PRIVACY NOTICE PURSUANT TO ART. 13 OF EU REGULATION 2016/679

Beta Utensili S.p.A. (hereinafter the Company) (Tax Code/VAT No.: 09321470966), with registered office in Sovico (MB), 20845, Via Volta No. 18, as Data Controller pursuant to art. 4, par. 1, no. 7) and art. 24 of EU Regulation 2016/679 (hereinafter GDPR) on the protection of personal data, in fulfillment of the obligations set out in art. 13 GDPR, provides this Notice detailing the purposes and means of processing of Your personal data.

Please note that:

- personal data (pursuant to art. 4, par. 1, no. 1) GDPR) means ‘any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity’;
- processing of personal data (pursuant to art. 4, par. 1, no. 2) GDPR) means ‘any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction’.

1. Data Controller and contact details

The Data Controller, pursuant to art. 24 of the GDPR, namely the party that determines the purposes and means of processing, is Beta Utensili S.p.A., with registered office in Sovico (MB), 20845, Via Volta No. 18 – Tel.: 03920771 - email address: [email protected].

Processed data

Browsing data

The IT systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected in order to be associated with identified data subjects, but by its very nature could, through processing and association, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and IT environment.
These data are used solely for the purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data may be used to ascertain liability in the event of hypothetical cyber crimes against the site.

Data voluntarily provided by the user

The optional, explicit and voluntary sending of emails to the addresses indicated on this site, as well as completing the contact form or transmitting data through other sections of the site, entails the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data entered by the user.

2. Purpose of Processing and legal basis

2.1 Your personal data, subject to processing, are used for the following purposes:
a) responding to Your specific requests;
b) subject to Your necessary and explicit consent, to send You by email and/or post and/or SMS and/or MMS and/or telephone contact, newsletters, informational messages, commercial, promotional and advertising communications on the products and services offered by the Data Controller in compliance with the principles set out by the GDPR.
c) fulfilling legal and/or regulatory obligations of a tax, administrative and accounting nature;
d) fulfilling pre-contractual, contractual and tax obligations relating to the conclusion and/or execution of contracts to which You are a party;
e) protecting credit.
2.2 The processing of Your personal data is based on art. 6, par. 1 letters b) and c) of the GDPR for the purposes referred to in art. 2.1, letters a), c) and d) of this Notice and on art. 6, par. 1 letter a) of the GDPR for the purpose referred to in art. 2.1. letter b) of this Notice.

3. Nature of the provision

For the purposes referred to in art. 2.1, letters a), c), d) and e) of this Notice, the provision of data is necessary to respond to Your requests and/or for the performance of the services provided by the Data Controller, and any refusal makes it impossible to provide them. In order to carry out the processing referred to in art. 2.1, letters a), c), d) and e) of this Notice, it is not necessary to obtain the consent of the Data Subject.
For the purposes referred to in art. 2.1, letter e) of this Notice, the provision of data is optional and there are no consequences in the event of refusal to provide them, except for the impossibility for the Data Controller to carry out the related activities.

4. Processing methods

Data processing takes place through paper, IT and telematic media, also with the aid of electronic means, by specifically authorized internal parties and/or through third parties, according to logic strictly related to the purposes referred to herein. Data are stored in electronic and paper archives, in such a way as to guarantee data security and confidentiality. The processing of personal data is carried out in compliance with the principles on which the GDPR is based.

5. Recipients of the data

Recipient of the data means, pursuant to art. 4, par. 1, no. 9) GDPR, ‘the person natural or legal, public authority, agency or another body to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing’.
It should be noted that, in relation to the purposes indicated above, personal data may be disclosed to recipients collaborating with the Data Controller or for the fulfillment of legal obligations. Such recipients are bound to the strictest confidentiality regarding any information of which they may become aware and, by way of example, the categories are listed below.
- Authorities, public administrations and supervisory and control bodies for their institutional purposes.
- Employees and/or collaborators of the Data Controller, affiliated companies, entities, consultants, consulting companies, professional firms that collaborate with the Data Controller to achieve the purposes indicated above and for the fulfillment of legal obligations.
- Parties providing services for the management of the Data Controller's IT system.
- Qualified professionals for the study and resolution of any legal and contractual issues.
- Banks or similar organizations.

6. Place of data processing and possible transfer of data outside the EU

Data processing activities are carried out within a Member State of the European Union (EU) or within a Member State of the European Economic Area (EEA).
However, data processing activities may involve the transfer of data to a State not belonging to the EU or the EEA. In this case, the Data Controller already guarantees that the transfer, if necessary, will be carried out only under the specific conditions provided for by articles 44 et seq. of the GDPR.

7. Dissemination and communication of data

Your personal data are not subject to dissemination or transfer.
Communication to third parties, other than the Data Controller and the Processors – internal or external to the organizational structure of the Data Controller – identified and appointed pursuant to arts. 24 and 28 GDPR, is provided for where necessary.
In any case, processing by third parties will take place in compliance with the principles of fairness, proportionality and necessity, as well as in compliance with the current legal provisions.

8. Retention periods

The data will be retained in compliance with the principle of proportionality and in any case for a period not exceeding 10 years necessary for the fulfillment of the purposes referred to in art. 2.1. of this Notice.

9. Data security

The Data Controller adopts appropriate technical and organizational measures for the protection of data in order to prevent their loss, unlawful or improper use and unauthorized access.

10. Rights of the Data Subject

Please be informed that, pursuant to art. 13, par. 2, letter b) GDPR, in relation to the processing of the personal data in question, in order to ensure fair and transparent processing, the following rights may be exercised:
10.1. Right to information and access (pursuant to art. 15 GDPR): in order to obtain from the Data Controller information on the existence or otherwise of data processing concerning You as well as access to Your personal data and information on the purposes of processing, on the recipients or categories of recipients to whom the data are transmitted.
10.2. Right to rectification (pursuant to art. 16 GDPR), erasure (pursuant to art. 17 GDPR) and restriction (pursuant to art. 18 GDPR): in order to request from the Data Controller the rectification and erasure of Your personal data and the restriction of processing.
10.3. Right to data portability (pursuant to art. 20 GDPR): in order to receive in a structured, commonly used and machine-readable format the personal data concerning You provided to the Data Controller and You have the right to transmit those data to another controller, provided that such operation is technically feasible.
10.4. Right to object (pursuant to art. 21 GDPR): in order to object to the processing of Your data. To exercise the rights referred to in the aforementioned art. 13, par. 2, letters b) and e) GDPR, You may write to Beta Utensili S.p.A., Via Volta No. 18, 20845, Sovico (MB), or to the following email address [email protected] or contact the Data Controller at the following telephone number 03920771.

11. Right to lodge a complaint or seek judicial remedy

Pursuant to art. 13, par. 2, letter d) GDPR and art. 140 bis of Legislative Decree no. 196/2003, as amended by Legislative Decree no. 101/2018, it is also stated that if it is believed that the processing of data violates the European Regulation or the Personal Data Protection Code, a complaint may be lodged with the Privacy Authority, pursuant to art. 77 GDPR or, alternatively, an appeal may be brought before the Judicial Authority.

12. Changes and updates

This notice is updated as of 10/03/2022. The Data Controller may make changes and/or additions as a consequence of subsequent regulatory changes and/or additions.