Website Privacy Policy: www.stamperiabosatra.it

This Privacy Policy describes how the personal data of users (hereinafter, for the sake of brevity, the “Data Subjects”) who consult the website at https://www.stamperiabosatra.it// (hereinafter, for the sake of brevity, the “Website”) is processed. This Privacy Policy provides the information pursuant to art. 13 of Regulation (EU) 2016/679 (hereinafter the “GDPR”) and the “Personal Data Protection Code”, i.e. Legislative Decree 196/2003, as amended by Legislative Decree 101/18, to those who interact with online services provided through the Website (hereinafter the “Services”).

This information is provided only with reference to the Website.

DATA CONTROLLER

Consultation of the Website involves the release of information and Personal Data of the Data Subjects. The Data Controller is: Stamperia Bosatra srl – Via per Valduggia, 7, 13011 Borgosesia VC (hereinafter the "Data Controller").

NAVIGATION DATA

The computer systems and software procedures used to operate the Website acquire, during their normal operation, some personal data of the Data Subjects who visit it (hereinafter, for the sake of brevity, the "Personal Data"), the transmission of which is implicit in the use of Internet communication protocols. The Personal Data referred to in art. 2.1. is information that is not collected to be associated with specific Data Subjects, but which, by its very nature, could, through processing and association with data held by third parties, allow the identification of these Data Subjects. This category of Personal Data includes IP addresses or domain names of the computers used by Data Subjects who connect to the Website, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the operating system and the user's computer environment.

The Personal Data referred to in art. 2.1. is used only to obtain anonymous statistical information on the use of the Website and to check its correct functioning and is stored for the time defined by the reference legislation, and in particular art. 5 paragraph 1 letter e) of the GDPR. The Personal Data referred to in art. 2.1. could be used to ascertain responsibility in the event of hypothetical computer crimes against the Website.

The particular data referred to in art. 9, paragraph 1 of the GDPR cannot be processed without the explicit consent given by the Data Subject.

PURPOSE OF PROCESSING

Personal data such as a unique IP address may be collected for navigation on the site and for statistical purposes; there are no other collection tools or forms of sharing. The Website was created to provide information to users regarding the structure of the firm and its operating methods.

LEGAL BASIS OF PROCESSING

The legal basis for the processing of Personal Data for the purposes referred to in letter a, is art. 6.1.b) of the GDPR, as the processing is necessary for the provision of the Services or for responding to requests from the Data Subject. The provision of Personal Data for these purposes is optional, but failure to provide it would make it impossible to activate the Services provided by the Website. The legal basis related to the purpose referred to in letter b, is art. 6.1.c) of the GDPR, as the data provided is necessary due to a legal obligation.

DATA RETENTION

Personal Data is stored within the European Union in order to comply with the aforementioned purposes. The processing will be carried out in automated and manual form, with methods and tools aimed at guaranteeing maximum security and confidentiality, by subjects specifically appointed for this purpose. In compliance with the provisions of art. 5 paragraph 1 letter e) of the GDPR, the Personal Data collected will be stored in a form that allows the identification of Data Subjects for a period of time not exceeding the achievement of the purposes for which the Personal Data are processed. The retention of Personal Data provided depends on the purpose of the processing.

Personal Data will be kept for the time strictly necessary to achieve those same purposes in compliance with the principles of minimization and storage limitation pursuant to art. 5.1.e) of the GDPR.

PROCESSING METHODS

Personal Data will be processed using computer/telematics tools for purposes connected and/or instrumental to online services or for simple navigation on the Website, as established by current Italian legislation; in particular:

1. to enable the provision of the Service;
2. to enable the fulfillment of obligations required by law.

Personal Data will be processed using tools and/or methods designed to ensure the confidentiality and security of such Personal Data.

Any Data Processors will be appointed, upon assignment by the Data Controller of external tasks (for the performance of which it is necessary to share the Personal Data of the Data Subjects), from among those who provide sufficient guarantees to implement adequate technical and organizational measures in such a way that the processing meets the requirements of the GDPR and guarantees the protection of the rights of the Data Subject, and after the Data Processor has signed a specific contract/addendum to the professional assignment containing the requirements and specifications of the processing itself.

RIGHTS OF DATA SUBJECTS

The Data Subject has the right to obtain confirmation at any time of the existence or otherwise of the data, to know its content and origin, verify its accuracy or request its integration, updating, or correction pursuant to art. 15 of the GDPR.

Pursuant to the same art. 15, the Data Subject has the right to request the deletion, transformation into anonymous form or blocking of Personal Data processed in violation of the law, as well as to oppose in any case, for legitimate reasons, its processing. Requests should be addressed to the Data Controller at its registered office.

The Data Subject has the right to request from the Data Controller access to their Personal Data, as well as the correction, deletion, restriction, opposition to their processing and portability of the same, where processed automatically on the basis of consent or for the execution of the contract.

The Data Subject has the right to withdraw consent at any time without prejudice to the lawfulness of the processing based on the consent given before the withdrawal.

The Data Subject has the right to lodge a complaint with the Data Protection Authority for the processing of Personal Data, pursuant to art. 77 of the GDPR.

PROCEDURES FOR EXERCISING RIGHTS PURSUANT TO ART. 12 OF THE GDPR

The Data Subject may at any time exercise the rights identified by art. 15 and, where applicable, by art. 16-21 of the GDPR, by sending:

• a registered letter with acknowledgment of receipt to the Data Controller's registered office located in Via per Valduggia, 7 – 13011 Borgosesia (VC)
• by writing to the e-mail address info@stamperiabosatra.it