pursuant to art. 13 of EU Regulation 2016/679 (GDPR)

Buzzi Lario Srl (CF/PI 07126900963) , with registered office in Milan , Via Corridoni 11, as Data Controller pursuant to and for the purposes of EU Regulation 2016/679 (hereinafter also "GDPR" or "regulation"), recognizes the importance of the fundamental right to the protection of natural persons with regard to the processing of personal data. Therefore, pursuant to the aforementioned regulation, the processing of data subjects' personal data will be carried out and protected in accordance with the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, confidentiality, accountability and, in any case, in accordance with the provisions of the GDPR.

Access to and use of the www.buzzilario.com application confers the status of User to the visitor and implies full and unreserved acceptance of the following terms and conditions. If you do not accept them, please do not use the www.buzzilario.com application .

 

1. Data Controller

The Data Controller is Buzzi Lario Srl (CF/PI 07126900963) , in the person of its legal representative pro tempore, with registered office in Milan, via Corridoni 11.

The Data Controller can be contacted at the following email address: info.buzzilario@gmail.com .

 

2. Purpose of the Processing of Collected Data

User Data is collected to allow the Owner to provide its services, as well as for the following purposes:

- exercising a legitimate interest or a right of the Data Controller (e.g., the right to defense in court, the protection of creditor positions, ordinary internal operational, management, and accounting needs);

- payment management;

- address management and sending email messages;

- interaction with social networks and external platforms;

- registration and authentication;

- remarketing and behavioral targeting;

- statistics;

- sale of goods and services online.

The types of Personal Data used for each purpose are indicated in the specific sections of this document.

This Application does not support "Do Not Track" requests. To find out whether any third-party services it uses support them, please consult their privacy policies.

 

2/A. Details on the services used for the purposes referred to in point 2

a) Payment management


Payment management services allow this Application to process payments by credit card, bank transfer, or other means. The payment data is acquired directly by the payment service provider without being processed in any way by this Application.

Some of these services may also allow the scheduled sending of messages to the User, such as emails containing invoices or notifications regarding payment.

- PayPal (Paypal)

PayPal is a payment service provided by PayPal Inc., which allows the User to make online payments using their PayPal credentials.

Personal data collected: various types of data are collected as specified in the service's privacy policy.

b) Address management and sending email messages


This type of service allows you to manage a database of email contacts, telephone contacts, or contacts of any other type, used to communicate with the User.

These services may also allow us to collect data relating to the date and time the messages were viewed by the User, as well as the User's interaction with them, such as information on clicks on links included in the messages.

c) Interaction with social networks and external platforms


This type of service allows you to interact with social networks or other external platforms directly from the pages of this Application.

The interactions and information acquired by this Application are in any case subject to the User's privacy settings relating to each social network.

If a social network interaction service is installed, it is possible that, even if Users do not use the service, it may collect traffic data relating to the pages on which it is installed.

d) Registration and authentication


By registering or authenticating, the User allows the Application to identify him or her and give him or her access to dedicated services.

Depending on what is described below, registration and authentication services may be provided with the help of third parties. If this occurs, this application will be able to access some data stored by the third-party service used for registration or identification.

- Direct registration

The User registers by filling out the registration form and providing this Application with his/her Personal Data directly.

Personal data collected: ZIP code, city, Fiscal Code, last name, date of birth, email address, address, country, name, telephone number, VAT number, password, province, company name, Social Security number (SSN), state, and username.

e) Remarketing and Behavioral Targeting

This type of service allows this Application and its partners to communicate, optimize, and serve advertisements based on the User's past use of this Application.

This activity is carried out by tracking Usage Data and using Cookies, information that is transferred to the partners involved in the remarketing and behavioral targeting activity.

- Facebook Remarketing (Facebook, Inc.)

Facebook Remarketing is a Remarketing and Behavioral Targeting service provided by Facebook, Inc. that connects the activity of this Application with the Facebook advertising network.

Personal data collected: Cookies and Usage data.

Place of processing: USA – Privacy Policy – Opt Out

- AdWords Remarketing (Google Inc.)

AdWords Remarketing is a Remarketing and Behavioral Targeting service provided by Google Inc. that connects the activity of this Application with the AdWords advertising network and the Doubleclick Cookie.

Personal data collected: Cookies and Usage data.

Place of processing: USA – Privacy Policy – Opt Out

f) Statistics

The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to track User behavior.

- Facebook Ads conversion tracking (Facebook, Inc.)

Facebook Ads conversion tracking is a statistics service provided by Facebook, Inc. that connects data from the Facebook advertising network with actions performed within this Application.

Personal data collected: Cookies and Usage data.

Place of processing: USA

- Google AdWords conversion tracking (Google Inc.)

 Google AdWords conversion tracking is a statistics service provided by Google Inc. that connects data from the Google AdWords advertising network with actions performed within this Application.

Personal data collected: Cookies and Usage data.

Place of processing: USA

- Google Analytics (Google Inc.)

Google Analytics is a web analytics service provided by Google Inc. (“Google”). Google uses the Personal Data collected to track and examine the use of this Application, compile reports, and share them with other Google services.

Google may use Personal Data to contextualize and personalize the ads of its own advertising network.

Personal data collected: Cookies and Usage data.

Place of processing: USA

g) Sale of goods and services online


The Personal Data collected is used to provide services to the User or to sell products, including payment and possible delivery. The Personal Data collected to complete the payment may include the credit card, the bank account used for the transfer, or other payment methods. The payment data collected by this Application depends on the payment system used.

 

3. Types of Data collected

Among the Personal Data collected by this Application, either independently or through third parties, there are: first name, last name, gender, date of birth, telephone number, address, username, email address, password, company name, tax code, VAT number, country, state, province, postal code, Social Security number (SSN), city, Cookies and Usage Data.

Other Personal Data collected may be indicated in other sections of this privacy policy or through informational texts displayed together with the collection of the Data itself.

Personal Data may be entered voluntarily by the User, or collected automatically when using this Application.

Any use of Cookies - or other tracking tools - by this Application or by the owners of third-party services used by this Application, unless otherwise specified, has the purpose of identifying the User and recording their preferences for purposes strictly related to the provision of the service requested by the User.

Failure by the User to provide certain Personal Data may prevent this Application from providing its services.

The User assumes responsibility for the Personal Data of third parties published or shared through this Application and guarantees that he or she has the right to communicate or disseminate them, freeing the Data Controller from any liability towards third parties.

4. Method and place of processing of the collected data

- Treatment methods

The Data Controller processes Users' Personal Data by adopting appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data.

Processing is carried out using IT and/or telematic tools, following organizational methods and procedures strictly related to the purposes indicated. In addition to the Data Controller, in some cases, categories of persons involved in the organization of the site (administrative, commercial, marketing, legal, system administrators) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) may have access to the Data, also appointed, if necessary, as Data Processors by the Data Controller. The updated list of Data Processors may be requested from the Data Controller at any time.

- Place

The Data is processed at the Data Controller's operating offices and in any other locations where the parties involved in the processing are located. For further information, please contact the Data Controller.

5. Period of retention of Personal Data

The personal data of the interested parties will be retained for the duration necessary to achieve the purposes referred to in point 2), as well as for the time in which the Data Controller is subject to retention obligations for tax and/or accounting purposes or for other purposes imposed by laws and mandatory provisions, both national and European.

Please note that specific security measures are observed to prevent the loss of personal data, its illicit or incorrect use, and unauthorized access, in accordance with the provisions of the GDPR.

Furthermore, to ensure that your personal data is always accurate, up-to-date, complete, and relevant, please report any changes to the email address info.buzzilario@gmail.com .

6. Recipients of Personal Data

This information identifies, as recipients of the processing, the subjects with whom Buzzi Lario Srl, maintains relationships or contacts, for any reason, or to whom it otherwise provides personal data, for the purposes and under the additional conditions of this policy. Personal data may, specifically, be disclosed to third parties duly designated as "Data Processors" and provided with appropriate legal guarantees.

It is understood that the personal data of the interested parties may be freely disclosed to third parties, such as law enforcement agencies, whenever permitted by law or required by an order or provision of a competent authority.

7. Rights of the interested party

Interested parties may exercise the following rights recognized by the GDPR at any time, where the legal requirements apply, by contacting the Data Controller at info.buzzilario@gmail.com :

1. request and obtain confirmation as to whether or not personal data concerning them is being processed;
2. if processing is underway, request and obtain access to personal data;
3. request and obtain, without undue delay, the rectification of inaccurate personal data concerning them as well as the integration of incomplete personal data;
4. request and obtain without undue delay, when one of the conditions set out in Article 17, paragraph 1, GDPR occurs, the erasure of personal data concerning them, except as provided in Article 17, paragraph 3, GDPR;
5. request and obtain, in the cases provided for by art. 18, paragraph 1, GDPR, the restriction of the processing of your personal data;
6. Object at any time to the processing of your personal data, in the event of specific circumstances affecting you. Specifically, in the event of objection, your personal data will no longer be processed, unless there are compelling legitimate grounds for processing that override the interests, rights, and freedoms of the data subjects, or for the establishment, exercise, or defense of legal claims;
7. obtain the portability of their personal data, i.e. the right to receive them from the Data Controller in a structured, commonly used and machine-readable format and request their transmission to another Data Controller, without hindrance;
8. If consent is required for the processing of personal data, withdraw consent already given, limited to cases in which the processing is based on the data subjects' consent for one or more specific purposes or in the case of processing of special categories of data (for example, data revealing racial origin, political opinions, religious beliefs, health, or sex life, etc.). Processing based on consent and carried out prior to its withdrawal does not affect and, therefore, retains its lawfulness.

In any case, we ask you not to send or communicate any so-called sensitive data through the site or by any other means. "Specially-identified data," pursuant to the GDPR, means any data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data intended to uniquely identify a natural person, data concerning health, or data concerning a natural person's sex life or sexual orientation.

Furthermore, interested parties may lodge a complaint with the Supervisory Authority (Italian Data Protection Authority) if they believe their rights under the GDPR have been violated, according to the procedures indicated on the Authority's website, accessible at www.garanteprivacy.it .

 

8. System logs and maintenance

For operation and maintenance purposes, this Application and any third-party services it uses may collect system logs, which are files that record interactions and may also contain Personal Data, such as the User's IP address.