered office in Via Ariosto 26 – 20017 Rho (MI), C.F. BNTSFN77L08H264P, e-Mail: stefano@bbariosto26.it
- Purpose of the processing
The personal data of the users of the Site will be used by the Data Controller for the purpose of providing services and to customize and continuously improve the use of the Site by the user. In the event that the user has not reached the age of 18 (eighteen), or is not in possession of the capacity to act, this Privacy Policy is addressed to the person in charge of this by the Italian law in force, who is the only person authorized to give the relevant express consent.
- Types of data subject to processing
The personal data that will be collected and processed by the Data Controller are those relating to any information provided by the user through the contact forms on the Site, any information provided during the registration of the newsletters, any use of social networks, as well as navigation data, including the so-called technical cookies, etc.
3.1 Data provided voluntarily
The data that the user provides voluntarily and freely by sending e-mails to the addresses indicated on the Site (or by filling in and sending the various forms on the site) will be acquired by the Data Controller.
In particular, in addition to the user’s e-mail address, which is necessary to reply, any other personal data to which the electronic communication refers or in any case contained in the e-mail message will be acquired.
These data will not be disseminated or communicated in any way to third parties with respect to the Data Controller’s organization, nor will they be used to define the profiles or personality of the data subject or for directly or indirectly commercial or advertising purposes and, in any case, will be kept exclusively for the purposes of storing correspondence.
3.2 Geolocation
While browsing the Site, the Owner may collect information about your device, including information about your location. The Data Controller may use this information to provide you with services and/or ads available in your geographical area, exclusively based on the settings of your device. You can deactivate the geolocation function at any time through your device’s settings.
For more information on how to disable this service on your device, we recommend that you contact your mobile service provider or device manufacturer.
- Methods of processing and scope of dissemination of personal data.
The personal data held for the purposes set out above are processed by the Data Controller, lawfully and fairly, through the predominantly use of automated or semi-automated tools. In any case, these data will not be disseminated or communicated in any way to external parties, without prejudice to the obligations provided for in this regard by law.
Unless otherwise specified in relation to the individual purposes of the processing as specified above, the personal data collected may be communicated to, or in any case come to the knowledge of, persons in charge and/or managers (including external) of the processing in relation to the skills and functions of each, in order to satisfy the aforementioned purposes or to implement specific regulatory and/or contractual obligations.
The personal data processed by the Data Controller are generally not disclosed to other subjects, except in the event that this is necessary in compliance with regulatory or contractual provisions or to fulfil specific obligations. In this case, the aforementioned data may, in particular, be brought to the attention of the following subjects or categories of subjects, to the extent that this is necessary for the fulfilment of regulatory and/or contractual obligations:
- internal and/or external consultants or partners for compliance with current legislation and/or for the execution of contractual services in relations with the individuals concerned (e.g. labour consultants, legal consultants, accountants, tax experts, auditors, etc.);
- judicial authorities or other public authorities, in compliance with the purposes specified above or for legal obligations.
- Optional nature of the provision of data and consequences of any refusal by the user.
Except in cases where the acquisition of data takes place automatically (as a result of the user’s simple navigation on the site (navigation data and technical cookies) – or in which the provision of data is necessary for the purpose of using the services that the user requests, the provision of any other personal data is entirely optional.
Failure to provide optional data does not entail any detrimental consequences for the user. Failure to provide the necessary data may make it impossible to use the services for which the provision of such data is necessary.
- Rights of the data subjects
Pursuant to art. 7 of Legislative Decree no. n. 196/2003, in his/her capacity as data subject, the user has the right to obtain information about:
- the existence or otherwise of personal data concerning him/her, their content and origin, as well as their communication in intelligible form; the purposes and methods of the processing and the logic applied in the processing carried out with the aid of electronic tools;
- the subjects or categories to whom the personal data may be communicated or who may become aware of them in their capacity as designated representative in the territory of the State, managers or persons in charge of the processing.
The user also has the right to obtain:
- the updating, rectification or, when interested, the integration of the data;
- the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;
- certification that the aforementioned operations have been brought to the attention, also with regard to their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfilment proves impossible or involves the use of means manifestly disproportionate to the right protected.
Finally, the user has the right to object, in whole or in part:
- for legitimate reasons, to the processing of personal data concerning him/her, even if pertinent to the purpose of the collection;
- to the processing of personal data concerning him/her for the purpose of sending advertising material or direct sales or for carrying out market research or commercial communication.
- How long do we store your personal data?
The Data Controller will keep the personal information of the user subscribed to the Newsletter for as long as this service remains active. The Data Controller will also retain the user’s additional personal information for as long as necessary to comply with the relevant legal obligations, resolve disputes and enforce the agreements concluded.
- Information
The above-mentioned rights may be exercised by the user at any time, by sending a simple request to the Data Controller by registered letter, fax or e-mail to the addresses indicated in the epigraph. The Data Controller will contact or inform the user as soon as possible and, in any case, within 15 (fifteen) days from the date of the request.
[end of document]