PRIVACY POLICY Information document in accordance with and for the purposes of Article 13 of Regulation (EU) 2016/679 (GDPR)


The personal data provided will be processed, in compliance with the conditions of lawfulness pursuant to art. 6 of Reg. UE 2016/679, (European Regulation for the protection of personal data) and is also inspired by the provisions of Directive 2002/58/EC, as updated by Directive 2009/136/EC, in the matter of Cookies as well as the provisions of the Provision of the Data Protection Authority of 08.05.2014 on cookies.

The processing will take place in automated and manual form, with methods and tools designed to ensure maximum security and confidentiality.

In compliance with the provisions of art. 5 paragraph 1 letter. e) of Reg. EU 2016/679 the personal data collected will be stored in a form that allows the identification of data subjects for a period of time not exceeding the achievement of the purposes for which the personal data are processed. The retention of personal data provided depends on the purpose of the processing, as indicated below.

Personal data that can be processed

«Personal data»: any information relating to an identified or identifiable physic person («interested»); the physical person who can be identified, directly or indirectly, shall be considered identifiable; with particular reference to an identifier such as name, identification number, location data, online identifier or one or more elements characteristic of its physical, physiological, genetic, psychological, economic, cultural or social identity; (C26, C27, C30).

Navigation Data

The computer systems and software procedures responsible for the operation of this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

Data communicated by the data subject

The optional, explicit and voluntary sending of messages to the contact addresses, as well as the compilation and forwarding of the forms on the website of the Data Controller, involves the acquisition of the contact data of the sender, necessary to respond, as well as all personal data included in communications.

Data Controller (hereinafter “Data Controller”)


Indirizzo VIALE MATTEOTTI 28 A – 24050 – GRASSOBBIO – BG


Purpose A)

Browse the website

  • LEGAL BASIS: Legitimate interest art. 6 lett. f) and considering 47: the processing is necessary for the pursuit of the legitimate interest of the controller or third parties, provided that the interests or fundamental rights and freedoms of the data subject that require the protection of personal data do not prevail, taking into account the reasonable expectations of the data subject based on his relationship with the controller. Activities strictly necessary for the functioning of the website and the provision of navigation service on the platform.

• DATA STORAGE PERIOD: Up to the duration of the browsing session. For navigation please refer to the specific cookie policy


Purpose B)

Possible compilation of the data collection form for contacts

  • LEGAL BASIS: Based on the implementation of pre-contractual measures also taken at the request of the interested party


Data Recipients or Data Categories Recipients

The personal data provided will be shared with individuals, who will process the data as managers (art. 28 of Reg. EU 2016/679) and/or as physical people acting under the authority of the Data Controller and the manager (art. 29 of Reg. EU 2016/679) for the purposes listed above.

Particularly, data will be shared with:

  • Entities providing services for the management of the information system, e-mail and website management;
  • Professionals or third-party companies that collaborate with the Data Controller for consultancy activities;
  • Competent authorities for compliance with legal obligations and/or provisions of public bodies, on request.

The list of Managers responsible for the data treatment is constantly updated and available by writing to the data controller.


Data transfer to a third country

Personal data provided will not be transferred outside the European Union.


Nature of data provision and refusal

Except as specified for navigation data (which are necessary in order to allow navigation of the website), the user is free to provide personal data.


The provision of data is optional as regards the compilation of the contact form. Failure to provide data will make it impossible for the data controller to comply with your request.


Rights of data subjects

As a data subject, you have the rights referred to in art. 15-21 GDPR and, precisely, the right to obtain from the data controller confirmation that personal data concerning him or her are being processed or not and, in this case, access to personal data and the following information:

  • Purposes of Processing;
  • the categories of personal data concerned;
  • the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
  • where possible, the expected period for which personal data will be stored or, if not possible, the criteria used to determine that period;
  • the existence of the right to request the controller to rectify or delete personal data or to restrict the processing of personal data concerning him or to oppose such processing;
  • the right to submit a complaint with a supervisory authority;
  • if personal data are not collected from the data subject, any information available about their source;
  • the existence of automated decision-making processes, including profiling, and, at least in those cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the data subject



The information is not to be considered valid for other websites that may be consulted through links on the websites of the owner, which is not to be considered in any way responsible for the websites of third parties.


Last Update: 03/2023