The information and the documents published on this website are provided for information purposes alone in order to describe the activities carried out and the products marketed by Biffignandi spa (hereinafter, the “Company”). This website may enable you to access other websites. The Company declines all liability for the content of these external websites.
The personal data received by the Company via this website will be processed in compliance with the provisions of EU Regulation no. 679/2016 (hereinafter, the “Regulation”) and applicable Italian law, as specifically provided from in the Processing Register prepared by the Company.
This information notice has also been provided under art.13 of the Regulation and is valid exclusively for the Website, not for the other websites that may be consulted by the user via any links found on the Website.
The Website is controlled and managed by Biffignandi spa, with registered office in Cassolnovo (PV), Via Circonvallazione Est n.2/6, which holds the position as data controller in accordance with and pursuant to art.4, no.7) of the Regulation.
Types of data processed
- Browsing data
During their normal exercising and operation, the IT systems and software procedures responsible for the functioning of the Website acquire some personal data, the sending of which is implicit in the use of Internet communication protocols.
This personal data contains information that is not collected in order to be associated with identified data subjects, but that, due to its nature could, via processing and association with data held by third parties, make it possible for users to be identified.
Examples of this data include the IP addresses or the domain names of the computers used by the users that connect to the Website and other settings regarding the operating system and computer environment of the user.
The aforesaid data is used for the sole purpose of collecting anonymous statistical information on the use of the Website to check that it is working properly and it is deleted immediately after processing. The data may also be used to establish liability in the event of possible computer-related crimes against the Website: with the exception of this possibility, the data on web contacts is currently not stored for more than seven days.
- Data provided voluntarily by the user
The optional, express and voluntary sending of email to the addresses indicated in the Website results in the subsequent, inevitable acquisition of the address of the sender, which is essential in order to be able to provide a suitable reply to the requests made, as well as any additional personal data that may be contained in the correspondence sent by the user.
Personal data processing purposes and methods, storage period
The data collected via the Website will be processed by the Company for the sole purpose of providing users with the information and/or services requested, as well as, with exclusive reference to browsing data, enabling the proper and efficient functioning of the Website. The Company may also process the personal data provided by users to pursue its own or third-party “legitimate interests”, for example, to manage possible disputes, objections, conflicts and complaints, as well as to protect its information systems and to fulfil applicable legal and regulatory provisions.
Pursuant to the Regulation, the “legal basis” of the processing carried out by the Company for the aforesaid purposes is the provision of the service (sending of information. etc.) expressly requested by users.
The processing of the personal data provided by the user will always be carried out in compliance with the provisions of art.5 of the Regulation and applicable Italian law, both manually and using automated means and, in any case, in compliance with the provisions on the security of personal data processing under the Regulation and applicable Italian law. The data processing activities connected to the web services of the Website will be carried out by personnel of the Company and, possibly, by parties specifically authorised to perform specific processing operations, as well as by third parties that provide specific services to the Company, who will be duly appointed as data processors under art.28 of the Regulation.
The Company has adopted specific security measures to prevent the loss of the data, the unlawful and incorrect use of the data and unauthorised access to the data.
Personal data will be stored by the Company for the period of time necessary to pursue the purposes for which it has been collected and, subsequently, for the storage period imposed by any applicable laws.
Provision of data
The provision of data by users is optional, with the exception of the statements made herein with reference to browsing data. The non-provision of the personal data required to provide the information and/or services requested will result in the impossibility on the part of the Company to carry out any requests made by users.
Rights of the Data Subject
Under the Regulation, the user of the Website has the right to obtain access to his/her personal data and the following information at any time:
- the purposes of the processing;
- the categories of personal data in question;
- the recipients or categories of recipient to whom the personal data has been or will be disclosed, in particular recipients in third countries or international organisations;
- where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
- the existence of the right of the data subject to request from the controller the rectification or erasure of the personal data or the restriction on the processing of the personal data concerning the data subject or to object to such processing;
- where the personal data is not collected from the data subject, any available information as to its source;
- the existence of automated decision-making, including profiling, as per article 22, paragraphs 1 and 4 of the Regulation, and, at least in those cases, meaningful information on the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject;
- the portability of the personal data.
The user has the right to lodge a complaint with the Personal Data Protection Authority, in accordance with Art. 77 of EU Regulation 679/2016 should you consider that the processing of your data infringes legislation in force.
The user may contact the data controller at any time by writing to the following email address: firstname.lastname@example.org in order to enforce the rights described above.