PRIVACY POLICY

1. Data controller

Borciani e Bonazzi S.r.l. con Unico Socio registered office in via Ezio Vanoni, 37/A, 26041 Casalmaggiore (CR), tax payer’s and VAT code 01904130356, hereinafter referred to as “Data Controller”, provides for the compliance with the personal data protection providing information according to the data processing pursuant to art. 13 of the EU regulation 2016/679 (General Data Protection Regulation – GDPR) and following changes.
 

2. Processed data, scopes and legal grounds for data processing

2.1 Data collected automatically with access to the site

The computer systems and software procedures used to operate the Site may acquire in an automated manner, during their normal operation, some information (domain names, IP address, operating system used, type of browser and device parameters used to connect to the Site, web page of origin of the User and exit) whose transmission is implicit in the use of Internet communication protocols.

The data are processed in an automated form and collected in aggregate form in order to verify the correct functioning of the Site. They can also be used by security systems (spam filters, firewalls, virus detection) to block attempts to damage the Site or other Users, or in any case harmful activities or constituting a crime. These data are never used for the identification or profiling of the User, but only for the purpose of protecting the site and its Users. The legal basis of the processing is the legitimate interest of the Data Controller.

2.2 Cookies

The Site uses cookies, small text files installed on the User's device that allow the operation of the site, collect statistical information or customize the user's browsing experience. The Site uses the following categories of cookies. a. necessary cookies: they make the Site usable by enabling basic features, such as navigation on pages and access to protected areas; the Site is not able to function properly without these cookies. b. statistical cookies: help the Data Controller to understand how Users interact with the Site by collecting and transmitting information anonymously c. marketing cookies: they are installed only with the consent of the User and track its activity on the Site to present relevant and engaging advertisements. Some of the cookies used by the Site are provided by third parties, for example • Google statistical cookies, which collect anonymous browsing data (IP addresses truncated to the last octet) and exclusively aggregated for the purpose of examining the use of the site by users, compiling reports on site activities and providing other information, including the number of visitors and visited pages. •  Facebook and YouTube marketing cookies, which collect navigation data on the Site by Users in order to provide personalized advertising products. These cookies are not managed by the Owner. Information on their operation can be obtained directly from third parties (Google, YouTube, Facebook, Instagram, PayPal) The installation of cookies can be disabled by the settings of the browser used by the User (Google Chrome, Mozilla Firefox, Microsoft Edge, Opera, Apple Safari), however disabling cookies may prevent the proper functioning of the Site.

2.3 Data provided voluntarily by the User

The personal data provided by the User through forms (name, surname, tax code, VAT number, addresses, phone numbers and e-mail, username and password, wishlist, payment instruments) are processed for the purposes andon the legal bases indicated below.

Purposes

Legal Basis

a. carrying out the activities of relationship with the User, account management, processing of orders and shipments, payments

·  execution of a contract of which the User is a party or of pre-contractual measures adopted at the request of the same



b. administrative purposes and the fulfillment of legal obligations (for example of an accounting and tax nature)

·  execution of a contract of which the User is a party or of pre-contractual measures adopted at the request of the same



·  legal obligation to which the Data Controller is subject

c. periodic sending, by e-mail, of newsletters regarding updates on the activities of the Data Controller and product development information, invitations to events, fairs, training courses, webinars, special promotions and the invitation to participate in market analysis and research

·  consent freely provided by the User



d. sending by e-mail commercial communications relating to products already purchased or similar to them (so-called "soft-spam")

·  legitimate interest of the Data Controller

 

2.4 Data collected through the newsletter and commercial communications

To send newsletter and commercial communications, the Data Controller uses the MailChimp platform which, through statistical tracking systems (for example web beacons, pixel identifiers, etc.) contained in e-mails, allows to detect the opening of a message, the clicks made on the hyperlinks contained within the email, the IP address or the type of browser opening the e-mail,  and other similar details. The collection of such data is functional to the use of the platform and is an integral part of the functionality of the message sending system. The processing is aimed at improving the services offered by the Data Controller and marketing activities. The legal basis of the processing is the consent of the interested party. Further information on the processing of personal data by MailChimp can be found at this link.

2.5 Data provided via Facebook page

The Data Controller has no control over the processing of personal data carried out by Facebook when Users visit their Facebook page. The Data Controller has access to some statistical information relating to its Facebook page that does not allow Users to be identified. By interacting with the Facebook page of the Data Controller or by sending messages via Facebook, the User communicates to the Data Controller the personal data that he shares according to the preferences set for the use of Facebook (for example name and surname, pseudonym, profile picture, date and place of birth, personal photographs, statuses) or that he communicates to the Data Controller via chat (including those contained in any multimedia files such as photos,  video or audio messages.

2.6 Data provided via WhatsApp

Chat customer service is offered via the WhatsApp messaging service, which can be used via web application (browser), mobile or desktop. The use of the messaging service takes place according to the conditions governing the relationship between WhatsApp and the User, from which the Owner remains extraneous.

By using the customer service via chat, the User communicates to the Owner his mobile phone number as well as the additional personal data that shares according to the preferences set for the use of WhatsApp (for example name and surname, pseudonym, last access, profile picture, presentation phrase, status, etc.) or that he communicates to the Owner via chat (including those contained in any multimedia files such as photos,  video or audio messages.

The Data Controller processes the aforementioned data to the extent that this is necessary to follow up on the User's requests. The legal basis of the processing is the execution of a contract of which the User is a party or of pre-contractual measures adopted at the request of the same.

Further information on the processing of personal data by WhatsApp can be found at this link. https://www.whatsapp.com/legal/privacy-policy-eea/?lang=EN

3. Nature of the provision

 

Apart from that specified in point 2, the refusal to provide personal data:

 

a. with respect to the purposes referred to in point 2.2 lett. a), b) makes it impossible for the Owner to conclude contracts with the User or to implement the contractual commitments undertaken;

b. with respect to the purposes referred to in point 2.3 lett. c) prevents the Data Controller from sending newsletters and advertising material or invitations to events and initiatives of the Data Controller;

c. with respect to the purposes referred to in point 2.3 lett. d) makes it impossible for the Data Controller to send e-mails relating to products already purchased or similar.

 

4. Processing methods and data retention times

The Data Controller processes the personal data of Users in compliance with the principles of correctness, lawfulness, purpose, quality, relevance, proportionality and transparency, using electronic tools, including automated ones. The processing of the collected data is carried out by internal staff of the Data Controller identified, instructed and authorized to process.

The data collected with navigation, used for security purposes, are kept for 5 years.

The data are kept for the strictly necessary time for the management of the purposes for which the data are processed or in compliance with the conservation obligations established by law.

The Data Controller periodically checks the need to continue to store Users' personal data in relation to the purposes for which they were collected and adopts measures that limit the storage time and prevent indefinite storage.

 

5. Communication of data

 

The processing of the collected data is carried out by internal staff of the Data Controller identified and authorized for this purpose according to specific instructions given in compliance with current legislation.

The data collected, within the limits relevant to the processing purposes indicated and if it is necessary or instrumental for the execution of the purposes themselves, may be processed by third parties appointed as external data processors, or, depending on the case, communicated to them as independent data controllers, namely: companies belonging to our corporate group for the purposes referred to in point 2.3 lett. a), b) and e); people, companies, associations or professional firms that provide assistance and advice to our Company, for the purposes referred to in point 2.3 lett. b) and e); companies, entities, associations that perform services connected and instrumental to the execution of the aforementioned purposes (market analysis and research service, payments management by credit card, maintenance of IT systems).

The data collected may be provided in case of legitimate request, only in the cases provided for by law, by the Judicial Authority.

Under no circumstances and for no reason your data would be disclosed in any way.

The Data Processors and people in charge of the processing in office are punctually identified in the Privacy Document, periodically updated.

6. Data transfer to non-EU countries

The data processed through the MailChimp platform may be transferred outside the European Union. The transfer shall take place ensuring an adequate level of protection in accordance with Commission Implementing Decision (EU) 2021/914. Further information on the guarantees adopted can be found at this link.

Data processed through third-party cookies may also be transferred outside the European Union. Information on the guarantees adopted can be obtained directly from third parties (Google, YouTube, Facebook, Instagram, PayPal).

 

7. User’s rights

The User always has the right to request from the Data Controller access to your data, the correction or cancellation of the same, the limitation of processing or the possibility to oppose the processing, to request data portability, to revoke consent to processing by asserting these and other rights provided for by EU Regulation 2016/679 (General Data Protection Regulation – GDPR) by sending an e-mail to privacy@borcianiebonazzi.it

The User may also lodge a complaint with the competent supervisory authority.

 

 

 

 

 

Supplier privacy policy

1. Data controller

Borciani e Bonazzi S.r.l. with Sole Shareholder with registered office in via Ezio Vanoni, 37/A, 26041 Casalmaggiore (CR), C.F. e P.I. 01904130356, hereinafter referred to as "Data Controller", guarantees compliance with the regulations on the protection of personal data by providing the following information about the processing of data pursuant to art. 13, EU Regulation 2016/679 (General Data Protection Regulation – GDPR) and subsequent amendments.

 

2. Data processed, purposes and legal bases of processing

Personal data are collected and processed for the following purposes:

a.for the performance of relations with the interested party on the basis of pre-contractual and contractual agreements;

b.for administrative purposes and for the fulfillment of legal obligations such as those of an accounting, tax, or to process requests from the judicial authority;

The legal basis that legitimizes the processing is the execution of a contract of which the interested party is a party or the execution of pre-contractual measures adopted at the request of the same as well as the legal obligation.

3. Nature of the provision

The provision of data with respect to the aforementioned purposes is mandatory due to legal and contractual obligations and therefore any refusal to provide them in whole or in part may make it impossible for the Data Controller to execute the contract or to correctly perform the obligations (eg. fiscal nature ones) connected.

4. Places and methods of processing and data retention times

The data collected by the site are processed at the headquarters of the Data Controller.

The data collected will be processed using electronic or automated, computerized and telematic tools, or through manual processing with logic strictly related to the purposes for which the personal data were collected and, in any case, in order to guarantee in any case the security of the same. The data are kept for the time strictly necessary for the management of the purposes for which the data are processed ("conservation limitation principle", art.5, EU Regulation 2016/679) or in compliance with the deadlines established by current regulations and legal obligations. The verification of the obsolescence of the data stored in relation to the purposes for which they were collected is carried out periodically. In any case, the Data Controller practices rules that prevent the retention of data indefinitely and therefore limits the storage time in compliance with the principle of minimization of data processing.

5. Subjects authorized to process, managers and communication of data

The processing of the collected data is carried out by internal staff of the Data Controller identified and authorized for this purpose according to specific instructions given in compliance with current legislation. The data collected, within the limits relevant to the processing purposes indicated and if it is necessary or instrumental for the execution of the purposes themselves, may be processed by third parties appointed as Data Processors, or, depending on the case, communicated to all the subjects necessary for the correct fulfillment of the purposes set out in point 2. The data collected may be provided in case of legitimate request, only in the cases provided for by law, by the Judicial Authority.

Under no circumstances and for no reason your data would be disclosed in any way.

The Data Processors and Persons in charge of the processing in office are punctually identified in the Privacy Document, updated periodically.

6. Data transfer to non-EU countries

Personal data may be transferred to countries of the European Union or to third countries with respect to those of the European Union or to an international organization, within the scope of the purposes referred to in point 2.The interested party will be informed whether or not there is an adequacy decision of the EU Commission.

7. Rights of the interested party

The interested party always has the right to request from the Data Controller access to your data, the correction or cancellation of the same, the limitation of processing or the possibility to oppose the processing, to request data portability, to revoke consent to processing by asserting these and other rights provided for by EU Regulation 2016/679 (General Data Protection Regulation – GDPR) by sending an e-mail to privacy@borcianiebonazzi.it The interested party may also lodge a complaint with a supervisory authority.

Menu

Settings

Create a free account to use wishlists.

Sign in
Servizio clienti whatsapp