PRIVACY POLICY

Hereby Bed & Bike Andrate Srl, with headquarters in Via del Borgo, 59, 10010 Andrate TO , the data controller, describes how the website https://andratexperience.it/ is managed with regard to the processing of personal data of those who consult it and who, through it, may provide personal data. We therefore provide you with some information regarding how we use any personal data you may provide to our company through the site. This information is provided only for the website of https://andratexperience.it/ and not also for other websites that may be consulted by the user through links.

Types of data processed

Data voluntarily provided by the user. The optional, explicit and voluntary sending of electronic mail to the email addresses indicated on this site or forms to be filled out on the site entails the subsequent acquisition of the sender’s email address, which is necessary to respond to requests, as well as other personal data included in the missive or in the completed form. Specific summary disclosures will be progressively reported or displayed on pages of the site set up for particular on-demand services.

Navigation data. The computer systems and software procedures used to operate this website acquire, in the course of their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. These data (such as domain names, IP addresses (not acquired) , operating system used) are not accompanied by any additional personal information.

Purpose and legal basis for processing

Dati forniti volontariamente dall’utente. Personal data are collected directly from the data subjects who freely and voluntarily provided them. Personal data contained in inquiries are processed for the purpose of responding to the inquiries received. The data are also processed in order to keep track of contacts and any business relationships that have taken place and may be used, with the express and specific consent of the person concerned, to send commercial and promotional communications without prejudice to the right of the person concerned to object, at any time, to such sending. The legal basis for the processing is-as the case may be-Article 6 n. 1 letter a b and/or f of Regulation 2016/679/EU i.e. the performance of a contract to which the data subject is a party or the performance of pre-contractual measures taken at the request of the data subject or the legitimate interest of the data controller in keeping track of the business relations that have taken place in order to carry out its business activities. In the cases expressly stated, the legal basis is the consent freely given by the data subject.
Navigation data. This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to monitor its proper functioning and to protect our rights in case of hypothetical computer crimes against the site. The legal basis legitimizing the processing is Art. 6 n. 1 letter f i.e. the legitimate interest of the owner to make the functionality of the site usable as a result of user access and to verify its usability and proper functioning and use and, where necessary, to protect its rights.

Duration of treatment
Personal data of data subjects will be kept for as long as necessary to achieve the purpose for which it was processed.

Method of treatment
Personal data are processed both through paper media and through the use of electronic/computer systems and with the use of measures to ensure confidentiality and to prevent access by unauthorized parties.

Subjects and categories of subjects to whom the data may be disclosed
The processing of collected data is carried out by employees, identified and authorized for this purpose, according to specific instructions given in compliance with applicable regulations.
The data collected, if it is necessary or instrumental to the above purposes, may be processed by third parties appointed as external data processors or, as the case may be, communicated to them as autonomous data controllers for the sole purpose of fulfilling your requests and providing you with the information for which you have expressed interest.

Nature of data collection and consequences of failure to provide data
Apart from what is specified for navigation data, the provision of personal data is in some cases optional in others mandatory. Failure to provide mandatory data will result in our inability to proceed with responding to requests made. The provision of personal data by the data subject, in cases where it is optional, is appropriate to enable the holder to pursue the stated purposes, but failure to provide it has no consequences.

Transfer out of the EU
Except as may be indicated in specific disclosures provided in connection with certain services, there are no plans to transfer data collected through the site outside the European Union.

Automated decisions
No automated decision-making processes are implemented that affect data subjects.

Rights of the data subject
The data subject has the right to request from the data controller access to and rectification or erasure of personal data concerning him or her or the restriction of its processing as well as to object to its processing in addition to the right to data portability as provided in Regulation 2016/679/EU. In cases where processing is based on consent, the consent to process the data provided can be revoked at any time without affecting the lawfulness of processing based on the consent given before revocation. The data subject also has the right to lodge a complaint with the relevant supervisory authority, Garante per la protezione dei dati personali. Requests to exercise rights may be sent to bedebikeandrate@gmail.com specifying in the request the right the person wishes to exercise along with a valid e-mail address to which to deliver the response.