Privacy e Cookie Policy – English

Bontapiù di Toson Roberto – in its capacity as Data Controller of your personal data, pursuant to and for the purposes of EU Regulation 2016/679 hereinafter referred to as ‘GDPR’, hereby informs you that the aforementioned legislation provides for the protection of data subjects with regard to the processing of their personal data and that such processing will be based on the principles of correctness, lawfulness, transparency and protection of your confidentiality and your rights.

Your personal data will be processed in accordance with the legal provisions of the aforementioned legislation and the confidentiality obligations therein.

• managing requests received from the website;
• sharing of website contents on social networks;
• purposes of subscribing to the newsletter service with informative and commercial contents related to the services offered by Bontapiù di Toson Roberto;
• statistical purposes and analysis of navigation and users.

Treatment modalities

Your personal data may be processed in the following ways:

• by means of hardware and software platforms operated by third parties;
• by means of electronic computers.

Your data will be processed by personnel expressly authorised by the Data Controller and, in particular, by the following categories of employees:

• secretarial staff, commercial office staff, programmers, collaborators of the owner.

Communication: Your data may be communicated to external parties for the proper management of the relationship and in particular to the following categories of Recipients including all duly appointed Data Processors:

• Google: GTM (Google Tag Manager) e Google Analytics;
• Microsoft: Clarity project (website heatmaps);
• To suppliers and subcontractors necessary for the provision of the services offered by the site including, by way of example, the management of the newsletter service and the analysis and monitoring of the operation of the site.

Dissemination: Your personal data will not be disseminated.

Your personal data may also be transferred, limited to the above-mentioned purposes, to the following countries:

• European countries;
• United States.

The transfer of data takes place in compliance with the Applicable Law and is based either on an adequacy decision or on Standard Model Clauses.

Retention Period

We would like to inform you that, in accordance with the principles of lawfulness, purpose limitation and data minimisation, pursuant to Article 5 of the GDPR, the retention period for your personal data is: The personal data collected are stored and processed for the entire duration of the contractual relationship in place with the user in relation to the type of service chosen, unless required by law to be stored for longer periods of time. Specific security measures are observed to prevent loss of data, unlawful or incorrect use and unauthorised access.

Data controller

The data controller is Bontapiù di Toson Roberto in the person of its pro-tempore legal representative.

You have the right to obtain from the data controller the erasure (right to be forgotten), restriction, updating, rectification, portability, opposition to the processing of personal data concerning you, as well as in general you may exercise all the rights provided for in Articles 15, 16, 17, 18, 19, 20, 21, 22 of the GDPR.

GDPR Regulation EU 2016/679: Articles 15, 16, 17, 18, 19, 20, 21, 22 – Rights of the Data Subject

1. The data subject shall have the right to obtain confirmation as to whether or not personal data concerning him/her exist, even if they have not yet been recorded, their communication in intelligible form and the possibility to lodge a complaint with the Supervisory Authority.
2. The data subject has the right to be informed of:

• the origin of the personal data
• the purposes and methods of processing
• the logic applied in the event of processing carried out with the aid of electronic instruments
• the identity of the data controller, data processors and the representative designated pursuant to Article 5(2)
• of the entities or categories of entity to whom or which the personal data may be communicated or who or which may get to know said data in their capacity as designated representative(s) in the State’s territory, data processor(s) or person(s) in charge of the processing.

3. The data subject has the right to obtain:

• the updating, rectification or, where interested therein, integration of the data;
• the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed;
• certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected;
• the portability of the data.

4. The data subject has the right to object, in whole or in part:

• on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;
• to the processing of personal data concerning him/her for the purposes of sending advertising or direct sales material or for carrying out market research or commercial communications.

 

Requests under the above points should be sent by e-mail to privacy@bontapiu.it