Privacy e cookie policy

WHY THIS NOTICE

The information is provided only for the bemasnc.com website (hereinafter also referred to simply as the “Site”) and not for other websites that may be consulted by the user through links on the Site. The information is provided pursuant to and for the purposes of Art. 13 of EU Regulation 2016/679 (hereinafter referred to as “GDPR”) and is also inspired by Recommendation no. 2/2001 of 17 May 2001, Opinion no. 04/2012 on Cookie Consent Exemption of 7 June 2012 and the Working Document 02/2013 providing guidance on obtaining consent for cookies of 2 October 2013 that the European authorities for the protection of personal data, gathered in the Group established under Art. 29 of Directive no. 95/46/EC, have adopted to identify certain minimum requirements for the collection of personal data online, and, in particular, the methods, timing and nature of the information that data controllers must provide users when they connect to web pages, regardless of the purpose of the connection.

THE data controller

Following consultation of this Site, data relating to identified or identifiable natural persons (so-called data subjects) may be processed.
The Data Controller is BEMA SNC (hereinafter referred to as “Company” or “Owner”), in the person of its legal representative pro tempore, with registered office in Via Romans, 3 – 33084 Cordenons PN – Phone +39 (0434) 1700214 – email: info@bemasnc.com

Provision of data

Apart from what is specified below for navigation data, the user is free to provide personal data contained in any information request forms or registration forms. Failure to provide them may make it impossible to obtain the information requested.
The data marked as mandatory in the forms on the Site are essential to process the request or to provide the service or performance requested to BEMA SNC.
The conferment of data and the relative consent to the treatment is optional with regard to the sending of the newsletter. The consent given may be revoked at any time without prejudice to the lawfulness of the processing carried out previously.

Categories of recipients

As part of the pursuit of the purposes listed above, the data provided may be known by the Data Controller’s collaborators specifically authorized to process them as persons in charge. These subjects are bound to secrecy and confidentiality also on the basis of specific Internal Regulations. The data strictly necessary for accounting and financial operations may be communicated to a trusted external professional on the basis of a legitimate interest. Where strictly necessary, the data may be communicated to couriers or forwarding agents (for the dispatch of goods), banks (for payments), insurance companies (for the management of any insured risks) and in general to all those subjects to whom the communication of the data is indispensable for the achievement of the above mentioned purposes.

Methods of processing

The data will be processed with the help of manual and electronic instruments, also in automated way. The data are not subject to any automated decision-making process, including profiling.
The processing, moreover, concerns data related to the performance of economic activities, treated in compliance with current legislation on business and industrial secrecy.
Should the processing also concern personal data falling within the category of particular data (Art. 9 GDPR – cd. “sensitive data”, i.e. data revealing racial and ethnic origin, religious, philosophical or other beliefs, political opinions, membership of political parties, trade unions, associations or organizations of a religious, philosophical, political or trade union, as well as personal data disclosing the state of health, life and sexual orientation) the processing will be carried out within the limits indicated by the General Authorisations of the Guarantor and by the subsequent equivalent legal provisions, according to the modalities provided for by EU Regulation 2016/679 and for the purposes strictly necessary for the regular performance of the activity, of the operations related to the supply of products/services and the fulfilment of contractual and/or legal/regulatory obligations.
Users are invited to avoid the insertion of particular or judicial data (art. 9-10 GDPR) superfluous, as this could lead to the destruction of the message and the failure to fulfill the request.
The processing operations connected to the web service of this Site are carried out by the owner through internal collaborators and through the external consulting company appointed as data processor.

Data retention period

The data are processed and stored for the time required by the purposes for which they were collected. Therefore:

• Personal data collected for purposes related to the execution of a contract or a pre-contractual request between the Owner and the User/Customer will be kept until the complete execution of such contract and even afterwards for legal obligation (e.g. 10 years for invoices) or to protect or enforce or defend a right of the Owner.
• When the processing is based on the User’s consent, the Owner may retain the personal data for a longer period of time, until such consent is revoked. In addition, the Data Controller may be obliged to retain Personal Data for a longer period in compliance with a legal obligation or by order of an Authority.
• The data processed for legal obligation are processed for the entire duration provided for by the law applicable to each individual treatment.
• The data processed on the basis of a legitimate interest are subject to processing until the interested party expresses his opposition (e.g. sending commercial communications to its customers – Art. 130 Paragraph 4 of Legislative Decree 196/2003).
• At the end of the retention period personal data will be deleted. Therefore, at the end of this period the right of access, cancellation, rectification and the right to portability of the data can no longer be exercised.

Rights of interested parties

The data subjects (the natural persons to whom the personal data refer) have the right at any time to obtain from the Data Controller confirmation as to whether or not data relating to them is being processed, to know the source of the data, to request access to the personal data, to verify its accuracy or request its rectification, limitation, portability, to oppose its processing, not to be subject to an automated decision-making process (Art. 15-22 EU Regulation 679/2016). It is the right of the data subject to lodge a complaint with a European Supervisory Authority (in Italy it is the Guarantor for the protection of personal data based in Rome) or to lodge a judicial appeal (Art. 12 Paragraph 4 GDPR).
Requests should be addressed to the address of the company headquarters, also by writing to info@bemasnc.com. It is necessary that the data subject provides useful information to ascertain your identity, otherwise the Data Controller may not be able to satisfy the request of the data subject (Art. 12 Paragraph 2 GDPR).

Data processing place

The processing operations connected to the web service (“contacts”) of this Site take place at the above mentioned premises and are handled by the owner and by the consulting company appointed as responsible for the processing.
In order to send commercial and promotional communications to those who are already Customers (on the basis of a legitimate interest) or to those who have expressly consented (to send newsletters or communications for marketing purposes), the Owner uses the service offered by MailChimp (based in Atlanta, Georgia, United States). The collected data is stored on MailChimp’s secure servers. In accordance with MailChimp’s Privacy Policy, your data will never be used by MailChimp for purposes other than sending communications (e.g. it will not be sold to third parties, nor will Mailchimp directly contact the recipients of the Holder’s communications). MailChimp uses appropriately authorized operators to maintain the service and in the performance of these tasks they may have access to your data. Anyway, the guarantees provided by MailChimp privacy policy are valid. When the owner will send the emails, the data will be retrieved through the tools provided by MailChimp and thanks to them will be sent to the users.
The Owner has decided to use this service on the basis that MailChimp adheres to the Privacy Shield. Between Europe and the United States there is an agreement called “Privacy Shield” which represents a self-certification mechanism to which American companies can voluntarily adhere guaranteeing security measures adequate to European privacy standards..
In particular, the user may at any time and free of charge change his or her preference and ask to stop receiving commercial and promotional communications, using the forms on the Site and in the individual messages sent or by contacting the data controller directly. Following this request, the user’s data will be deleted.

Types of data processed

Automatically collected information

The computer systems and software procedures used to operate this Website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, make it possible to identify users, the computers used by users connecting to the Site, the addresses in URI (Uniform Resource Identifier) notation of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server server (successful, error, etc.) and other parameters related to the operating system and the user’s computer environment.
By visiting the Site the following information is automatically collected:

• User Hostname. The hostname or Internet Protocol address of the user requesting access to the Site.
• Header http and HTTPS, and the string “user agent” which includes: the type and version of browser used and the operating system with which the browser works.
• System date. The date and time of the user’s visit.
• Complete request. The exact request made by the user.
• Method. The method of request used.
• Universal Resource Identifier (URI). The location of the resources in the server.
• The request string of the URI, i.e. everything after the question point in the URI.
• Type of device used to consult the Site.
• Protocol. The transmission protocol and the version used.

The information collected automatically by the Company, through access to the Website, is used to improve the quality of service offered to users of the Website. This information is collected for the purpose of carrying out statistical surveys (anonymous) to determine which data/contents are more or less useful/interesting for the users and therefore to improve the effectiveness of the material available on the Site.

Data provided voluntarily by the User

The optional, explicit and voluntary sending of e-mail messages to the addresses indicated on this Site involves the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message.
Apart from what has been specified for information automatically collected, the user is free to provide the personal data contained in the request forms. Some information (name and surname, company, telephone, e-mail, text of the message) are indicated as mandatory, as they are necessary to meet the requests expressed. If they are not provided, it may be impossible to obtain the information requested.
For the direct collection of such data, it will be the visitor to release his or her personal data and the relative consent to its processing in relation to the individual services and/or performances requested from the Company such as: registration to the Website or reserved areas, information request, newsletter. The consent, where given, may subsequently be revoked at any time without prejudice to the lawfulness of the processing carried out previously.

Cookies

What are Cookies?

Cookies are small text strings that the sites visited by the user send to the user’s terminal (usually to the browser), where they are stored and then retransmitted to the same sites the next time the same user visits. During navigation on a Site, the user may also receive cookies on his terminal that are sent by different sites or web servers (so-called “third parties”), which may contain certain elements (such as, for example, images, maps, sounds, specific links to pages of other domains) on the Site that the user is visiting. Cookies, usually present in the browsers of users in very large numbers and sometimes with characteristics of wide temporal persistence, are used for different purposes: execution of computer authentication, session tracking, storage of information on specific configurations regarding users accessing the server, etc.

What are the main types of Cookies?

In this regard, and for the purposes of provision no. 229/2014 of the Privacy Guarantor, there are therefore two macro-categories: “technical” cookies and “profiling” cookies.

1. Technical cookies. Technical cookies are those used for the sole purpose of “transmitting a communication over an electronic communications network, or to the extent strictly necessary for the provider of an information society service explicitly requested by the subscriber or user to provide such service”. They are not used for further purposes and are normally installed directly by the owner or operator of the Website. They can be divided into browsing or session cookies, which guarantee normal navigation and use of the Website (allowing, for example, to make a purchase or authenticate to access reserved areas); analytics cookies, similar to technical cookies when used directly by the Website operator to collect information, in aggregate form, on the number of users and how they visit the Website; functionality cookies, which allow the user to navigate according to a series of selected criteria (for example, language, products selected for purchase) in order to improve the service provided to the user. The installation of such cookies does not require the prior consent of the user.
2. Profiling cookies. b. Profiling cookies are designed to create user profiles and are used to send advertising messages in line with the user’s preferences when surfing the web. Due to the particular invasiveness that such devices may have within the privacy of users, European and Italian legislation provides that the user must be adequately informed about their use and thus express their valid consent. This Site does not make use of profiling cookies..

Session e Persistent Cookies

Session Cookies, contain Information that is used in your current browser session. These cookies are automatically deleted when you close your browser. Nothing is stored on your computer beyond the time you use the Site.
I Persistent Cookies, are used to store information that is used in between visits to the Website, or used for technical purposes and to improve navigation on the Website. This data allows the sites to recognize that you are a known user or visitor and adapt accordingly. Persistent” cookies have a duration that is set by the Website and may vary from a few minutes to several years. The anti-tracking setting of any browser does not affect the consultation of our Site.

First and third party cookies

It is necessary to take into account the different entity that installs cookies on the user’s terminal, depending on whether it is the same operator of the Site that the user is visiting (so-called “first party”) or a different Site that installs cookies through the first (so-called “third party”). The first party Cookies are created and readable by the Site that created them. Third party Cookies, on the other hand, are created and readable by domains outside the Site and whose data is stored by the third party. This Site uses first-party cookies of a technical nature, so, as mentioned above, consent is not required, but only this policy.
For more information on this type of advertising based on the tastes of users, deriving from third party cookies, you can visit the third party sites at the links below. At www.youronlinechoices.com and www.aboutads.info/choices/ you will also find information on how behavioural advertising works and a lot of information about cookies as well as the steps to follow to protect your privacy on the internet.

Third Party Cookies
This website uses Google Analytics, a web analysis service provided by Google, Inc. (“Google”). For more information, please visit Google’s page on the use of cookies for Analytics (Link).
Google Analytics uses cookies to enable the anonymous collection and analysis of information about your use of the website (including your IP address). This information is transmitted to Google, which processes it for the purpose of compiling reports on website activity for the website. Google does not associate your IP address with any other data held by Google or attempt to link an IP address with the identity of a computer user. However, in order to offer website visitors the possibility to prevent the use of their data by Google Analytics, Google has developed the browser add-on for the deactivation of Google Analytics JavaScript. (https://tools.google.com/dlpage/gaoptout?hl=en).

The Site also allows you to express your preferences through interaction with other applications (“social”). For example, by clicking on the respective “key” (button) on the pages of the Site, you can access your Facebook profile, LinkedIn and express, share or report your preference regarding the content of the Site or the Company’s social pages. In this case, also in order to know the use that these applications make of your data, the information prepared by the company owner of the aforementioned application is valid.
Facebook: Privacy policy – Cookie
LinkedIn: privacy policy – Cookie
The Site also uses Google Maps to provide detailed information on how to locate our location. We use Google Maps tools on the basis that Google respects its privacy policy and terms of service.
The Site allows the use of YouTube, owned by Google Inc., only to allow users of the Site to enjoy the contents disseminated through the BEMA SNC YouTube channel. More information on how Google uses cookies can be found at http://www.google.com/policies/technologies/types/.
The owner does not guarantee that the links to the aforementioned policies are always working, and this is due to any updates that are not dependent on the owner, so the user is required to consult and verify the current text personally. The owner is not responsible for any malfunctions or conditions that do not allow the consultation of the policies of these applications.
The longevity of cookies, therefore, ranges from the individual session to two years from visiting the page.

SPAM protection
This type of service analyzes the traffic of this Site, potentially containing personal data of users, in order to filter it from parts of traffic, messages and content recognized as SPAM.
For the protection against SPAM on contact forms the Site uses the third party component Google reCaptcha of Google Inc.
The use of the reCAPTCHA system is subject to Google’s privacy policy and terms of use.
Personal Data collected: Cookies and Usage Data.
Place of Processing: USA – Privacy Policy.

Management of cookies in the configuration of the major browsers used

Manage cookies in Google Chrome
Manage cookies in Internet Explorer
Manage cookies in Mozilla Firefox
Manage cookies in Safari
Manage cookies in iOS
We indicate again the following Site to analyze, more generally, and manage your preferences in terms of (online behavioural advertising) http://www.youronlinechoices.com.

Last update of this policy: 31 October 2020.