Privacy notice on the processing of personal data
pursuant to articles 13 and 14 of EU Regulation 2016/679 (“GDPR”)
The information indicated below is provided pursuant to articles 13 and 14 of EU Regulation 2016/679 (“GDPR”) to those who have access to the website www.bestitalianselection.it.
This notice describes how the website is managed, with reference to the processing of users’ personal data, as, following its consultation and/or surfing it, data relating to identified or identifiable persons can be processed.
The notice is provided only for the website www.bestitalianselection.it (“Website”) and not for other websites that may be consulted by the user through the links contained therein.
- DATA CONTROLLER
Best Italian Selection S.r.l., with registered office in Via Rieti, 19 – Zip code 84091 Battipaglia (SA) (Italy), is the data controller, pursuant to Article 4, no. 7, and 24, of GDPR, for the processing carried out in the context of this Website, on the data of the subjects who access the Website or browse and/or request services through the Website.
The data processing will be performed by employees or collaborators of the Company, however operating within it, according to the subjects authorized for the processing.
- PURPOSE OF THE PROCESSING
The processing of browsing data will be conducted for the purposes of:
- management of the website;
- analysis of access and surfing statistics;
- activities to improve the offer of BIS services;
- management of requests sent spontaneously to the contact addresses made available on the Website itself;
- orders forwarded through the Website (also through the Log in Area);
- Marketing activities related to the activity conducted by BIS.
Legal basis of the processing and retention time
The provision of data as part of browsing the Website (with the exception of data processed by virtue of the operation of Internet protocols and cookies) is optional. The personal data provided expressly by users/data subject who, for example, forward requests for sending informative material, are processed in accordance with the time frame in which the requesting subject’s interest in receiving information remains and are communicated to only third parties involved in the processing of the request (for this purpose BIS could use third-party companies, for example, for commercial reasons or for analysis and/or marketing, personnel screening, …). Furthermore, the user/data subject is informed that, since the generation and retention of backup copies of the data is expected – both for technical reasons and for the management of the Website, some types of information may continue to persist in the systems, even after cancellation (for a variable period but in any case, strictly correlated with the backup procedures and with the disaster recovery plan).
For the purposes referred to in points 5 and 6, the legal basis is, respectively:
- fulfillment of a contract with the interested party (Article 6, paragraph 1, letter b), EU Regulation 2016/679, purpose 5;
- consent of the interested party (Article 6, paragraph 1, letter a), EU Regulation 2016/679, purpose 6.
2.1 TYPES OF DATA PROCESSED
The simple consultation of the Website does not in itself involve the collection or processing of the personal data of users except for what concerns browsing data and technical cookies.
The computer systems and software procedures used to operate the Website acquire, during its normal operation, some data whose transmission is implicit in the use of Internet communication protocols.
This is information that does not allow the user/data subject to be directly identified, but by their nature can, through processing and association with data held by third parties, allow the identification of users/data subject.
This category of data includes the IP addresses or domain names of the computers used by users connecting to the Websites, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment.
These data are not disclosed but are used for the sole purpose of checking the correct functioning of the website and obtaining anonymous statistical information on the use of the Website. These data are kept for the time necessary to pursue the purposes illustrated. Furthermore, the data could, in any case, be used to ascertain responsibility in the event of criminal or otherwise illegal activities perpetrated against the Website or through it.
A cookie is a small text file that is stored by the device (computer, tablet, smart phone) when a website is visited by a user. A cookie can store certain information that the Website is able to read when, upon a new access, it is consulted again. Some of these cookies are necessary for the correct functioning of the Website, while others are useful to the visitor because they are able to safely store, for example, the username or language settings. The advantage of having cookies installed on your PC is, for example, identifiable in not needing to fill in the forms several times or choose the language each time you want to access a website visited previously (for the choice of language the cookie in charge will allow to memorize the choice made to simplify the future experience).
These cookies are constantly enabled and are necessary to perform the basic functions of the Website. These are cookies that allow you to recognize the user who uses the Website during a single session or, if required, also in subsequent sessions.
The cookies used by our website are the following:
Functional cookies (profiling cookies)
BIS does not use profiling cookies.
In particular, the user can set the so-called “incognito browsing”, in this way the browser stops storing the history of the websites visited, the passwords entered, cookies and other information that is generally collected.
Keep in mind that, in the event the user decides to disable all cookies (including those of a technical nature), the quality and speed of the services offered by the website may worsen and access to some sections of the website itself could be impracticable.
Information sent spontaneously by the user
The information sent spontaneously, through the form on the page bestitalianselection.it/contatti/ or through the contacts on the same page or in other ways, will be processed in compliance with current legislation. If, however, the information sent is not relevant and exceeds the requested service or the purpose for which BIS has made its contacts available, BIS reserves the right to delete any data it deems inappropriate with respect to the communication channel used (think, for example, of sending health documents to general Company contacts).
- SCOPE OF COMMUNICATION AND DIFFUSION OF DATA
The data described above will be processed by BIS or by subjects designated by it as data processors (Article 28 of GDPR), in the Italian territory or in the European Union. They will also be communicated to third parties in charge of providing services related to the activities of the Website and, in particular, to suppliers of technological/online services and shippers, who will provide for their temporary storage and process for the purposes defined in § 2 (purpose of the processing).
- PROCESSING METHODS
The data generated during surfing the Website are processed with automated tools and/or manually, for the time strictly necessary to achieve the purposes for which they were collected.
The processing will in any case take place with the aid of tools and procedures suitable for guaranteeing security and confidentiality in accordance with the relevant legislation. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.
- RIGHTS OF THE DATA SUBJECT
The data subject/user is granted, at any time, the rights referred to in articles 15-22 of GDPR and, in particular, to obtain from the data controller confirmation that the processing of personal data concerning him is in progress and in this case, he has the right to access them.
Furthermore, he has the right to ask the data controller to rectify or delete personal data or limit the processing that concerns him or to oppose their processing, in addition to the right to data portability.
The data subject/user also has the right to lodge a complaint with the Supervisory Authority (in Italy this is the Data Protection Authority for the protection of personal data).
To exercise his rights or for any information regarding the protection of his personal data, the data subject can contact Best Italian Selection Srl, with registered office in Via Rieti, 19 – Zip code 84091 Battipaglia (SA) (Italy) or by sending a email to firstname.lastname@example.org .