Dear Website visitor, at By Carpel S.r.l. your privacy is a top priority. Any data you provide to us through the website will be processed with due care and attention. We use tools designed to ensure the security of your data, in full compliance with current data protection laws. We would like to inform you that “Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data” (hereinafter the “GDPR”) provides for the protection of natural persons with regard to the processing of personal data as a fundamental right. Pursuant to article 13 of the GDPR, we wish to inform you that:
A. CATEGORIES OF DATA: your personal data may be subject to processing as follows:
a. Automated collection of data.The computer systems and software used for running this website collect, as part of normal operations, some data (whose transmission is implicit in the use of Internet communication protocols) potentially associated with identifiable users. The data collected includes the IP addresses and/or the domain names of the computers used by users connecting to the website, the URI (Uniform Resource Identifier) addresses of the requested resources, the method used for submitting a request to the server, the size of the file received in response, the numeric status code issued by the server in response to the request (successful, error, etc.), and other parameters related to the user’s operating system, browser and computer environment, name of the internet service provider (ISP), the date and time of visit, the referral website and when you leave the site.
d. Plugins.This website does not use social media plugins and/or buttons to make it easier to share content on your favourite social network.
B. DATA CONTROLLER: the data controller is By Carpel S.r.l., Via Como 79, Brivio (LC) VAT no. 03338830130, which can be contacted by phone at 039.5320952or by emailing [email protected]
C. SOURCE OF PERSONAL DATA: The Data Controller collects personal data directly from the data subject.
D. PURPOSE AND LEGAL BASIS OF DATA PROCESSING:The purpose of and legal basis for processing your data is as follows:
1. For automatically collected data, the legal basis is the legitimate interest of the data controller and the purpose is to ensure and enhance the web browsing experience.
2. For data provided voluntarily by the user, the legal basis is consent and, for emails sent to our addresses, the purpose is so we can respond to the specific requests submitted by the user; as regards forms, the purpose is specified in the specific privacy notice.
3. For cookies and plugins: see the specific cookies policy.
E. RECIPIENTS OF PERSONAL DATA: relevant and limited to the purposes indicated, your data may be communicated to partners, consulting firms, private business, third-party technical service providers, hosting providers, IT companies, communication agencies, etc.
F. TRANSFER OF DATA TO THIRD COUNTRIES: This website may share some of the data collected with service providers located outside the European Union. In particular this happens through social media plugins and the Google Analytics service. The transfer is authorised and strictly regulated by article 45  of Regulation (EU) 2016/679, for which no specific authorisations are required.
G. DATA RETENTION PERIOD: based on the storage limitation principle (art. 5, GDPR), checks are performed on a regular basis to determine whether the data stored for the purposes for which they were collected are outdated. Specifically:
a) the data collected automatically are processed for the time strictly necessary to obtain statistical data regarding use of the website and to check its proper operation, also in terms of security or based on deadlines established by law.
b) the data voluntarily provided by the user will be stored for a period not exceeding the time required to pursue the purposes for which they are processed or based on the deadlines established by law.
H. RIGHTS OF THE DATA SUBJECT:the data subject always has the right to request from the controller access to and rectification or erasure of personal data or restriction of processing concerning the data subject or to object to processing as well as the right to data portability, the right to withdraw consent to processing, and the other rights laid down in the GDPR by simply providing notice to the controller. The data subject also has the right to lodge a complaint with a supervisory authority.
I. MANDATORY OR OPTIONAL PROVISION OF DATA: the provision of your data is mandatory while browsing our website for the purposes set out above in points D.1 and D.2, to allow the correct provision of the service. With respect to point D.3, your consent to the processing of your data is optional and shall in no way affect the provision of the service.
J. DATA PROCESSING METHODS: The personal data you provide shall be processed in full compliance with the aforementioned regulation and the obligation of confidentiality observed by the Data Controller. The data will be processed using IT tools, on paper or on any other suitable media (e.g. cloud-based systems, electronic filing and storage systems, etc.) in compliance with the appropriate technical and organisational security measures provided by the GDPR.
K. FINAL NOTES AND UPDATE METHODS:This privacy notice only applies to this website and does not apply to any other websites that the user visits via links on this website. This notice is subject to change due to the introduction of new regulations. Users are therefore invited to periodically check this page to stay abreast of the latest changes in legislation. The previous versions of this privacy notice are always available on request from the Data Controller.
L. AUTOMATED DECISION-MAKING PROCESSES:there are no automated decision-making processes