Privacy Policy of www.bosca.it
Bosca S.p.A., with registered office in Via Luigi Bosca, 2, 14053 Canelli (AT), Italy, P.IVA 00107140055, as the Data Controller, wishes to inform the users of the website www.bosca.it on how their personal data are processed, in accordance with Articles 13 and 14 of the EU Regulation 2016/679 (GDPR).
1. Type of Data Processed
- Navigation Data
The computer systems and software procedures used to operate this website acquire, in the course of their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses, domain names of computers used by users, URI notation addresses of requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, etc.
- Data Voluntarily Provided by the User
The optional, explicit and voluntary sending of messages to the contact addresses indicated on this site, as well as filling out contact forms or registering for events or services, involves the subsequent acquisition of the personal data provided, such as first name, last name, email address, telephone number and any other information entered voluntarily by the user.
2. Purpose and Legal Basis of the Processing.
Personal data provided by users will be processed for the following purposes:
- Handling of Requests
respond to requests for information, assistance or support sent via the contact channels available on the website.
the legal basis is the execution of pre-contractual measures taken at the request of the data subject (Art. 6(1)(b) GDPR). - Registration and Access to Restricted Areas
allow access to any restricted areas of the site and the use of related services;
the legal basis is the performance of a contract to which the data subject is a party (Art. 6(1)(b) GDPR). - E-commerce
handle orders, payments, deliveries of products purchased online and related activities;
the legal basis is the performance of a contract to which the data subject is a party (Art. 6(1)(b) GDPR). - Fulfillment of Legal Obligations
comply with obligations under laws, regulations, EU regulations or provisions issued by authorities empowered by law;
the legal basis is the fulfillment of a legal obligation (Art. 6(1)(c) GDPR).
- Defense of Rights
If necessary, to ascertain, exercise or defend the rights of the Owner in court;
The legal basis is the legitimate interest of the Owner (Art. 6(1)(f) GDPR).
3. Mode of Treatment
The processing of personal data is carried out using manual, computerized and telematic tools, with logic strictly related to the purposes themselves and, in any case, in such a way as to ensure the security and confidentiality of the data.
4. Data Retention.
Personal data will be kept for as long as is strictly necessary to achieve the purposes for which it was collected and processed, subject to the terms of applicable law.
- Browsing Data:
retained for the duration of the browsing session, except where necessary to investigate computer crimes against the site. - Data Provided Voluntarily:
kept for as long as necessary to provide the requested service or to fulfill contractual and legal obligations.
5. Scope of Data Communication and Dissemination
Personal data may be disclosed to:
- Data Processors
third parties who provide services instrumental to the stated purposes (e.g. IT service providers, consultants, logistics companies), appointed as Data Processors pursuant to Art. 28 GDPR. - Authorized Persons
internal staff expressly authorized to process personal data. - Competent Authorities
public agencies or judicial authorities where required by law.
Personal data will not be disseminated.
6. Transfer of Data to Third Countries
Should it be necessary to transfer personal data to countries outside the European Union or the European Economic Area, the Data Controller guarantees that the transfer will take place in accordance with the provisions of Chapter V of the GDPR, adopting the standard contractual clauses approved by the European Commission or other appropriate safeguards.
7. Rights of the Interested Party
The data subject may exercise, at any time, the rights provided for in Articles 15-22 of the GDPR:
- Access to Data
obtain confirmation of the existence or non-existence of personal data concerning him/her and, if so, access it. - Rectification
request the amendment of inaccurate personal data or the supplementation of incomplete ones. - Deletion
request deletion of personal data in the cases provided for in Art. 17 GDPR. - Limitation
obtain the limitation of processing in the cases provided by Art. 18 GDPR. - Portability
receive in a structured, commonly used, machine-readable format the personal data provided, and transmit it to another data controller. - Opposition
object to the processing of personal data based on a legitimate interest of the Controller. - Revocation of Consent
revoke consent at any time, without affecting the lawfulness of the processing based on the consent before revocation.
To exercise these rights, the data subject may contact the Controller at the following contact details:
- e-mail - shop@bosca.it
- Address - Bosca S.p.A., Via Luigi Bosca, 2, 14053 Canelli (AT), Italy
The data subject also has the right to lodge a complaint with the Data Protection Authority.
8. Nature of Data Contribution
The provision of personal data is optional, but necessary in order to take advantage of the services offered by the site (e.g., responding to requests, making purchases). Failure to provide data will result in the inability to provide these services.
9. Security Measures.
Bosca S.p.A. takes appropriate technical and organizational security measures to protect processed personal data from unauthorized access, loss, disclosure or alteration.
10. Links to Third Party Sites
The www.bosca.it website may contain links to third-party websites. Bosca S.p.A. is not responsible for the privacy practices or the content of such sites. Users are advised to read the privacy statements of each third-party site they visit.
11. Changes to the Privacy Policy
This policy is subject to change. We recommend that you check this page regularly to be updated on any changes.
Last updated: 01/10/2024
