The purpose of the privacy policy is to provide maximum transparency regarding the information that the site collects and the purposes and methods of use.  

In compliance with the obligations deriving from the General Regulation for the protection of personal data n. 2016/679 (GDPR), in particular articles 13 and 14, and national legislation, we respect and protect the confidentiality of those interested in the processing (visitors and users), making every possible and proportionate effort not to infringe their rights.   

 

1 - Subjects of the treatment  

​

The data controller of personal data pursuant to current laws is:  

bc consulting which can be contacted by email info@bc-consultingstudio.it or by phone +393334407928.  

 

2 – Types of data collected 

​

This site collects data directly from interested parties, in two ways.  

 

a) Data collected automatically 

 

While Users are browsing, the following information may be collected and stored in the server log files (hosting), in some cases also in the site database:  

- Internet Protocol (IP) address; 

- browser type; 

- parameters of the device used to connect to the site; 

- name of the Internet Service Provider (ISP); 

- date and time of visit; 

- web page of origin of the visitor (referral) and exit; 

- possibly the number of clicks. 

 

This data is used for statistical and analytical purposes, in exclusively aggregate form. None of this information is related to the natural person-user of the site, and does not allow identification in any way. The IP address is used exclusively for security purposes and is not cross-referenced with any other data.

 

b) Data provided voluntarily  

​

The site may collect other data in the event of voluntary use of services by Users, such as commenting services, communication services (contact forms, sending newsletters), purchasing services (cart).  Such data, used exclusively for the provision of the requested service, may be the following:  

- name and surname;  

- date and place of birth;  

- email address;  

- identity document;  

- VAT number and/or tax code;  

- payment methods and bank details.  

 

The User exempts the Owner from any liability regarding any violations of the law, guaranteeing that he has the right to communicate or disseminate the data. It is up to the User to verify that they have the permissions and rights to enter personal data of third parties or content protected by national and international regulations (e.g. copyright).  

The services provided by the site are generally not aimed at persons under 16 years of age, and therefore we do not knowingly record their data.  

 

- Methods of data processing 

​

The processing of personal data is carried out mainly using IT and telematic tools in compliance with the regulations in force and in particular with the principles of correctness, lawfulness, transparency, relevance, completeness and non-excessiveness, accuracy and with organization and processing logic strictly related to the purposes pursued and in any case in such a way as to guarantee a high level of security, integrity and confidentiality of the data processed, in compliance with organisational, physical and logical measures and in compliance with the provisions of the art. 32 of the European Regulation 2016/679 (GDPR) as well as sector practices.  

The company does not carry out profiling activities on the data of its users.

 

3 - Purpose of the processing  

​

The data is used for the purposes for which it was collected, unless it is reasonably possible to use it for compatible purposes under applicable laws.    

 

– Provision of the service 

The data is mainly used for the execution of commercial relationships and the provision and organizational management of the services requested by Users, as well as for the fulfillment of related legal obligations and for the protection of contractual rights.    

 

– Statistics (analysis) 

The data is used in an exclusively aggregated and anonymous form in order to verify the correct functioning of the site, to improve the online store and the platform.  None of this information is related to the natural person concerned (user or visitor to the site), and does not allow identification in any way.    

 

- Safety 

The data is processed in order to protect the security of the site (anti-spam filters, firewalls, virus detection), of users and their information, and to prevent or unmask fraud or abuse (e.g. SPAM) to the detriment of the website. They are automatically recorded and may possibly also include personal data (IP address) which could be used, in accordance with the laws in force on the matter, in order to block attempts to damage the site itself or to cause damage to other users, or in any case harmful or constituting activities crime. These data are never used to identify or profile the User and are deleted periodically.

​

– Marketing/Advertising 

The data is used, subject to consent, to keep users of the services informed about the activities, events, promotions and offers promoted by the Owner.   

The newsletter with promotional content is, however, provided directly by the data controller, using MailChimp which processes data on behalf of the data controller.  

 

– Shopping 

The data is processed to manage orders, provide products and services, manage the guarantee on products and services, process payments, communicate with users regarding orders, products, services and promotional offers, update registers and, in general, manage the user accounts, display content such as wishlists and customer reviews, and recommend products and services that may be of interest to users.   

 

- Ancillary activities  

The data may be communicated to third parties who perform functions necessary or instrumental to the operation of the service (e.g. companies that manage the information system and the website), and to allow third parties to carry out technical, logistical and other activities on our behalf.

 

4 – Legal basis of the processing 

​

The  data  relating  to  the  performance  of  economic  activities  and  those  functional  or  instrumental  to  the  performance  of  economic  activities (provision of services and shopping) are processed on the fulfillment of contractual and pre-contractual obligations. The refusal to provide such data precludes the execution of the contract and exposes the interested party to possible liability for contractual breach.   

 

Marketing/advertising data are processed based on user consent. The granting of consent takes place via the banner placed at the bottom of the page, with which visitors/users consent to the processing of their personal data in relation to the methods and purposes described below, including any disclosure to third parties if necessary for the provision of a service, or through communication or service request forms (e.g. newsletter) which collect further specific consent with respect to the purpose of the service.   

 

The provision of data and therefore consent to the collection and processing of data is optional, the User can deny consent, and can revoke at any time a consent already given (via the banner at the bottom of the page or the browser settings to cookies, or the Contact link). However, denying consent may make it impossible to provide some services and the experience of browsing the site would be compromised.   

 

The data for the security of the site and company assets and for the prevention of abuse and SPAM, as well as the data for the analysis of site traffic (statistics) in aggregate form, are processed on the basis of the legitimate interest of the Data Controller in security of the site and user information. The processing of data for commercial communications relating to products and/or services similar to those already purchased and/or subscribed to by the user (soft spam) is also based on a legitimate interest of the Owner.

 

5 - Place of processing 

​

The data collected by the site are processed at the headquarters of the Data Controller, and at the web hosting datacenter. The web hosting is responsible for data processing by processing the  data on behalf of the owner, it is located in the European Economic Area and acts in accordance with the  European standards.  

 

6 - Data retention period 

​

The data are kept for the time necessary in relation to the purposes for which they were collected, and in any case no longer than the times prescribed by law. In the absence of rules or practices that provide for different retention times, the data will be used, balancing the interests of the owner and the rights of the interested parties, for a time appropriate to the interest expressed by the interested party and kept for the minimum period necessary in compliance of the indications contained in the sector regulations. The data may be processed for further periods in the event that the processing is necessary to defend or assert a right or by order of the authorities.  

 

7 – Data recipients 

​

The data collected are not transferred, but may be communicated to third parties who provide services or otherwise process data on behalf of the Data Controller, such as: suppliers of IT and functional services of the site; outsourced or cloud computing service providers; payment or credit service providers;  professionals or consultants. 

The third parties process the User's data exclusively for the purposes indicated in this information and in compliance with the provisions of the applicable legislation.

 

Other third parties who act as independent data controllers may become aware of the Users' data, also using the data for purposes other than those of this site. For example:  

- Facebook, Google (Youtube), and in general social networks that use the data conveyed through social plugins also for advertising and marketing purposes (e.g. fan page); 

- other third-party service providers who operate as independent owners.  

The independent data controllers are bound by European and national regulations regarding the protection of personal data, and are personally responsible for them in full autonomy.  

By giving consent to the use of the services indicated, through the banner at the bottom of the page or through the appropriate forms or boxes, the User expressly gives consent to the communication of the data to the independent and joint data controllers for the purposes indicated in this information and in their respective policies.  

The data could be provided to judicial and administrative authorities in the event of a legitimate request or to public bodies or agencies in the cases provided for by law (e.g. tax data).

 

8 – External services and cookies 

​

The site also uses cookies (unique identifiers) on mobile systems (smartphones and tablets), which are recorded on the user's terminal or allow access to information on the user's terminal. 

The  unique  identifiers  allow  information  to  be  stored  on  visitors' preferences, they are used in order to verify the correct functioning of the site and to  improve its functionality by customizing the content of the pages based on the type of browser  used, or to simplify navigation by automating the procedures (e.g. Login, site language), and finally for the analysis of the use of the site by visitors.

 

This site uses the following categories of cookies:  

- technical cookies, used for the sole purpose of transmitting an electronic communication,to  guarantee  the  correct  display  of  the  site  and  navigation  within  it. Furthermore, they allow us to distinguish between the various connected users in order to provide a requested service to the right user (Login), and for site security reasons. Some of these cookies are deleted when the browser is closed (session cookies), others have a longer duration (such as the cookie necessary to retain the user's consent in relation to the use of cookies, which lasts 1 year).  For these cookies no consent is required;  

- analysis cookies, used directly by the site manager to collect information, in aggregate form, on the number of users and how they visit the site itself. They are assimilated to technical cookies if the service is anonymized. 

- profiling and marketing cookies, used exclusively by third parties other than the owner of this site to collect information on user behavior during navigation, and on interests and consumption habits, also for the purpose of providing personalized advertising.

 

8.1 – Consent to the use of cookies 

​

By clicking OK on the banner present upon first access to the site, the visitor expressly consents to the use of cookies and similar technologies, and in particular to the registration of such cookies on his terminal for the purposes indicated above, or to access information via cookies. on your terminal.  

​

8.2 – Refusal or revocation of consent to cookies 

​

The User can refuse the use of cookies and at any time can revoke a consent already given. Since cookies are connected to the browser used, they can be disabled directly from the browser, thus refusing/revoking consent to the use of cookies, or via the banner located at the bottom of the page.   

 

DISABLING COOKIES MAY PREVENT THE CORRECT USE OF SOME FUNCTIONS OF THE SITE ITSELF, in particular the services provided by third parties may not be accessible, and therefore may not be viewable:  

- YouTube videos or other video sharing services;  

- the social buttons of social networks; 

- Google maps; 

- payment and financial transaction services.

 

8.3 - Third party services and related cookies 

​

This site also acts as an intermediary for third-party cookies (such as buttons for social networks), used to provide additional services and features to visitors and to simplify the use of the site itself, or to provide personalised advertising. This site has no control over their cookies entirely managed by third parties and does not have access to the information collected through said cookies. Information on the use of these cookies and their purposes, as well as on how to disable them, are provided directly by third parties.

 

Please remember that generally tracking users does not involve identification of the same, unless the User is already registered with the service and is also already logged in, in which case it means that the User has already expressed his consent directly to the third party when registering for the relevant service (e.g. Facebook).  

 

Google Analytics is used to analyze the use of the site by users, compile reports on site activities and user behavior, check how often users visit the site, how the site is tracked and which pages are visited most frequently.  

Personal data collected: Cookies and Usage data.

Further information on Google Analytics can be found at https://support.google.com/analytics

 

It is possible to selectively disable the action of Google Analytics by installing the appropriate component provided by Google on your browser (opt out): 

https://tools.google.com/dlpage/gaoptout

 

 

9 - Security measures 

​

We process the data of visitors and users in a lawful and correct manner, adopting appropriate security measures aimed at preventing unauthorized access, disclosure, modification or destruction of data.

However, it is essential that the User adopts appropriate protection measures to protect the credentials for accessing the service, thus avoiding unauthorized access.  

 

10 - Updates 

​

The possible entry into force of new sector regulations or practices, as well as the updating of the user services, could lead to the need to modify the methods and terms described in this Information. It is therefore possible that this document may undergo changes over time.