B & B Artigiana / Privacy policy

DISCLOSURE about the PROCESSING OF PERSONAL DATA pursuant to Article 13 of Legislative Decree no. 196 of 30 JUNE 2003 (the “Privacy Code” or the “Personal Data Protection Code”)

General information
B&B ARTIGIANA SRL is aware of the importance of guaranteeing that private information is kept safe. As such, acting in accordance with applicable Italian and European laws and regulations, it has set out in this document how it processes the personal data of anyone who accesses this Website, whether they do so directly or using a link from another site.

Data controller
The Data Controller for the Website is: B&B ARTIGIANA SRL. Tax and VAT no. 03422390132, with registered office in Olgiate Molgora (Lecco province), a company incorporated under Italian law.

Location for the processing of personal data
The processing of any personal data in relation to using the Website is done at B&B ARTIGIANA SRL’s registered offices.

Types of data processed
Data provided by a Data Subject
At times, the Website might ask a Data Subject to provide some personal information, such as his/her name, surname, domicile, a telephone contact number, an email address and so on. Providing such information is entirely the choice of the Data Subject and so it is completely optional. Indeed, even if a Data Subject fails to provide some of the requested information, it might still be possible to provide the requested service.

In order to access some specific content on the Website in reserved sections and to be able to enjoy all the features of the Website, a Data Subject can:

  • create a username and password by clicking on: “Register”;
  • subsequently, every time the Data Subject accesses the Website, this username and password can be inputted using: “Login”, to be granted access to the section of the Website requiring authentication.

The personal data collected through the form filled in by a Data Subject on voluntarily registering (Registration Data) largely consists of various forms of contact information for that person.  For example, this includes: name and surname, postal address, email address and telephone number. The Website’s computer system automatically associates that data with the username and password chosen by the Data Subject and links them to an account. On future occasions on which the Data Subject accesses the Website, it will only be possible to access these personal details after logging in (username and password). Data Subjects are fully responsible for keeping their username and password safe.

Traffic and navigation data provided by a Data Subject’s computer
The computer systems and software procedures required for the Website to work acquire, during normal operations, some personal data, the sending of which is implicit when using Internet communication protocols.  The Website also acquires and stores URL (Uniform Resource Locator) sequence data identifying the resources visited or searched for by a Data Subject on the Internet (e.g. web pages, documents, images, etc.), including the date and time of access and the content.

The Website also use cookies to acquire data and information from your computer. Such cookies can be: permanent and/or session cookies:

  • permanent cookies: During normal operations, the Website’s computer system sends some data from the B&B ARTIGIANA SRL server to the Data Subject’s hard drive, where it is stored, so the Data Subject can browse some specific, reserved Website sections.
  • session cookies: The Website’s computer system sends some data, in the form of random numbers generated by the server – the session cookies – that are not stored permanently on the Data Subject’s computer and thus disappear when the computer is shut down. Such data are sent to make the transmission of session identifiers possible, as they are necessary for browsing the Website safely and efficiently, and for obtaining information about how the Data Subject uses the Website.

No targeted advertising will be sent using cookies. Granting consent to use such cookies is done by accepting the terms for using the Website, as per the Provision from the Italian Data Protection Authority of 4 June 2014.

Most user browsers are automatically set to accept cookies, but a Data Subject can set his or her browser to not accept or save such cookies, either once and for all or on a case by case basis.  Alternatively, it is possible to set up a browser such that a notification is sent when it is about to save a cookie. If the ability to receive cookies is turned off, it is still possible to access the Website, but it won’t be possible to browse specific and/or reserved sections.

In general, the Website acquires and stores – and, at times, communicates to third parties – all of the browsing data described above, but this is done in a purely anonymous and aggregate form. Processing personal data makes it possible for the Data Controller to run and monitor the Website properly, to obtain statistical information and to conduct sampling for promotional or scientific purposes.

Purpose of the Processing
Any personal data received might be processed for the following purposes:

  • Activities strictly related and functional to the services working: for example, to allow a Data Subject access to the services offered (such as, purchasing B&B ARTIGIANA SRL products and services) and view Website content, and to make it possible for a Data Subject to receive any requested services or products, thus fulfilling any orders placed; to respond to any questions or requests made by a Data Subject.
  • Market research and/or investigations conducted by B&B ARTIGIANA SRL.
  • Technical management of the Website and the related computer system: for example, acquire, check and manage account information; secure the Website and make sure it is functioning properly, monitoring Website activity.
  • Enrichment or customisation of the Website content, services or design during a one-off visit or repeated visits.
  • Profiling in aggregate form (that is, anonymous, without breaching the privacy or confidentiality of any personal data) of Website users and their access to reserved, specialist pages, for scientific research purposes and/or market analysis, and report processing, performed directly by B&B ARTIGIANA SRL or through specialist third party companies.
  • Communicating with a Data Subject about any changes or updates to the Website and the services on it.
  • Advertising, communicating special offers and promotions.
  • Requests for market surveys that a Data Subject can freely choose to take part in or not.

Processing methods
Personal data are processed using computerised, online and manual means on behalf of B&B ARTIGIANA SRL. Data processing is done in accordance with the Privacy Code.

Data Transfer
Processing is done by the Data Controller and by any people within the organisation who have been specifically appointed for this purpose. Personal data might be transferred to external parties (e.g. companies that provide data processing services, print invoices, package and label any products purchased online, provide shipping services and so on). Any external parties that process data are specifically appointed as External Data Processors.
Data processing by B&B ARTIGIANA SRL. and its Data Processors can be done even without consent from a Data Subject in the following cases:

  • To provide a requested service, that is, any processing that is contractual in nature, such as the purchase of products and services on the Website.
  • If requested to do so by the Courts or for the company to defend or protect its rights in administrative, judicial or arbitration proceedings.
  • In those cases where processing of data is necessary for direct investigations intended to combat unlawful activities or acts contrary to the law, or to ensure the security of people or property.
  • In general, in all cases in which the transmission of data is required by law.

The Data Controller does not directly transfer any personal data to countries outside of the European Union.

Data Subject’s rights
For any data processed for the purposes indicated above, the Data Subject, or someone acting on his/her behalf on the basis of a written proxy, can exercise the following rights:

  • The right of access, expressively set out in Article 15 of EU Regulation 2016/679, that is, the possibility to access to all personal information concerning him or her.
  • The right to rectification, expressly set out in Article 16 of EU Regulation 2016/679, that is, the possibility to have any inaccurate personal data rectified without undue delay.
  • The right to erasure, expressly set out in Article 17 of EU Regulation 2016/679, which is the right to have any personal data directly concerning the Data Subject erased.
  • The right to the restriction of processing where one of the cases set out in Article 18 of EU Regulation 2016/679 applies.
  • The right to data portability, expressly set out in Article 20 of EU Regulation 2016/679, that is, the right to be provided, in an interoperable format, with one’s personal data and/or the right to have one’s personal data sent by the Company to another data controller without hindrance.
  • The right to withdraw consent at any time, expressly set out in Article 7 of EU Regulation 2016/679.
  • The right to lodge a complaint with the Data Authority for any data processing breaches pursuant to Article 77 of EU Regulation 2016/679.
  • The right to seek judicial remedy for any wrongful processing of data, even against any decisions by the Data Authority pursuant to Article 78 of EU Regulation 2016/679.

For any information about the processing of personal data and/or to exercise your rights, you can contact the Data controller directly, B&B ARTIGIANA SRL, on or +39 039 9912091.

Storage of personal data
Data are processed for the duration of the contractual relationship established or to provide a service, and in general to fulfil all legal obligations.

Information Security
The Data Controller adopts security measures to ensure optimal protection of processed personal data. The login information (username / login and password) of each Data Subject is sent and stored using servers equipped with firewalls and physically located in protected data centres.

The adoption of lockout management systems (in which access is blocked for repeated incorrect access attempts) helps further protect accounts against intrusion or hacking attempts by unauthorised third parties.

For data processed by external parties, it is necessary to refer to their own privacy policies (e.g. Google).

Contact Details for the Data Controller
Via Pilata 48
23887 Olgiate Molgora (LECCO) – ITALY