— Privacy Policy —

 

The Website www.buccellati.com (hereinafter, the “Site”) is owned by Buccellati Holding Italia SpA (hereinafter, the “Company” or the “Data Controller”), as Data Controller. The security measures relevant to the Site have been defined and developed to ensure that the information provided by users (hereinafter "Users" or "User") is processed in compliance with the personal data protection and privacy legislation, to which our activity is dutifully inspired, for the purposes and modalities better described in the present information notice (hereinafter, the "Privacy Policy").

The Privacy Policy is provided pursuant to art. 13 of the EU General Data Protection Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter, the "GDPR") and is intended to describe the management of this Site, with reference to the processing of personal data of the consulting Users, as well as to allow the Site Users to became aware of the purposes and modalities of the personal data processing by the Company in the event of their conferment. The Privacy Policy is also based on Recommendation no. 2/2001 on certain minimum requirements for collecting personal data on-line in the European Union, which was adopted on 17 May 2001 by the Working Party set up under Article 29.  

The Privacy Policy is also based on Recommendation no. 2/2001 on certain minimum requirements for collecting personal data on-line in the European Union, which was adopted on 17 May 2001 by the Working Party set up under Article 29.

The Privacy Policy is made only for this Site and does not apply to other websites that may be consulted by the User through links on the pages of the Site. The Company declares that it has not carried out any verification of websites belonging to third parties and therefore it assumes no responsibility and does not offer any guarantee in relation to the privacy rules by them adopted.

 

The Privacy Policy can be easily consulted as it is accessible from the home page of the Site and through links on any other page.

 

 1. DATA CONTROLLER AND DATA PROCESSOR

The data controller (hereinafter, the “Data Controller”) is the Company with registered office in Chief Executive Officer, in person of Gianluca Brozzetti, domiciled at the Company's registered office.

The Data Controller can appoint other internal or external data processors as well as persons in charge of the processing. To date, the Company has appointed Temera Srl as external data processor, with registered office in Pianvallico, Via di Pianvallico 5, since it has been charged with the maintenance of the technological part of the Site.

 

A complete and updated list of data processors and persons in charge of the processing can be requested to the Data Controller at the addresses above indicated.

 

2. PERSONAL DATA UNDERGOING PROCESSING

"Personal data" means any information concerning an identified or identifiable physical person with particular reference to an identifier such as a name, an identification number, location data or an online identifier.
The personal data collected by the Site are the following:

 

2.1 Navigation Data

The information systems and software procedures relied upon to operate this Site acquire personal data as part of their standard functioning; the transmission of such data is an inherent feature of Internet communication protocols. Such information is not collected in order to relate it to identified data subjects, however it might allow user identification after being processed and matched with data held by third parties. This data category includes IP addresses and/or the domain names of the computers used by any user connecting with this Site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of such requests, the method used for submitting a given request to the server, returned file size, a numerical code relating to server response status (successfully performed, error, etc.), and other parameters related to the User's operating system and computer environment.

These data are only used to extract anonymous statistical information on Site use, without therefore the possibility of identifying the User, as well as to check its functioning including the resolution of technical problems; they are erased immediately after being processed. The data might be used to establish liability in case computer crimes are committed against the Site.

 

This processing is aimed at pursuing a legitimate interest of the Company.

 

2.2 Data Provided Voluntarily by the User

These are all personal data voluntarily released by the User on the Site, such as: User’s contact details voluntary provided by sending e-mail to the addresses indicated on the Site in order to have a direct contact with the customer service, as well as any other personal data included in the message; data provided by sending CV (curriculum vitae) to the Company and other relevant information for personnel selection purposes; data provided in order to register and / or access the reserved area, or in order to request the newsletter or information on a specific product or service to be sent via form.

Each User can change his/her data by sending an email to privacy@buccellati.com, taking care to specify in the heading "Exercise of rights regarding the protection of personal data".

Specific summary information notices will be shown and/or displayed on the pages that are used for providing services on demand.

In some cases this information may be used for the purpose of profiling the User. Where this occurs, appropriate information will be provided and free and specific consent will be obtained for marketing and / or profiling purposes.

 

3. DATA PROCESSING PURPOSES AND LEGAL BASIS OF DATA PROCESSING

For the purposes of access to the Site as a User, it is necessary to register by filling in the fields of the form.

Apart from what specified for the navigation data referred to in paragraph 2.1), the personal data provided by Users through the Site are processed for the following purposes:

  1. to allow the execution of operations strictly connected with and instrumental to the management of relations with the Users, such as - merely by way of example - the answer to questions received with the contact forms, the authorization to the reserved area and the execution of sales contracts of goods and /or services and the verification of their development, the management for the selection of CV personnel (curriculum vitae) and other relevant information provided by the User;

  2. to allow the correct execution of the contractual obligations assumed by the Company towards the Users and customers and vice versa, as well as the consequent accounting and tax obligations;

  3. to allow the fulfillment of the obligations established by law, regulations and European legislation, or provisions issued by authorities entitled by law and by supervisory and control authorities;

  4. the purposes necessary for the establishment, exercise or defense of a right in court or whenever the courts exercise their judicial functions;

  5. to give information regarding other products and / or services of the Company as well as to carry out promotional, commercial and marketing activities;

  6. to carry out User profiling activities in order to establish groups of Users through the processing of data provided by them, so as not to send generalized commercial and promotional communications to all Users in an indistinct way. This allows us to segment the Users, creating groups divided by bands of interest based, for example, on the country of origin, language, sex, previous purchases, etc. This allows us to send commercial communications that are as relevant and less invasive as possible, limiting - as far as practicable - the circumstance that the user receives unwanted messages. Finally, we remind you that the express consent for the forwarding of promotional communications extends not only to communications sent through the use of automated systems without the intervention of the operator (for example, e-mail), but also to the traditional systems, like the postal service. It is always possible to withdraw consent to the processing of your data for this purpose, even in a disjointed way. For example, it could be decided to receive advertising only by postal service and not through automated systems;

  7. purposes of statistical research/analysis on aggregated or anonymous data, without the possibility of identifying the User, aimed at measuring the functioning of the Site and the related operational functions, including the resolution of any technical problem.

The legal basis for the processing of personal data for the purposes listed in point a) is the provision of a service or the answer to a request. Pursuant to the applicable law, the consent of the Users is not necessary for those activities.

As to the purposes listed in points b), c) and d), the processing is necessary for the pursuit of a legitimate interest of the Company.

With regards to the purposes e) and f), the processing of User’s data will be subject to the issuance of an explicit consent by the signing of summary information notices that will be progressively reported or displayed on the Site pages and drafted for particular services on request.

The purposes listed in point g) do not involve personal data processing.

 

It is always possible to withdraw consent to the processing of data for this purpose, even in a disjointed way. For example, Users could decide to receive advertising only by postal service and not through automated systems.

 

4. COOKIES

 

The Company uses cookies through this Site. More information on this can be found in the Cookie Policy available at the following link

 

5. NATURE OF THE PROVISION OF PERSONAL DATA AND CONSEQUENCES OF ANY REFUSAL  

Apart from what specified for navigation data which are automatically collected by the system and for the functioning of the cookies (please refer to the related Cookie Policy), the User is free to provide, or not to provide, his /her personal data.

For free registration as User of the Site, it is necessary to fill in the fields of the form with personal data.

The filling in of the form, which is optional, allows to provide the credentials for the management of online services; any failure to provide personal data, as well as any partial or inaccurate provision of personal data, makes it impossible to provide the service.

The use of passwords, identification numbers (ID) or other access keys is under the User’s responsibility. 

 
6. MODALITIES OF THE PROCESSING AND STORAGE OF PERSONAL DATA 

 

Personal Data will be processed by or without electronic and / or automated tools, for the period not exceeding the one strictly necessary for the purposes pursued and, in any case, for the period provided for by the Privacy Regulation and the applicable law. More information on the storage period of Personal Data can be requested to the Data Controller at the following address: privacy@buccellati.com

Specific security measures are adopted to prevent data loss, confidentiality and unlawful or incorrect use and unauthorized access.

 

7. SCOPE OF COMMUNICATION AND DISCLOSURE OF DATA

For the pursuit of the purposes indicated above, the provided Personal Data will be only communicated to persons entrusted by the Company, e.g. employees, collaborators and internal and external consultants, appointed in writing as persons in charge for the processing or internal or external data processors. Specific instructions have been provided to the pre-mentioned persons. 

Your Personal Data may also be communicated and transferred to subjects whose right to access is recognized by provisions of law or by instructions given by authorities legitimated by the legislation. 

Finally, your Personal Data could be shared, used and transferred to Group companies Buccellati Holding Italia SpA, in relation to the purposes for which they have been collected. These Parties provide adequate protection for individuals regarding the processing of their personal data and can be contacted at the following addresses: privacy@buccellati.com.

 

8. DATA SUBJECT’s RiGHTS

Pursuant to art. 13 of the Privacy Regulation, the Data Subject can at any time:

  1. request from the Controller access to and rectification or erasure of Personal Data or restriction of Data processing;

  2. object to Data processing;

  3. exercise the right to Data portability;

  4. withdraw consent, without affecting the lawfulness of processing based on consent before its withdrawal;

  5. lodge a complaint with a supervisory authority;

 

The aforementioned rights can be exercised with a request made without formalities towards the Data Controller at the following address: by e-mail: privacy@buccellati.com

 

9. AMENDMENTS

LThe Company reserves the right at any time to modify, also due to changes in applicable law, the Privacy Policy by updating this page. The User is therefore required to periodically check the Privacy Policy in order to become aware of the related updates.