(in accordance with article 13 of Reg.EU 2016/679 and the Provision of the Italian Data Protection Authority no. 229 of 08.05.2014)
Bacciottini Group S.r.l. considers the protection of the personal data of Users of the www.bacciottinigroup.eu website (hereinafter “Site”) to be of fundamental importance for its own and/or potential customers and for the individuals with whom it has, on various grounds, a contractual relationship; through this Policy, therefore, provided pursuant to art. 13 of Reg. EU 2016/679 (General Data Protection Regulation), Bacciottini Group S.r.l. aims to share its personal data processing policy.
1) Type of data processed by Bacciottini Group S.r.l.
During the ordinary course of operations, the IT systems and software procedures for running the Site acquire some personal data whose transmission is implied in the use of the communication protocols of the Internet (Internet domain and Internet Protocol (IP) address, type of browser and the operating system of the computer used to access the site, the date, time and length of visit, the pages visited and, and the name of the search engine if the visitor entered the site through a search engine). Such information is not collected to be associated with specific individuals,, but by its own very nature could, through the processing and association with data held by third parties, allow users to be identified.
This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the response from the server (success, error, etc.) and other parameters related to the users’ operating system and IT environment. These data are used only to obtain anonymous statistical information on the use of the Site and will be deleted immediately after processing, without prejudice to the need to investigate crimes by the Judicial Authority.
User requests for contact
In order to be able to validly submit a request for information/quotations to Bacciottini Group S.r.l. through the contact form on the Site, the User will be asked to enter some information, included in the category of common personal data (name and contact details). Bacciottini Group S.r.l. hereby invites the User to refrain from providing “particular categories of data”, which are not necessary for the request of information/formulation of quotations by the Data Controller.
Processing of customer and supplier data
The Data Controller guarantees that the data of its own and potential customers, suppliers and partners, as well as the personal data of the candidates for job offers at Bacciottini Group S.r.l., are processed in full compliance with current legislation on the protection of personal data.
2) Purpose of processing, legal basis and data retention period
The personal data acquired by Bacciottini Group S.r.l. will be processed by expressly authorised personnel appointed by the Data Controller, in compliance with the principles of fairness, lawfulness, transparency, protection of the confidentiality and of the rights of the data subject. Bacciottini Group S.r.l. will process the data of the data subject for the period strictly necessary to achieve the purposes of the processing, in full compliance with the retention obligations established by law.
The personal data provided by Users pursuant to article 6, paragraph 1, letter a) of Reg. EU 2016/679 will be processed by the Controller for the purpose of:
- responding to requests for quotations/information. The provision of such data is optional but necessary in order to allow the Controller to respond to the requests made by the User.
- direct marketing purposes: with the express consent of the User (art. 6, paragraph 1, letter a, of Reg. EU 2016/679), Bacciottini Group S.r.l. will send the User communications with promotional/commercial content to the e-mail address provided by the same. Consent to the processing of data for marketing purposes is optional and may be withdrawn, at any time, by contacting the Controller at the addresses indicated in article 3) below.
If, following the request for information/quotations, a contractual relationship is established with Bacciottini Group S.r.l., the data of the customer/supplier, if he/she falls within the category of “data subject”, as well as the essentially identifying data of his/her collaborators, employees and contacts will be collected and processed in accordance with art. 6, paragraph 1, letter b) of Reg. EU 2016/679 for the execution of pre-contractual measures, for the purposes of the performance of the contract and for the management of the contractual relationship. The provision of data by customers and suppliers is mandatory; therefore, the omitted, incorrect or partial communication of the data could make it impossible to conclude the negotiated agreement. Customer and supplier data will be stored for 10 years from the conclusion of the contractual relationship and will be subsequently deleted from the IT systems of Bacciottini Group S.r.l.
The personal data will be processed at the headquarters of the Controller using computer/electronic or paper means, ensuring the use of adequate technical and organisational security measures, pursuant to and for the purposes of art. 32 of Reg. EU 2016/679, suitable for reducing the risk of destruction, loss, unauthorised access or processing of personal data that is not permitted or, however, not in compliance with the purposes for which the data were collected.
3) Joint Controllers
The Joint Controllers are BACCIOTTINI GROUP S.R.L., in the person of the legal representative pro tempore, with registered and operative headquarters in Montemurlo (PO), Via dei Tintori n°20 interno 2, and Bacciottini F.lli S.R.L., in the person of the legal representative pro tempore, with legal and operative offices in Montemurlo (PO), Via dei Tintori no. 24/26, VAT no. 01636540971.
4) Scope of data disclosure
Cookies are short text files (usually in .txt or .xml) format sent by a web server to the User’s browser, stored by the latter on the navigation device and automatically re-sent to the server during the same visit to the site (session cookies) or on next access (persistent cookies). Cookies allow information about visitors’ preferences to be stored to improve the site’s functionality and simplify navigation, automating procedures (e.g. Login, site language).
Technical cookies (session and browsing): they are used for the sole purpose of “transmitting a communication over an electronic communication network, or to the extent strictly necessary for the provider of an information society service expressly requested by the subscriber or by the user to provide this service”. The aforementioned cookies do not collect any personal information of the User; they are necessary for the correct functioning of the Website and aim at ensuring its normal browsing and use. Disabling these cookies may compromise access to the Site’s contents;
Analytics cookies: they are similar to technical cookies when used directly by the Site administrator to collect information, in aggregate form, on the number of users and on how they visit the site, in order to improve its performance;
Functionality cookies: they allow the User to browse according to a series of selected criteria in order to improve the service provided thereto;
Flash cookies (or local Shared Objects): they allow the Controller to know the frequency with which a type of audio or video file is opened and the listening/viewing time of the file itself;
Third-party cookies: they are related to external domains, such as Facebook, Twitter, Google+ and LinkedIn social plugins. The aforementioned plugins when present involve the transmission of cookies to and from sites managed by third parties. The management of the information acquired by third parties is governed by the relevant policies;
Profiling cookies: they are permanent cookies designed to create profiles relating to the User in order to send advertising messages in line with the preferences expressed by the user in the context of web-browsing.
Cookies on the site:
This Site uses the following cookies:
|Cookie used to store the preference and stop the cookie-banner notices that are displayed every time a new session is opened.||Ga, gat, gid|
|Google Analytics cookies (service offered by Google, Inc.) are used to collect information, anonymously, on the number of users and how they interact with the Site’s contents (pages visited, browsing time, etc.) in order to optimise and improve its usability and the user experience.
|DSID, IDE, cto_lwid, 1P_JAR
APISID / HSID / SAPISID / SID / SIDCCNID, OGPC, CONSENT: DV
|Cookies used by Twitter to improve the functioning on external sites by anonymously acquiring the number of users and how they interact with the Site’s contents (pages visited, browsing time, etc.) in order to optimise and improve its usability and the user experience.||_ga /_gid, ads_prefs, auth_token
dnt / eu_cn, external_referer
kdt, personalization_id / remember_checked_on / syndication_guenst_id
tfw_exp / twid, lang
|YOUTUBE||Cookies used by YouTube to improve content usability on the platform, directing and profiling the videos according to the users’ choices||APISID / HSID / SID / SIDCC / SSID
CONSENT, LOGIN_INFO, PREF VISITOR_INFO1_LIVE
The User can disable/block cookies by following the instructions provided by the browser (generally found in the “Help”, “Tools” or “Modify” menus), it being understood that failure to provide consent/disabling of technical cookies could compromise access to the Site’s contents.
The final deletion of a cookie or a category thereof must be carried out by directly accessing the browser, as mere disabling will not delete cookies from the browser itself. To delete, disable or restore cookies on the computer, Users can use the cookie configuration pages provided by third-party content providers, or the options of their browser.
Instructions on managing cookies in relation to the most popular browsers are provided below:
Safari – https://support.apple.com/kb/PH17191?viewlocale=en_US&locale=en_GB
Internet Explorer- http://windows.microsoft.com/en-US/internet-explorer/delete-manage-cookies#ie=ie-11
Furthermore, please note that, if a mobile device is used, it will be necessary to refer to the relative instruction manual to understand how to manage cookies.
For further information on cookies, we recommend accessing the website https://www.garanteprivacy.it/cookie.
6) Rights of the data subjects
In accordance with the provisions of articles 15 et seq. of Reg. EU 2016/679, the data subjects may, at any time, exercise, towards each Joint Controller, the following rights: “Right of access“, which allows the data subject to access his or her personal data and obtain a copy; “Right to rectification“, which allows the data subject to obtain the rectification of data concerning him or her, should they prove to be inaccurate, or the completion of his or her own data, if the same were incomplete; “Right to erasure“, which allows the data subject to obtain the erasure of personal data concerning him or her in the cases provided for by art. 17 of Reg. EU 2016/679; “Right to restriction of processing“, which allows the data subject to obtain the restriction of processing in the cases provided for by art. 18 of Reg. EU 2016/679; “Right to data portability“, which allows the data subject to receive the personal data concerning him or her, in a structured, commonly used and machine-readable format and request transmission thereof by Bacciottini Group S.r.l. to another Controller; “Right to object”, which allows the data subject to object, on grounds relating to his or her particular situation, at any time to the processing of personal data concerning him or her pursuant to point e) or f) of Article 6(1) of Reg. EU 2016/679, as well as to object to processing for direct marketing purposes; “Right to lodge a Complaint”, which allows the data subject to lodge a complaint with the Italian Data Protection Authority pursuant to and for the purposes of art. 77 of Reg. EU 2016/679.
It is hereby specified that, prior to providing or changing any information, we may need to verify the identity of the data subject.