Privacy Policy
information on the processing of personal data
In accordance with current regulations on the protection of personal data, visitors to this website (hereinafter also referred to as the “site”) are informed about the processing of their personal data collected and processed during navigation of the site. The information provided here refers only to this site and not to other websites that may be accessed via links found on this site, for which users should refer to the specific information provided by those websites regarding their purposes and methods of processing personal data.
Who we are – Data Controller and Contact Information
Stella Bianca Srl sole shareholder
Via Privata S. Rosa 5, 26816 Ossago Lodigiano (LO)
e-mail: info@stellabianca.it – Phone: +39 0371 87781
Definitions
Applicable legislation
This refers to the current Italian and EU legislation on the protection of personal data:
- EU Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data (hereinafter “GDPR”);
- Italian Personal Data Protection Code, Legislative Decree 196/2003 as amended (“Privacy Code”);
- e-Privacy Directive 2002/58/EC and subsequent amendments 2009/136/EC (also known as “cookie law”) and 2009/140/EC, and the relevant transposition regulations;
- Provision of 10 June 2021 “Cookie Guidelines and other tracking tools” by the Italian Data Protection Authority, and in general, the provisions issued by the Authority.
For more information, please visit this page on the Garante’s website: https://www.gpdp.it/home/provvedimenti-normativa/normativa
Personal Data
Personal data (hereinafter also just “data”) refers to information that directly or indirectly identifies a natural person. This includes data submitted by the user through request forms, as well as data automatically collected through the site, including third-party applications integrated into this site, such as, but not limited to, time spent on each page, details of pages viewed, or other information necessary for providing the site’s services, as specified in the section on technical navigation data processing.
Processing
Any operation or set of operations performed with or without the aid of automated processes and applied to personal data or sets of personal data.
Data Subject
The natural person (“data subject”) to whom the data refers.
User
The person who visits or uses this site who, unless otherwise specified, coincides with the Data Subject.
Service or Services
The services provided to the user through this site, generally involving the transmission of information to or from the user.
European Union (EU)
This refers to all current member states of the European Union, or the European Economic Area. The term “community” refers to EU legislation.
Data Processed and Purpose of Processing
Excluding technical and navigation data that is collected and processed automatically for the proper functioning of the site, as well as necessary cookie data that does not require consent, the user is free to voluntarily provide personal data to use the site’s features and services, or to consent to optional cookies: failure to provide requested data may make it impossible to use certain services. In general, user data collected and processed through the site will be used for the following purposes:
- To allow proper site navigation through technical navigation data and necessary cookies (the legal basis is the legitimate interest of the Data Controller);
- To respond to requests and provide information and reviews about our products and services (the legal basis is the legitimate interest of the Data Controller);
- To comply with or enforce compliance with applicable laws, rules, or regulations (the legal basis is the fulfillment of legal obligations by the Data Controller);
- With specific consent for applicable cookies, if any, to analyze site usage for statistical purposes and service improvement, or to provide advertising and promotional content based on the user’s preferences tracked via cookies (the legal basis is the specific consent of the data subject).
Processing of Technical Navigation Data
The IT systems and software procedures used to operate this site acquire data whose transmission is implicit in the use of Internet communication protocols, including: IP addresses, browser types used by the user, the operating system of the user’s device, the domain names and addresses of other websites accessed or exited, information about pages visited within the site, date/time of access, and other technical parameters related to the operating system and the user’s IT environment.
This data is processed in aggregated, non-identifiable form and may be used by the hosting service provider to determine liability in case of potential cybercrimes against the site. It may also be used by the Controller for technical service management and anonymous statistical traffic analysis.
The legal basis for processing is the legitimate interest of the Controller or third parties, or the fulfillment of legal obligations. This data will be retained for as long as necessary to achieve the purposes described.
Processing of Data Submitted via Contact Forms or Service Requests
On some pages, users may voluntarily fill out forms to submit information or other messages. Only common identifying and contact data is collected, along with any optional data provided in the request. This data will be used to respond to messages and provide the requested information. The legal basis for processing is the data subject’s consent. The data will be stored for as long as necessary to fulfill the request.
Links to Other Sites
This site may contain links to other third-party websites. Using these links will direct the user away from our site and to third-party services; therefore, the management of the information is the responsibility of those third parties, and users are advised to consult their privacy policies.
Cookies
Cookies are files saved on the user’s device while browsing the website. They collect browsing information and can be reused on subsequent visits. They may last for the duration of the browser session or persist until deleted or expired.
There are technical and functional cookies that are necessary for proper site operation and navigation, as well as optional cookies used for analytics, tracking visits, or marketing and profiling. Cookies may be sent directly by this site (first-party cookies) or by third parties (third-party cookies) via tools integrated into the site.
There are also other technologies such as pixel tags, web bugs, web storage, and similar files or tools that perform similar functions. In this Cookie Policy, the term “cookie” includes all similar technologies.
For more information about the cookies used on this site, please see the Cookie Policy.
Processing and Storage Methods
The processing of personal data of site visitors does not involve automated decision-making. It is carried out solely by authorized and trained personnel using electronic and IT tools on digital archives or manually on paper archives, with adequate security measures to address risks. To achieve the processing purposes, the Controller may communicate or transfer personal data to third parties, such as those required by law, third-party service providers for website management and IT systems, or other partners who support customer service or business operations. These third parties may act as independent Controllers or as Data Processors for specific tasks. The list of processors is available upon request.
User data will not be disclosed in any way and will not be transferred outside the European Economic Area. Any transfer to non-EU countries will only occur if appropriate and sufficient safeguards are in place, such as an adequacy decision by the European Commission or standard contractual clauses signed between the Controller and the recipient acting as a Processor.
In general, data will be retained for as long as necessary for the processing purposes, unless otherwise required by applicable law. Data collected with specific consent will be kept until the consent is revoked or the processing purposes are fulfilled.
Exercise of Data Subject Rights
As a data subject, you may contact the Controller at any time using the contact details on this page to exercise the rights granted under Articles 15–22 of the GDPR, within the limits of applicable law:
- Right to know if your personal data is being held and/or processed and to access it in full, including obtaining a copy (Art. 15, right of access);
- Right to rectify inaccurate personal data or complete incomplete data (Art. 16, right to rectification);
- Right to object in whole or in part to data processing for marketing purposes or based on legitimate interest (Art. 21, right to object);
- Right to request deletion of personal data if one of the GDPR conditions applies (Art. 17, right to erasure);
- Right to request limitation of processing to specific data if one of the GDPR conditions applies (Art. 18, right to restriction of processing);
- If technically feasible, right to request and receive all your personal data processed by the Controller in a structured, commonly used, machine-readable format or to request transmission to another controller (Art. 20, right to data portability);
- Right to object in whole or in part to data processing carried out automatically or semi-automatically for profiling purposes (Art. 22 on automated individual decision-making, including profiling).
For data processed with consent, you may revoke it at any time (Art. 7, para. 3 of the GDPR, right to withdraw consent), in which case the Controller will delete all related personal data immediately. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal. You have the right to lodge a complaint with the supervisory authority: for more information, please visit the Italian Data Protection Authority website www.gpdp.it.
Policy Changes
This notice governs how the Controller processes personal data through this website and may be updated if there are changes in data processing purposes or methods. New legal requirements or ongoing updates to site services may necessitate changes. Therefore, users are encouraged to check this policy periodically.
Revision: January 2025