Privacy Policy
This notice describes how the personal data of users visiting the website https://www.bianchigiuseppe.it/ are processed, pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and Legislative Decree 196/2003 (“Italian Privacy Code”).
1. Data controller
The data controller is Bianchi di Pasquero Elia s.s.a., with registered office at Via Roma 12, Sizzano (NO), Italia, VAT number 02747200034. For any request concerning the processing of personal data, please write to info@paitin.it.
2. Data Protection Officer (DPO)
The data controller has not appointed a Data Protection Officer (DPO), as none of the cases in which the appointment is mandatory under Article 37 GDPR applies.
3. Types of data processed
Browsing data. During their normal operation, the computer systems that run the website acquire certain data whose transmission is implicit in the use of Internet protocols: for example the IP address, the type of browser, the operating system, the pages visited, and the date and time of the request. These data are used to ensure the operation and security of the website.
Cookies and other tracking tools. For information on the cookies and similar tools used by the website, please refer to the Cookie Policy.
4. Purposes, legal bases and retention periods
The data are processed for the purposes indicated below, each based on the corresponding legal basis.
| Purpose | Legal basis | Retention |
|---|---|---|
| Operation and security of the website and prevention of abuse | Legitimate interest of the data controller in ensuring the operation and security of the website (Art. 6(1)(f) GDPR) | 6 months |
At the end of the periods indicated, the data are deleted or anonymised. The data may be kept longer only if necessary to comply with legal obligations or for the establishment, exercise or defence of legal claims.
5. Processing methods
The data are processed using IT tools and, where necessary, paper records, adopting appropriate technical and organisational measures to ensure their security and confidentiality, pursuant to Article 32 GDPR. The data are processed by persons authorised and instructed by the data controller.
6. Recipients of the data
The data may be disclosed to the following parties, who normally act as data processors under a contract with the data controller (Article 28 GDPR) or, in the cases indicated in their respective privacy notices, as independent controllers:
| Service | Provider | Provider’s privacy notice |
|---|---|---|
| Website hosting service provider | Vercel Inc. | Privacy · Cookies |
| Adobe Fonts (typefaces) | Adobe Systems Software Ireland Limited | Privacy notice |
| Hosting and cloud services (SiteGround) | SiteGround Hosting Ltd | Privacy · Cookies |
The data may also be received by consultants and providers who assist the data controller (for example for website maintenance or accounting obligations), as well as by public authorities in the cases provided for by law. The up-to-date list of data processors may be requested from the data controller.
7. Transfer of data outside the European Economic Area
Some of the providers listed may process data outside the European Economic Area. In such cases, the transfer takes place on the basis of an adequacy decision of the European Commission, such as the EU-US Data Privacy Framework for certified US providers, or of other appropriate safeguards under Articles 45-46 GDPR, such as the Standard Contractual Clauses.
| Service | Provider | Transfer and safeguards |
|---|---|---|
| Adobe Fonts (typefaces) | Adobe Systems Software Ireland Limited | Possible transfer to the USA, covered by the EU-US Data Privacy Framework. |
| Hosting | Vercel Inc. | Servers in the United States: EU-US Data Privacy Framework (certified provider) |
8. Nature of the provision of data
The provision of browsing data is necessary in order to use the website. The provision of the data requested in forms is optional, but the fields marked as mandatory are necessary to follow up on the request: without them it will not be possible to reply. Consent for marketing purposes and for non-technical cookies is always optional, and refusing it has no consequences on the use of the website.
9. Minors
The website and the services offered are not intended for minors under the age of 14, the minimum age required in Italy to give consent independently to the processing of data in relation to online services (Article 8 GDPR and Article 2-quinquies of the Italian Privacy Code). Minors under the age of 14 must not provide personal data through the website. If the data controller becomes aware that it has collected data from a minor under 14 without the consent of the holder of parental responsibility, it will delete them without delay. Parents or guardians who believe this has happened may write to info@paitin.it.
10. Rights of the data subject
The data subject may at any time exercise the rights provided for in Articles 15-22 GDPR:
- access: to know whether and which data are being processed and to receive a copy;
- rectification: to correct or complete inaccurate or incomplete data;
- erasure: to obtain the erasure of the data, in the cases provided for;
- restriction: to request that the data only be stored, without any other use, in the cases provided for;
- portability: to receive the data provided in a structured format or have them transmitted to another controller;
- objection: to object to processing based on legitimate interest and, at any time, to direct marketing;
- withdrawal of consent: to withdraw the consent given at any time, without affecting the lawfulness of processing carried out before its withdrawal.
Requests may be sent to info@paitin.it. The data controller will reply within one month of receipt, a period that may be extended by two months in particularly complex cases, as provided for by Article 12 GDPR.
The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome – www.garanteprivacy.it) or with the supervisory authority of the Member State in which they reside or work.
11. Automated decision-making
The data are not subject to decision-making based solely on automated processing, including profiling, which produces legal effects concerning the data subject or similarly significantly affects them (Article 22 GDPR).
12. Artificial intelligence
The data controller does not use artificial intelligence systems to process personal data collected through the website. In the future, it may use artificial intelligence tools to analyse the data collected for the data controller’s internal information purposes: in that case, this notice will be updated before the processing begins.
13. Changes to this notice
The data controller may amend this notice, including as a result of changes in legislation or in the services used. Users are invited to consult this page periodically.
Last updated: 21/10/2026