PRIVACY POLICY
Information provided pursuant to Reg.EU 2016/679 (GDPR), Art.13

1.1 Navigation Data
The information systems and software procedures relied upon to operate this web site acquire personal data as part of their standard functioning; the transmission of such data is an inherent feature of Internet communication protocols. Such information is not collected in order to relate it to identified data subjects, however it might allow user identification after being processed and matched with data held by third parties. This data category includes IP addresses and/or the domain names of the computers used by any user connecting with this web site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of such requests, the method used for submitting a given request to the server, returned file size, a numerical code relating to server response status (successfully performed, error, etc.), and other parameters related to the user's operating system and computer environment.

Purposes and lawfulness of processing (GDPR-Art.13, c.1, lett.c)	These data are only used to extract anonymous statistical information on website use as well as to check its functioning. The data might be used to establish liability in case computer crimes are committed against the website (Controller legitimate interest).
Scope of communication (GDPR-Art.13, c.1, lett.e,f)	The data may only be processed by internal personnel, duly authorized and instructed in the processing (GDPR-Art.29) or by the Processor of the web platform (appointed Data Processor, Art.28 GDPR) and will not be disclosed to other parties, disseminated or transferred to non-EU countries. Only in the case of an investigation they can be made available to the competent authorities.
Data retention (GDPR-Art.13, c.2, lett.a)	Data are usually kept for short periods of time, with the exception of any extensions connected to investigations.
Data provision (GDPR-Art.13, c.2, lett.f)	The data are not provided by the data subject but automatically acquired by the site's technological systems.

1.2 Cookies
For specific information you can consult the cookies policy: Cookie Policy


1.3 Newsletter subscription
The newsletter provides useful information related to our market sector, events and initiatives, products / services offered, as well as any promotional offers.

Purposes and lawfulness of processing (GDPR-Art.13, c.1, lett.c)	Only the e-mail address is requested, for the purpose of sending the newsletter. Registration is subject to acceptance of specific, free and informed consent (GDPR-Art.6, c.1, lett.a) documented through a special check-box (GDPR-Art.7, c.1).
Scope of communication (GDPR-Art.13, c.1, lett.e,f)	The data may only be processed by internal personnel, duly authorized and instructed in the processing (GDPR-Art.29) or by the Processor of the web platform (appointed Data Processor, Art.28 GDPR, only for maintenance service) and will not be disclosed to other parties, disseminated or transferred to non-EU countries.
Data retention (GDPR-Art.13, c.2, lett.a)	The data (email) are kept until the possible "Unsubscription", freely available at any time through the link at the bottom of each message sent.
Data provision (GDPR-Art.13, c.2, lett.f)	Failure to provide the email address and consent will make it impossible to obtain the newsletter service.

1.4 Request a quote
The page allows the interested party to request a quote for a product. The applicant's identification and contact data are requested.

Purposes and lawfulness of processing (GDPR-Art.13, c.1, lett.c)	Identification and contact data are requested to send the quotation to the interested party. The request is subject to acceptance of specific, free and informed consent (GDPR-Art.6, c.1, lett.a) documented through a special check-box (GDPR-Art.7, c.1).
Scope of communication (GDPR-Art.13, c.1, lett.e,f)	The data may only be processed by internal personnel, duly authorized and instructed in the processing (GDPR-Art.29) and will not be disclosed to other parties, disseminated or transferred to non-EU countries.
Data retention (GDPR-Art.13, c.2, lett.a)	Personal data is processed for no longer than is necessary to achieve the purposes for which it has been collected.
Data provision (GDPR-Art.13, c.2, lett.f)	The provision of data relating to the mandatory fields is necessary to obtain an answer, while the optional fields are aimed at providing the Bolzoni staff with other useful elements to facilitate contact.

1.5 Data provided voluntarily by users
Sending e-mail messages to the addresses mentioned on this website, which is done on the basis of a freely chosen, explicit, and voluntary option, entails acquisition of the sender's address, which is necessary in order to reply to any request, as well as of such additional personal data as is contained in the message(s). The sender who gives his curriculum to submit his job application remains the only responsible for the relevance and accuracy of the data sent. It should be noted that any curriculum without the data processing consent will be immediately deleted.


1.6 Careers
The page allows the data subject to apply for employment with the Company. The candidate is free to send his / her curriculum vitae via e-mail and insert further evaluation elements in the letter.

Purposes and lawfulness of processing (GDPR-Art.13, c.1, lett.c)	The data are acquired for the correct management of the procedures for the evaluation of the candidates, as well as to give feedback in case of interest. The submission of the application and the choice of the data communicated are free, therefore the data subject sending the data shows the consent to the use for selection purposes (GDPR-Art.6, comma1, lett.a).
Scope of communication (GDPR-Art.13, c.1, lett.e,f)	The data may only be processed by internal personnel, duly authorized and instructed in the processing (GDPR-Art.29) and will not be disclosed to other parties, disseminated or transferred to non-EU countries.
Data retention (GDPR-Art.13, c.2, lett.a)	Personal data is processed for no longer than is necessary to achieve the purposes for which it has been collected.
Data provision (GDPR-Art.13, c.2, lett.f)	The provision of data is completely free and optional and accompanied by a specific privacy information.

2.1 Object of the processing
The Group processes personal identifying data of customers / suppliers (for example, name, surname, company name, personal / fiscal data, address, telephone, e-mail, bank and payment details) and its operative contacts (name surname and data contact information) acquired and used for managing the services provided by the Group.


2.2 Purposes and legal basis of the processing
Data are processed to:

• manage contractual / professional agreements, as well as manage the necessary communications connected to them;
• fulfill the obligations established by law, by a regulation, by the community legislation or by an order of the Authority;
• exercise a legitimate interest of the Controller (for example: the right of defense in court, the protection of credit positions; the ordinary internal operating, management and accounting needs).

Failure to provide the aforementioned data will make it impossible to establish the relationship with the Controller. The aforementioned purposes represent, pursuant to Article 6, commi b, c, f, suitable legal bases for the lawfulness of the processing. If it is intended to carry out treatments for different purposes, it will be required a specific consent from the data subjects.


2.3 Methods of the processing
The processing of personal data is carried out by means of the operations indicated in Art. 4 n. 2) GDPR and exactly as: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion and destruction of data. Personal data are subjected to both paper and electronic and / or automated processing. The Data Controller will process personal data for the time necessary to fulfill the purposes for which it was collected and related legal obligations.


2.4 Scope of the processing
The data are processed by internal regularly authorized subjects and instructed pursuant to Article 29 of the GDPR. It is also possible to request the scope of communication of personal data, obtaining precise indications on any external subjects operating as managers or independent data controllers (consultants, technicians, banks, transporters, etc...).
We inform you that the data may be transferred outside the EU only in compliance with the conditions set out in Chapter V of the GDPR, aimed at ensuring that the level of protection of the data subjects is not affected ("Art.45 Transfer on the basis of a decision of adequacy, Art.46 Transfer subject to adequate guarantees, Art.47 Binding corporate rules, Art.49 Specific exceptions "). Intercompany data transfers to subsidiaries or parent companies take place within the framework of a Group Agreement (International Data Transfer Agreement), made on the basis of the current Standard Contractual Clauses, approved by the European Commission. A copy of these guarantees may be made available, upon express and justified request, by writing to privacy@bolzonigroup.com.

It should be noted that this information may be subject to periodic review, also in relation to the relevant legislation and jurisprudence. In the event of significant changes, appropriate evidence will be given in the home-page of the site for a suitable time. In any case, the interested party is invited to periodically consult the present policy.