x
1.0
29 December 2023

beghelli.it: website Privacy Policy

PERSONAL DATA PROCESSED

 

1.  Personal data processed for Website functioning purposes

The IT systems and software procedures used to keep the Website functioning acquire, during standard operation, some personal data whose communication is implicit in the use of the Internet communication protocols. This information is not collected to be associated with identified data subjects, but rather through processing and combination with data retained by the Company or third parties, could allow users of the Website to be identified.

This data category includes IP addresses or domain names of computers used by users connecting to the Website, URI (Uniform Resource Identifier) of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the reply given by the server (successful, error, etc..) and other parameters regarding the operating system and computer environment.

 

2. Data provided directly by the user

The optional and voluntary data provision as requested by several sections of this Website is necessary to process the user's requests (by way of example, when information or explanations are requested by calling the numbers indicated on the Website or by emailing to addresses indicated therein).

Any specific disclosures, including summary disclosures, are provided or displayed in the Website pages www.beghelli.it provided for services on demand, in order to draw the user's attention to the processing of personal data thereof.

We declare that the Website is reserved for adults only.

 

3. Additional source of data

Within the Site it is possible that user data may be collected through third parties. Specifically, this eventuality may occur if the user decides to authenticate through the “social login” mode (e.g., Google, Microsoft). In such cases, the Controller processes the data related to the user’s e-mail address.

For more details about the operation, Data sharing and management of “social login”, the user is invited to consult the privacy policies made available, respectively, by each service provider.

 

4. Geolocation data

This Website may process data relating to user geographical location in order to provide services based on that location. The most common browsers and devices provide users with a set of built-in tools to prevent geographic tracking. If the user has specifically authorized geolocation, this Website may receive information about its actual geographical location.

 

DATA PROCESSING PURPOSES, LEGAL BASIS FOR PROCESSING DATA AND DATA RETENTION PERIOD

 

Website functioning

Data collected during browsing are used to obtain anonymous statistical information on the use of the Website and to monitor its correct functioning.

Legal basis for processing data: execution of the contract involving the data subject (Website use).

Data retention period: for the entire Website browsing session.

 

Contract purposes

Data provided directly by the user are applied to process the latter's requests (e.g. registration to the Website or contact request).

Legal basis for processing data: execution of the contract involving the data subject (Website use).

Data retention period: for the whole duration of the contractual relationship and subsequently according to the terms prescription of contract.

 

Once the aforementioned retention period has lapsed the data will be destroyed or made anonymous, according to technical erasure and backup procedures.

 

DATA PROVISION

Excluding browsing data, necessary to implement computer and IT protocols, personal data are freely and voluntarily provided by users. However, failure to provide the same data will make it impossible to fulfill the requests, submitted or intended to be, by the user.

 

DATA RECIPIENTS

The data may be processed by external parties operating as data controllers (such as, by way of example, supervisory and control authorities and, in general, public or private parties entitled to request the data), or, on behalf of the Company, by external parties designated as responsible, who are given adequate operating instructions.

These subjects are essentially included in the following categories:

 

a) companies of Gruppo Beghelli, operating in their capacity as data processors or for administrative and accounting purposes (e.g. purposes connected with the performance of internal organization, administration, finance and accounting activities);

b) natural and/or legal persons providing different services to the Company (e.g. service providers for the management of the Website, such as system outsourcers, companies that provide connectivity services to the Internet, etc.). Such subjects may also work as Data Processors;

c) parties and/or public and private entities data will be communicated to in order to fulfill or require the fulfillment of specific requirements under laws, regulations and EU legislation. These subjects will operate as independent Data Controllers or Data Processors.

 

PARTIES AUTHORISED TO PROCESS DATA

Data will be processed by employees, Company collaborators or external subjects, in their capacity as data processors, performing on behalf of the Company technical and organizational tasks for the Website.

 

PERSONAL DATA TRANSFER OUTSIDE THE EU

There are no data transfers outside the European Union.

 

DATA SUBJECTS’ RIGHTS - COMPLAINT TO THE SUPERVISORY AUTHORITY

By contacting the Company via e-mail to privacy@beghelli.it data subjects can ask the controller for access to personal data, or the correction or deletion of personal data, and also have the right to restrict processing of the data in the cases set out in article 18 of the GDPR, as well as to oppose the processing in cases of legitimate interest of the data controller.

Furthermore, in the case where processing is based on consent or a contract and carried out with automated tools, data subjects have the right to receive the personal data in a structured, commonly used and machine-readable format, and to transmit the data to another data controller without obstruction.

Data subjects have the right to lodge a complaint to the competent Supervisory Authority in the member state where they are resident or where they work, or the member state where the alleged breach took place.

 

DATA CONTROLLER AND DATA PROTECTION OFFICER (DPO)

 The Data Controller is BEGHELLI SPA based in Valsamoggia (BO), loc. Monteveglio, via Mozzeghine n. 13/15, email address privacy@beghelli.it
The Data Protection Officer (DPO) can be contacted at the email address dpo@beghelli.it.