Last Update: 04/05/2022

PRIVACY NOTICE PURSUANT TO ART. 13 OF THE GDPR

Why This Document is Important

This document is important because it informs you of how and why we process your personal data. This notice only applies to the processing carried out for the purposes specified in “Why We Process Your Data.” This notice does not replace any specific information notices that may be provided to you when you use other services of the Data Controller. This document may be updated over time: please check it periodically!

DATA CONTROLLER

B&P Italia s.r.l., Tax Code 00162100317, VAT No. IT 00162100317, Romans d’Isonzo (GO), Via dal Bosc n. 3, www.bepitalia.it

Telephone contact details: +39 0481 908 918

Email contact details: servizioclienti@bepitalia.it

This website is managed by Net-Prime Srl for B&P Italia Srl and can be contacted at the addresses listed above.

WHAT ARE YOUR RIGHTS

In cases provided by law, you have the right to access your data, request its correction or deletion; you also have the right to object to the processing of your data or to request that the processing be restricted; furthermore, you have the right to data portability. Additionally, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. In any case, if you have any doubts or requests, please contact us—we will be happy to assist you!

Important! As a data subject, you can exercise your rights and withdraw consent by notifying us at the provided contact details. Furthermore, you can file a complaint with the Data Protection Authority or take legal action if you believe that the data processing is against the law.

WHY WE CAN PROCESS YOUR DATA (LEGAL BASES)

Every processing of personal data must be based on an appropriate legal basis.

Processing is lawful when:

  • Contract: It is necessary to execute a contract to which the Data Subject is a party or to take pre-contractual measures requested by the Data Subject.

  • Consent: The Data Subject freely, specifically, informedly, and unambiguously gives their consent.

  • Legal Obligation: It is necessary to comply with a legal obligation to which the Data Controller is subject.

  • Legitimate Interest: It is necessary to pursue the legitimate interest of the Data Controller or third parties.

  • Protection of Vital Interests: It is carried out to protect the Data Subject’s vital interests in cases of serious and immediate danger.

  • Public Interest: It is necessary to perform a task carried out in the public interest or in the exercise of official authority.

WHY WE PROCESS YOUR DATA (PURPOSES)

-Managing this website and enabling its navigation.

We process your personal data to manage the website and to enable its navigation.

Legal basis: contract | legitimate interest

Important! Providing data for this purpose is essential: if you do not provide it, we will not be able to deliver the service or perform the activity.

-Managing the communications and requests we receive

We process your personal data to manage the requests we receive (in person, via email, or through other available communication tools, such as contact forms, emails, phone calls, or online video conferencing platforms).

Legal basis: contract | legitimate interest

Important! Providing data for this purpose is essential: if you do not provide it, we will not be able to respond to you.

-Legitimate Interest

Pursuing a legitimate interest

We often need to process your data to carry out tasks related to our business activities that are not required by law or by the contract between us.

This includes, in particular, actions we take to protect our business assets, ensure the quality of our work, verify regulatory compliance, prevent fraud, conduct direct marketing, transfer data within the group for administrative purposes, recover debts, manage disputes, exercise or defend our rights in legal proceedings or before legal proceedings.

Legal basis: legitimate interest

Important! We never process your data based on legitimate interest if it could infringe upon your rights and freedoms!

-Obligations related to what we do

Fulfilling contractual and legal obligations reasonably related to what we do.

We process data to carry out activities related and instrumental to the execution of the contractual or pre-contractual relationship with third parties (e.g., administrative, management, tax, and accounting obligations; managing correspondence; preparing estimates; receiving orders; scheduling appointments; providing updates on the status of activities; managing payments and invoicing).

Legal basis: contract | legal obligation

Important! Providing data for this purpose is essential. The processing for this purpose is carried out based on legitimate interest and legal obligation, so your consent is not required.

-Complying with the law

Fulfilling legal obligations. We also process the personal data of the data subjects to comply with legal obligations (such as administrative, accounting, and tax obligations) that we are subject to, protect our rights, and enable the functions of judicial authorities.

Legal basis: legal obligation

Important! Providing data for this purpose is essential. The processing for this purpose is carried out based on legal obligation, so your consent is not required.

WHAT DATA WE PROCESS

Personal data

We process personal data, i.e. all information concerning an identifiable or identifiable natural person.

Important! Your data is valuable: do not communicate data that is not necessary for the request you make to us, and do not communicate data of third parties unless you have their consent to do so! We may also learn about your special data that you voluntarily share with us (such as: health, genetic or biometric data; trade union membership; political opinions; philosophical or religious beliefs; ethnic or racial origin; life and orientation.

Examples of personal data we process: ☛ identification data and contact details: first and last name; tax code; place and date of birth; nicknames; telephone number, e-mail, residence, domicile, head office; user name and password to access the systems that the Data Controller makes available to the Data Subject (corporate devices; e-commerce and restricted areas; websites and apps) ☛ navigation data IP addresses or domain names of the computers and terminals used by the users; URI/URL notation addresses of the resources requested; time of the request, method used to submit the request to the server and size of the file obtained in response; numeric code indicating the status of the response given by the server (successful, error, etc.); parameters relating to the operating system and the user’s computer. ); parameters relating to the user’s operating system and computer environment

Navigation data

The computer systems and software procedures that make this site work, during their normal operation, acquire some personal data whose transmission is implicit in the use of Internet communication protocols.

These data are necessary to use the services of the site and are used anonymously to obtain statistical information on the use of the site and to check its correct functioning. Once processed, they are automatically deleted (except in the event of the need to ascertain criminal offences by the judicial authorities).

Examples of browsing data ☛ IP addresses or domain names of the computers and terminals used by users ☛ URI/URL notation addresses of the resources requested ☛ time of the request, method used to submit the request to the server and size of the file obtained in response ☛ numerical code indicating the status of the response given by the server (successful, error, etc.) ☛ parameters relating to the user’s operating system and computer environment

Web usage statistics

The Data Controller uses Google Analytics to generate statistics on the use of the website. All user IP addresses are anonymised as soon as they are received from the network and before being stored or processed.

Examples of statistics generated by Google Analytics ☛ most visited pages ☛ use of services ☛ number of visitors per day ☛ number of visitors per time slot ☛ geographed area

COOKIES AND OTHER TRACKING TOOLS

Like most websites, this site also uses cookies and similar technologies. Cookies are short strings of programming code that are installed on the user’s device (computer, smartphone, tablet) when they visit the site to enhance the browsing experience (during the current visit and future visits) by automating certain procedures and analyzing how the site is used.

There are other technologies that collect information about service usage, user behavior, and preferences (e.g., tracking pixels); for simplicity, in this document, we refer to cookies and these other technologies collectively as ➔ Tracking Tools.

For detailed information about the Tracking Tools used on this site (what they are and their storage duration), please refer to the Cookie Policy.

These are technical and complex matters: if you have any questions or requests, feel free to contact us; we will be happy to assist you!

Technical Tracking Tools

These are essential: they are necessary for the proper functioning of the site. Technical Tracking Tools include session tools (necessary for normal site use and navigation), which are limited to the duration of the session, are not persistently stored on the user’s computer, and are deleted when the browser is closed.

Permanent Technical Tracking Tools include functionality tools (which store certain user-selected criteria for future visits) and analytical cookies (used to collect information, in aggregated and/or anonymous form, such as the number of users visiting the site and their behavior).

Important! They are not used for the collection of personal data: therefore, no user consent is required for their installation.

Profiling Tracking Tools

These Tracking Tools are used to monitor the user’s online browsing and create profiles based on their tastes, habits, choices, etc., in order to send advertising messages aligned with the preferences previously expressed by the user online.

Important! These Tracking Tools are not used unless the user provides their consent. The consent for each type of Tracking Tool can be modified or revoked at any time using the dedicated tool available on every page of the site.

Third-Party Tracking Tools

In addition to Tracking Tools managed directly by the Data Controller (so-called “first-party” tools), this site also features Tracking Tools that enable services provided by third parties (so-called “third-party” tools). Unless otherwise specified in this document, third-party Tracking Tools are managed independently by their respective third-party providers, and the Data Controller has no access to the data collected through these tools.

Third-party Tracking Tools cannot be fully controlled by the Data Controller, so to understand how data collected and processed by third-party Tracking Tools on this site is managed, please refer to the privacy policies provided by the respective third-party providers (see Cookie Policy).

If you have any questions or requests, feel free to contact us; we will be happy to assist you!

Social Buttons

The Data Controller’s website may also use plugins and sharing buttons, which result in the presence of third-party Tracking Tools on the site (so-called social network cookies). Social network cookies are used to gauge interest in and/or share the Data Controller’s website content on social platforms (e.g., Facebook). The information collected by these cookies may be transmitted to the third parties providing the service (e.g., Facebook).

The plugins and/or sharing buttons (so-called social buttons/widgets) appear as icons of social networks (e.g., Facebook) and other websites. By clicking on them, users navigating the Data Controller’s site can interact directly with social networks and other websites; in such cases, the social network and other websites will collect data related to the user’s visit.

Storage Duration and Processing Location

The duration and expiration of cookies and other similar Tracking Tools may vary depending on the settings established by the Data Controller or each third-party provider: some expire at the end of the user’s browsing session, while others remain active for a longer period.

For detailed information about the Tracking Tools used on this site (what they are and their storage duration), please refer to the Cookie Policy.

WHERE WE OBTAIN YOUR DATA (SOURCES)

We process the data that you directly share with us (voluntarily, explicitly, and optionally) through various channels, such as when you call or write to us, interact with our social media profiles, or use our website or app, as well as data you have made public.

We also process data from public registers, lists, and other public sources (e.g., financial statements and other information from the Business Register at the Chambers of Commerce; property records, mortgage registrations, and other so-called prejudicial acts; mass media and publicly accessible websites).

WITH WHOM WE SHARE YOUR DATA

We share data with internal members of our organization who are involved due to their assigned duties and are specifically designated for processing (such as: employees; interns, volunteers, temporary workers; partners, investors, administrators; consultants and collaborators). We may share data with third parties outside our organization who help us do our work and achieve the purposes outlined. These entities operate either as independent data controllers or as external data processors. Contact us if you would like to know who they are! The data will not be subject to dissemination.

Examples of data recipients:
☛ Public Administrations, Public Entities, and private entities with public relevance functions (such as Municipalities, Local Health Authorities, INAIL, INPS, Guardia di Finanza, Supervisory Authorities, Revenue Agency, Judicial Authorities, etc.), within the limits established by the law.
☛ Partners, administrators, DPO, auditors, members of Supervisory Bodies, and auditing firms.
☛ Social networks and other digital platforms (such as systems for managing video conferences or file exchanges).
☛ Entities that manage the operation of the website, apps, and in general, corporate IT systems and telecommunications networks (e.g., web agencies; providers of cookies and other tracking tools; newsletter providers; software houses; web hosting providers).
☛ Entities that perform statistical analysis of online activities.

HOW LONG WE KEEP YOUR DATA

We retain data for the minimum time necessary to achieve the intended purposes. Data may be kept longer if needed to comply with legal obligations, fulfill orders issued by Public Authorities, or pursue a legitimate interest (such as exercising or defending a legal right). Important! If your consent is required (e.g., for marketing purposes), we will process your data only as long as you agree. You can revoke your consent to data processing at any time by notifying us (opt-out), but please note that this may affect our ability to provide certain services and/or activities to you.

HOW WE PROCESS YOUR DATA

We take appropriate security measures to protect your data and carry out the processing as required by law: collection, recording, organization, storage, consultation, processing, use, modification, selection, extraction, restriction, communication, deletion, and destruction of data.

ESSENTIAL GLOSSARY:

☛ Personal Data: Any information relating to an identified or identifiable natural person.
☛ Dissemination: Making data known to unspecified parties, in any form, including by making it available or accessible. For example, posting a photo online or on a social network.
☛ DPO (Data Protection Officer): The person responsible for data protection, who also acts as an intermediary between the Data Controller and the Data Subject.
☛ Data Subject: The natural person to whom the personal data relates.
☛ Data Controller: The entity that determines the purposes and means of data processing.
☛ Processing: Any operation or set of operations performed on personal data, with or without the aid of automated processes, applied to personal data or sets of personal data.