PRIVACY POLICY OF THE WEBSITE www.bertimps.com

 

1 – General information related to this website

1.1. This section contains information regarding the processing of data of users and visitors who connect to the website owned by BERTI METAL PARTS SOLUTIONS S.R.L., accessible at the address www.bertimps.com (the “Site”), with the aim of describing the methods of managing the Site, in reference to the processing of personal data of users who consult and/or use the services and to allow them to know the purposes and methods of processing their personal data.
1.2. This information is also provided pursuant to Article 13 of Reg. EU 2016/679 (GDPR – General Data Protection Regulation), relating to the protection of individuals regarding the processing of personal data as well as the free movement of such data, for individuals who interact with the Site, accessible at the address corresponding to the homepage: www.bertimps.com.
1.3. This privacy policy and the information contained herein are provided only for the Site and not for other websites that may be consulted by the user through links contained therein, and it conforms to Recommendation no. 2/2001 regarding the minimum requirements for online data collection in the European Union, adopted on May 17, 2001, by the Article 29 Working Party.
1.4. This privacy policy and the information contained herein aim to provide guidance regarding the types of data processed, the methods of processing, the data retention times, the nature of the information, and any other relevant aspect that the data controller must make known to users who connect to the web pages of www.bertimps.com, regardless of the purposes of the connection itself, according to Italian and European legislation.
1.5. The consultation of the Site by the user entails the release of information of a personal data nature. It is specified that according to the applicable regulations, by “processing” of personal data is meant any operation or set of operations, carried out with or without the aid of automated processes and applied to personal data or sets of personal data, such as collection, registration, organization, structuring, storage, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, limitation, deletion or destruction.
1.6. Before communicating any personal data, users are therefore invited to carefully read this privacy policy, as it contains important information on the protection of personal data and on the security, measures adopted to ensure confidentiality in full compliance with the GDPR and the national legislation applicable in the field of personal data protection.
1.7. It is specified that the Site is aimed at users over the age of 14, pursuant to art. 8, par. 1 GDPR and art. 2-quinquies of the Privacy Code. By connecting to the Site and providing their data, the interested party, i.e., the subject to whom the data refers, declares to be over 14 years old.

 

2 – Data Controller

2.1. The data controller is the natural or legal person, public authority, agency, or other body which, alone or jointly with others, decides the purposes and means of the processing of personal data. This entity is also needed to find and adopt proper technical and organizational measures to ensure a level of security of the personal data processed proper to the risk generated by the processing operations conducted.
2.2. Regarding this Site, in light of the applicable legislation, the data controller is the company BERTI METAL PARTS SOLUTIONS S.R.L., located in Serravalle Sesia (VC), Via Montecastello 40, which can be contacted for any clarification or exercise of user rights at the following email address: privacy.bertimps@legalmail.it

 

3 – Data processing manager

3.1. Controller is a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.
3.2. Pursuant to Article 28 of the GDPR, the data controller may appoint one or more data controllers among the subjects who may have access to the personal data of the interested parties, such as third-party service providers such as connectivity providers, hosting, IT companies and the software provider that manages the newsletter sending service.
3.3. The list of all data controllers is kept at the registered office of the data controller and is available upon request from users of the Site.

 

4 – Data Processing Location

4.1. The data processing related to the web services of the Site takes place at the data centre of TELEMATICA ITALIA SRL, found in VIA BRAMENTE NR.43, 05100 TERNI (TR), as well as at the owner’s premises and on their devices.
4.2. If necessary, data related to the Site’s web services may be processed by the data processors – each within their specific area of competence – or by persons in charge under Article 4 no. 10, GDPR, for this purpose, at their respective locations.

 

5 – Types of data processed and data processing methods

5.1. It is specified that, according to the applicable regulations, “personal data” means any information concerning an identified or identifiable natural person with reference to an identifier such as name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, mental, economic, cultural, or social identity of that person.
5.2. The personal data collected by the Site are the following:
A) Navigation Data
The I.T. systems of the Site collect some Personal Data whose transmission is implicit in the use of Internet communication protocols. These are information that are not collected to be associated with you, but by their very nature could, through processing and associations with data held by third parties, allow users to be found. Among these are the IP addresses or domain names of the devices used by users who connect to the Site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to your operating system and computing environment.
These data are used to obtain anonymous statistical information on the use of the Site and to check its correct functioning; to allow – given the architecture of the systems used – the correct delivery of the various functionalities you requested, for security reasons and for ascertaining responsibility in case of hypothetical computer crimes against the Site or third parties.
B) Data Provided Voluntarily
Apart from what specified above for navigation data necessary to proceed with the informatic and telecommunication protocols, the provision of personal data by users of the Site is free and optional, although functional to the provision of certain services: in these cases, therefore, failure to provide data could compromise or make impossible the delivery of the service.
In particular, through the Site, you have the possibility to voluntarily provide personal data, such as, for example, name, surname, date and place of birth, residence address, tax code and VAT number, company name, registered office address, fixed and/or mobile telephone number, email address, PEC address, banking and payment references, by filling out the “Contact Us” form present on the Site or by sending, always optional and voluntary, email messages containing contact requests, quotation requests, spontaneous application by sending CVs or by sending any type of communication to the addresses or contacts indicated on the Site. The sending of such communications will involve the acquisition of your email address, necessary to respond to your requests, and of any other personal data transmitted by you. Such data provided by users who voluntarily interact with the Site, are used solely for the purpose of performing the service requested and are communicated to third parties only if this is strictly necessary for the execution of the service itself or required by law.
C) Cookies and Similar Technologies
The Site collects personal data through cookies. More information on the use of cookies and similar technologies is available here.
D) External Links
The Site holds links to external third-party sites, producers/suppliers of IT services with which BERTI METAL PARTS SOLUTIONS S.R.L. may have collaboration relationships. The company is not responsible in any way for the methods of collection and processing of data by such third parties and invites users to read the privacy notices provided by them.
5.3. For security purposes (spam filters, firewalls, virus detection), the information and data automatically recorded as per the previous point 5.2 letter A) may be used to block attempts to damage the Site or further harmful activities or activities constituting a crime, based on the legitimate interests of the owner and in accordance with applicable legislation.
5.4. In the case of sending Curriculum Vitae for a potential employment relationship or collaboration requests, the data are considered voluntarily provided by the user at the time of the service request. The Curriculum Vitae will be reviewed and, if they are saved or otherwise stored for future work collaborations, a specific brief information notice will be provided to the interested user according to the current regulations.
5.5. The information that users of the Site choose to make public through the services and tools made available to them is provided by the user knowingly and voluntarily, exempting the Site as well as BERTI METAL PARTS SOLUTIONS S.R.L., its directors, shareholders, employees, partners, and collaborators, from any liability regarding possible violations of the law. It is the user’s responsibility to ensure they have permissions for the input of personal data of third parties obtained, published, or shared through this Site and the user guarantees to have the right to communicate or disseminate them; it is also the user’s responsibility to ensure they have permissions for the input of any content protected by national and international regulations.
5.6. The collection and processing of personal data are conducted in compliance with the principles of legality, fairness, and transparency and in a manner to ensure their adequate security, including protection, through proper technical and organizational measures, from unauthorized or unlawful processing and from loss, destruction, or accidental damage.
5.7. The processing related to the web services of the Site is carried out mainly with automated and electronic tools and managed by the staff of BERTI METAL PARTS SOLUTIONS S.R.L., for this purpose authorized to process personal data, as well as by third parties acting as data processors specifically appointed and instructed by BERTI METAL PARTS SOLUTIONS S.R.L. (as the data controller) and related to the specific activities provided, or by independent “controllers”, authorized to access it by virtue of legal provisions, regulations, and norms.

 

6 – Purpose of the processing, legal basis, and retention period

6.1. All personal data provided by users through the Site will be processed for purposes related to the reasons for which they were collected and in particular:
A) to provide the services and products requested and respond to any information requests made by users.
B) for purposes of research/analysis on aggregated or anonymous data, thus without the possibility of finding the user, aimed at measuring the functioning of the Site, measuring traffic, and evaluating usability and interest.
C) for purposes related to the fulfilment of a legal obligation to which BERTI METAL PARTS SOLUTIONS S.R.L. is subject.
D) for purposes necessary to find, exercise, or defend a right in court or whenever judicial authorities exercise their judicial functions.
6.2. It is noted that apart from what is specified for navigation data, the user is free to provide personal data to send communications to the contacts showed on the Site, to make information requests, or for the purposes of sending commercial communications.
6.3. The legal basis for the processing of personal data for the purposes referred to in the earlier point 6.1 letter A) is the provision of a service or the response to a request that does not require consent according to the applicable regulations. The purpose referred to in the point 6.1 letter B) does not involve the processing of personal data. The purposes referred to in point 6.1 letter C) and letter D) represent lawful processing of personal data under the applicable regulations since, once the personal data is provided, the processing is indeed necessary to fulfil a legal obligation to which the controller is subject or to exercise its right to defence in court.
6.4. The retention of the information referred to in art. 5.1 will be conducted for the period strictly necessary to achieve the above purposes and in any case not exceeding the cessation of these purposes, except in the case where it is necessary to keep them for a legal obligation. The data may also be kept for the time necessary by the controller or any appointed processors to find, exercise, or defend their right in court, within the limitation period of any civil or criminal actions that could be started against them.

 

7 – Mandatory or optional nature of data provision and Consent

7.1. It is informed that, considering the purposes of the processing as illustrated above, the provision of your personal data for the purposes referred to in the earlier article 6.1, points A), B), C), D) is mandatory. Any failure to provide, partial or inaccurate provision, and/or any express refusal to process will result in the impossibility for the controller to follow up on your requests, to fulfilled your purchase order, to meet contractual obligations of supplying products and/or services, or a legal obligation to which the controller is subject or the requests of the competent Authorities.

 

8 – Categories of recipients

8.1. The personal data of the users of the Site may be shared, for the purposes specified in the earlier article 6.1, with:
A) subjects necessary for the provision of services offered by the Site, including, for example, the sending of emails, maintenance and analysis of the functioning of the Site, and other external parties, each within their specific area of competence, with whom the controller has relationships necessary for the performance of its activity or by legal obligation, to whom a specific mandate has been entrusted and for the time necessary to achieve the purposes for which the data were collected, who act, where necessary, as data processors of BERTI METAL PARTS SOLUTIONS S.R.L.; such categories include, by way of example only, system administrators, technical service providers, hosting providers, IT companies, communication agencies, etc., who are appointed, when necessary or appropriate, as external data processors.
B) persons authorized by BERTI METAL PARTS SOLUTIONS S.R.L. to process personal data who have committed themselves to confidentiality or have an adequate legal obligation of confidentiality (e.g., employees and collaborators), within the scope and limits of the functions and assignments assigned to them.
C) judicial or supervisory authorities, administrations, public agencies, and bodies, in the exercise of their functions, when required by law.
8.2. In any case, no data deriving from the web services of the Site, unless in anonymous and aggregated form, is subject to dissemination.

 

9 – Transfers

9.1. This Site may share some of the data collected with services found outside the European Union area. The controller ensures that the electronic and paper processing of personal data collected through the Site by the recipients is conducted in compliance with the applicable regulations. Indeed, transfers are based alternatively on an adequacy decision or on the Standard Model Clauses approved by the European Commission.

 

10 – Copyright

10.1. All texts, graphic components, any sound files, videos, images, animations, and more generally all the information contained on the Site are owned by BERTI METAL PARTS SOLUTIONS S.R.L. and are protected by international copyright laws and other laws concerning the protection of intellectual property.
10.2. None of the contents mentioned in the earlier paragraph may be copied, changed, or resold, in whole or in part, for profit or to gain any benefit of any kind.
10.3. Icons, trade logos, and names of third parties and products present on the pages of this Site are owned by their respective owners and are protected under copyright, patent laws, and those relating to intellectual property.

 

11 – Data Subject Rights

11.1. BERTI METAL PARTS SOLUTIONS S.R.L. intends to inform the user that, following the provisions of the GDPR, the user, as a data subject, may exercise the following rights:
a) right of access – to obtain confirmation as to whether or not personal data concerning him or her are being processed and, in such cases, to receive information relating, in particular, to: the purposes of the processing, the categories of personal data processed, and the retention period, the recipients to whom these may be communicated (Article 15, GDPR);
b) right to rectification – to obtain, without undue delay, the rectification of inaccurate personal data concerning him or her and to have incomplete personal data completed (Article 16, GDPR).
c) right to erasure – to obtain, without undue delay, the erasure of personal data concerning him or her, in the cases provided for by the GDPR (Article 17, GDPR).
d) right to restriction of processing – to obtain from the controller restriction of processing, in the cases provided for by the GDPR (Article 18, GDPR).
e) right to data portability – to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used, and machine-readable format, and to have the right to transmit those data to another controller without hindrance, in the cases provided for by the GDPR (Article 20, GDPR);
f) right to object – to object to the processing of personal data concerning him or her, unless there are legitimate reasons for the controller to continue processing (Article 21, GDPR).
g) right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
h) right to lodge a complaint with the Personal Data Protection Authority or another supervisory authority (Article 77, GDPR).
Requests can be addressed to the data controller, without any formalities or, alternatively, using the model provided by the Personal Data Protection Authority, or by sending an email to: privacy@bertimps.com

 

12 – Personal Data Security Measures Adopted

12.1. This Site processes users’ data in a lawful manner and respectful of the GDPR as well as the current Italian legislation (Legislative Decree no. 196/2003 and subsequent amendments or supplements), adopting security measures appropriate to the risk profiles mapped, aimed at preventing personal data breaches in the form of unauthorized access, disclosure, modification, or unauthorized destruction of data. The processing is conducted using computer and/or telematic tools, with organizational methods and with logic strictly related to the purposes showed in the earlier article 6.
12.2. In addition to the owner, categories of persons involved in the organization and management of the site (administrative, commercial, legal staff, system administrators, etc.) or external subjects charged with performing services on behalf of the owner in outsourcing (such as technical service providers, hosting providers, IT companies, communication agencies) who are appointed, when necessary or appropriate, as external data processors, might have access to the processed data.
12.3. The list of external data processors on behalf of the owner, as well as the list of persons authorized to process data under the direct authority of the owner, will be kept updated and can be requested at any time by writing to the owner.