Contents

  1. Privacy Policy
  2. Customer and Supplier Information
  3. Customer Information with marketing consent
  4. Privacy Information for vacancy applicants
  5. Events Privacy Policy
  6. Video Surveillance Information

 

Privacy Policy

INFORMATION ON THE PROCESSING OF PERSONAL DATA for users visiting this website pursuant to Article 13 of Regulation (EU) 2016/679

WHY THIS INFORMATION IS PROVIDED

The following notice, regarding the use of cookies and the processing of personal data on this website, is provided to the user/visitor in compliance with the decision of the Data Protection Authority and in accordance with Art. 13 of the EU Regulation 2016/679 for the protection of personal data.

In accordance with Regulation (EU) 2016/679 (hereinafter "Regulation"), this page outlines the methods of processing personal data of users/visitors, also following the decision of the Data Protection Authority "Guidelines on cookies and other tracking tools" no. 231 of June 10, 2021, and in full compliance with Art. 13 of the EU Regulation 2016/679 for the protection of personal data, concerning users visiting the following websites accessible electronically at the following addresses:

https://bianchi-industrial.it

This information does not concern other websites, pages, or online services that can be accessed via hyperlinks that may be published on the sites but refer to resources outside these domains.

Following the consultation of the sites listed above, data related to identified or identifiable natural persons may be processed.

Data controller

Bianchi Industrial S.p.A. single-member company
Via G. Zuretti 100 - 20125 Milan, Italy
VAT Reg. No. and Tax Code 06516430961
privacy@bianchi-industrial.it 

DPO (Data Protection Officer)

The Controller has nominated as the Data Protection Officer, pursuant to Art. 37 of the European regulation on the Protection of Personal Data, EU 2016/679, and in particular as foreseen by paragraph 6, Schmidt Consulting Privacy Srl – Benefit Company, with registered office in Via Bagutta 13, 20121 Milano, who can be contacted via email at dpo@schmidtconsulting.it

 

TYPES OF DATA PROCESSED AND PURPOSE OF THE TREATMENT

Data communicated by users 

Sending messages, on the basis of the user’s free, voluntary, explicit choice, to the Controller’s contact addresses, or sending private messages to the Controller’s social media pages and profiles (where this option is available), and filling in and sending the forms made available on the Controller’s websites entail the acquisition of the sender’s contact information – which is necessary to provide a reply – as well as of any and all the personal data communicated in that manner.

Specific information notices will be displayed on the pages of the Controller’s websites that are used for providing certain services.

Technical navigation functions and specific actions of cookies

Navigation data

The computer systems and software procedures used to operate this site acquire, during their normal operation,

some personal data whose transmission is implicit in the use of Internet communication protocols.

This category of data includes, in an explanatory but not exhaustive way, the IP addresses or domain names of the computers and terminals used by users,

the URI / URL (Uniform Resource Identifier / Locator) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and IT environment.

These data, necessary for the use of web services, are also processed for the purpose of:

  • obtain statistical information on the use of services (most visited pages, number of visitors by time or day, geographical areas of origin,

etc.)

  • check the correct functioning of the services offered.

The navigation data do not persist for more than seven days and are deleted immediately after their aggregation (except for any need to ascertain crimes by the judicial authorities).

Data communicated by the user

The optional, explicit and voluntary sending of messages to the contact addresses of the Data Controller, as well as the compilation and forwarding of the forms on the site, involve the acquisition of the sender's contact data, necessary to reply, as well as all data personal data included in communications.

Specific information will be published on the pages of the Data Controller's sites prepared for the provision of certain services.

Cookies and other tracking systems

Cookies for third-party profiling are used on the site, as further specified in the dedicated section.

Session cookies (non-persistent) are used strictly limited to what is necessary for the safe and efficient navigation of the sites.

The storage of session cookies in terminals or browsers is under the user's control, where on the servers, at the end of the HTTP sessions, information relating to cookies remains recorded in the service logs, with retention times strictly necessary for correct operation.

Information related to the management of personal data through social media platforms used by the Data Controller.

Regarding the processing of personal data carried out by the operators of the social media platforms used by the Data Controller, reference is made to the provisions found in their respective privacy policies. The Data Controller manages the personal data provided by users through dedicated pages on social media platforms, in order to manage interactions with users/customers (such as comments, public posts, etc.), always in accordance with current legislation.

Legitimate interest 

The Controller does not make use of legitimate interest for the processing of personal data except for the protection of their own rights, namely, to establish, exercise, or defend a right before the courts.

Methods for data processing

The collected data is processed both in paper form and using computer tools.

Appropriate security measures are observed to prevent data loss, unlawful or incorrect uses, and unauthorised access.

Data recipients

The processing of personal data is carried out by authorized personnel or duly appointed data processors. The updated list of data processors or any autonomous data controllers can be requested from the Data Controller or the DPO.

Data transfer

The data will be transferred only within the EU.

Some applications, such as, but not limited to, Google Analytics, ReCaptcha, and Facebook Pixel, may be transferred to the USA to companies that have obtained certification under the Data Privacy Framework. No further transfers outside the EU will be made.

Data subjects rights pursuant to art. 15 EU 2016/679

Data subjects have the right, where applicable, to obtain from the Data Controller access to their personal data and the rectification or erasure of such data or the restriction of processing concerning them, or to object to processing (Articles 15 and following of the GDPR). Opposition for marketing purposes is always possible and free of charge. Requests should be addressed to the Data Controller using the contact details provided at the beginning of this notice.

Complaints

Data subjects who believe that the processing of their personal data through this website is in violation of the provisions of the Regulation have the right to lodge a complaint with the Supervisory Authority as provided for in Article 77 of the Regulation, or to take appropriate legal action (Article 79 of the Regulation).

 

Customer and Supplier Information

This information is provided pursuant to Article 13 of the Code for the Protection of Personal Data, EU 2016/679 Regulation. The data processed will be those of the customers.

Data controller

Bianchi Industrial S.p.A. single-member company
Via G. Zuretti 100 - 20125 Milan, Italy
VAT Reg. No. and Tax Code 06516430961
privacy@bianchi-industrial.it 

DPO (Data Protection Officer)

The Controller has nominated as the Data Protection Officer, pursuant to Art. 37 of the European regulation on the Protection of Personal Data, EU 2016/679, and in particular as foreseen by paragraph 6, Schmidt Consulting Privacy Srl – Benefit Company, with registered office in Via Bagutta 13, 20121 Milano, who can be contacted via email at dpo@schmidtconsulting.it

Nature of data provision

Providing us with your personal data is optional but if you don’t give us your details and your consent to use them, we will not be able to contact you or to send you any promotional offers for the purposes listed below. The provision for marketing purposes is optional and does not prevent being contacted for other purposes.

Purposes of processing of personal data and legal basis

a) execution of obligations arising from contracts concluded with the Controller and/or obligations, prior to concluding the contract, relating to specific requests of the person concerned;

b) fulfilment of obligations pursuant to the law, regulations or Community legislation and defence before the courts;

With regard to purposes in points a) and b), we inform you that the processing and communication of your personal data by the Controller does not require your consent as processing is necessary for the execution of obligations under the contract and/or to perform services requested by you prior to the conclusion of the contract and for compliance with legal obligations.

Legitimate interest

The Controller does not make use of legitimate interest for the processing of personal data except for the protection of their own rights, namely, to establish, exercise, or defend a right before the courts.

Methods of data processing

The collected data is processed both in paper form and using computer tools. Appropriate security measures are observed to prevent data loss, unlawful or incorrect uses, and unauthorised access.

Who processes with your data

The processing of personal data is carried out by authorised personnel or by duly appointed data processors. The updated list of data processors or any autonomous data controllers can be requested from the Data Controller or the Data Protection Officer (DPO).

Data transfer

The data will be transferred only within the EU.

Some applications, such as, but not limited to, Google Analytics, ReCaptcha, and Facebook Pixel, may be transferred to the USA to companies that have obtained certification under the Data Privacy Framework. No further transfers outside the EU will be made.

Period of data retention

Personal data processed for contractual or economic purposes, such as invoicing, will be processed for the mandatory periods required by relevant laws, such as administrative accounting data for 10 years.

Data subjects rights pursuant to art. 15 EU 2016/679

Data subjects have the right, where applicable, to obtain from the Data Controller access to their personal data and the rectification or erasure of such data or the restriction of processing concerning them, or to object to processing (Articles 15 and following of the GDPR). Opposition for marketing purposes is always possible and free of charge. Requests should be addressed to the Data Controller using the contact details provided at the beginning of this notice.

Complaints

Data subjects who believe that the processing of their personal data through this website is in violation of the provisions of the Regulation have the right to lodge a complaint with the Supervisory Authority as provided for in Article 77 of the Regulation, or to take appropriate legal action (Article 79 of the Regulation).

Customer information with marketing consent

This information is provided pursuant to Article 13 of the Code for the Protection of Personal Data, EU 2016/679 Regulation. The data processed will be those of the customers.

Data controller

Bianchi Industrial S.p.A. single-member company
Via G. Zuretti 100 - 20125 Milan, Italy
VAT Reg. No. and Tax Code 06516430961
privacy@bianchi-industrial.it 

DPO (Data Protection Officer)

The Controller has nominated as the Data Protection Officer, pursuant to Art. 37 of the European regulation on the Protection of Personal Data, EU 2016/679, and in particular as foreseen by paragraph 6, Schmidt Consulting Privacy Srl – Benefit Company, with registered office in Via Bagutta 13, 20121 Milano, who can be contacted via email at dpo@schmidtconsulting.it

Nature of data provision

Providing us with your personal data is optional but if you don’t give us your details and your consent to use them, we will not be able to contact you or to send you any promotional offers for the purposes listed below. The provision for marketing purposes is optional and does not prevent being contacted for other purposes.

Purposes of processing of personal data and legal basis

a) execution of obligations arising from contracts concluded with the Controller and/or obligations, prior to concluding the contract, relating to specific requests of the person concerned;

b) fulfilment of obligations pursuant to the law, regulations or Community legislation and defence before the courts;

c) promotional activities for marketing such as, by way of example but not limited to, sending newsletters; sending educational and information material; sending marketing material via email, newsletters, postal mail, SMS, MMS, and new communication platforms such as, for example but not limited to, WhatsApp, X, Facebook, Viber, Telegram, Skype.

With regard to purposes in points a) and b), we inform you that the processing and communication of your personal data by the Controller does not require your consent as processing is necessary for the execution of obligations under the contract and/or to perform services requested by you prior to the conclusion of the contract and for compliance with legal obligations.

With regard to the purposes in point c), you have the right to refuse the Controller, at any time, your consent to processing, without adverse consequences in the contractual relationship and/or in the performance of services you requested prior to the conclusion of the contract.

Legitimate interest

The Controller does not make use of legitimate interest for the processing of personal data except for the protection of their own rights, namely, to establish, exercise, or defend a right before the courts.

Methods of data processing

The collected data is processed both in paper form and using computer tools. Appropriate security measures are observed to prevent data loss, unlawful or incorrect uses, and unauthorised access.

Who processes with your data

The processing of personal data is carried out by authorised personnel or by duly appointed data processors. The updated list of data processors or any autonomous data controllers can be requested from the Data Controller or the Data Protection Officer (DPO).

Data transfer

The data will be transferred only within the EU.

Some applications, such as, but not limited to, Google Analytics, ReCaptcha, and Facebook Pixel, may be transferred to the USA to companies that have obtained certification under the Data Privacy Framework. No further transfers outside the EU will be made.

Period of data retention

Personal data processed for contractual or economic purposes, such as invoicing, will be processed for the mandatory periods required by relevant laws, such as administrative accounting data for 10 years.

Data related to marketing activities will be retained for a maximum period of 24 months from the last active interaction with the user. The user is guaranteed the right to request the deletion of their data at any time, and in such case, it will be deleted immediately.

Data subjects rights pursuant to art. 15 EU 2016/679

Data subjects have the right, where applicable, to obtain from the Data Controller access to their personal data and the rectification or erasure of such data or the restriction of processing concerning them, or to object to processing (Articles 15 and following of the GDPR). Opposition for marketing purposes is always possible and free of charge. Requests should be addressed to the Data Controller using the contact details provided at the beginning of this notice.

Complaints

Data subjects who believe that the processing of their personal data through this website is in violation of the provisions of the Regulation have the right to lodge a complaint with the Supervisory Authority as provided for in Article 77 of the Regulation, or to take appropriate legal action (Article 79 of the Regulation).

 

Privacy information for vacancy applicants

This information is provided pursuant to Article 13 of the Code for the Protection of Personal Data, EU 2016/679 Regulation.

The data processed will be that of Employees and Collaborators, including but not limited to, name, surname, place and date of birth, tax code, residence, gender, telephone contacts, educational qualifications, work experiences, and any additional data you may have included in your CV.

The Data Controller may process "special categories of data" under Art. 9 of the GDPR, such as data capable of revealing health status, belonging to protected categories, potentially contained in the CV.

Data controller

Bianchi Industrial S.p.A. single-member company
Via G. Zuretti 100 - 20125 Milan, Italy
VAT Reg. No. and Tax Code 06516430961
privacy@bianchi-industrial.it 

DPO (Data Protection Officer)

The Controller has nominated as the Data Protection Officer, pursuant to Art. 37 of the European regulation on the Protection of Personal Data, EU 2016/679, and in particular as foreseen by paragraph 6, Schmidt Consulting Privacy Srl – Benefit Company, with registered office in Via Bagutta 13, 20121 Milano, who can be contacted via email at dpo@schmidtconsulting.it

Nature of data provision

The provision of data is mandatory for the activities of research and selection of personnel. The refusal to provide data will prevent the Data Controller from carrying out such activities and will not allow your application to be considered. The provision of data to acquire and/or verify information related to your previous professional references is optional.

Purposes of processing of personal data and legal basis

Personal data is processed for the following purposes:

a) For purposes related to or instrumental to the conduct of research and selection activities of candidates in relation to all positions managed by the Data Controller.

b) Any personal data provided by you that falls under the special categories of data as per Art. 9 GDPR will be processed, only when necessary and relevant, to evaluate your application for employment positions within the scope of targeted placement.

c) We may process public information concerning your profile on professional social networks, such as LinkedIn, but not limited to, to ensure that the information you provide matches what you have stated, limited only to information of a professional nature, necessary solely for the purpose of assessing the specific risks related to the type of activity that will have to be carried out based on the sought profile, adopting all necessary measures to ensure the proper balance of your interests, rights, and fundamental freedoms with our legitimate interest.

d) Compliance with obligations provided by law, regulations, or community legislation and defense in court.

e) Only with your consent, to acquire information related to your professional references from previous employers.

Regarding the purposes under a), b), c), d), we inform you that the processing and communication of your personal data by the Data Controller does not require your consent as the processing falls within the exclusion cases provided for by the European Regulation. Regarding the purpose under e), consent is optional and every Data Subject has the right not to provide it to the Data Controller, without this leading to prejudicial consequences in the selection relationship.
Legitimate interest

The Controller does not make use of legitimate interest for the processing of personal data except for the protection of their own rights, namely, to establish, exercise, or defend a right before the courts.

Methods of data processing

The collected data is processed both in paper form and using computer tools. Appropriate security measures are observed to prevent data loss, unlawful or incorrect uses, and unauthorised access.

Who processes with your data

The processing of personal data is carried out by authorised personnel or by duly appointed data processors. The updated list of data processors or any autonomous data controllers can be requested from the Data Controller or the Data Protection Officer (DPO).

Data transfer

The data will be transferred only within the EU.

Some applications, such as, but not limited to, Google Analytics, ReCaptcha, and Facebook Pixel, may be transferred to the USA to companies that have obtained certification under the Data Privacy Framework. No further transfers outside the EU will be made.

Period of data retention

The personal data contained in the curricula will be processed for 48 months from the last activity carried out. The candidate may request cancellation at any time.

Data subjects rights pursuant to art. 15 EU 2016/679

Data subjects have the right, where applicable, to obtain from the Data Controller access to their personal data and the rectification or erasure of such data or the restriction of processing concerning them, or to object to processing (Articles 15 and following of the GDPR). Opposition for marketing purposes is always possible and free of charge. Requests should be addressed to the Data Controller using the contact details provided at the beginning of this notice.

Complaints

Data subjects who believe that the processing of their personal data through this website is in violation of the provisions of the Regulation have the right to lodge a complaint with the Supervisory Authority as provided for in Article 77 of the Regulation, or to take appropriate legal action (Article 79 of the Regulation).

 

Events Privacy Policy

Pursuant to the "Code for the Protection of Personal Data", EU 2016/679 Regulation.

The data processed will be those of the customers of the event.

Data controller

Bianchi Industrial S.p.A. single-member company
Via G. Zuretti 100 - 20125 Milan, Italy
VAT Reg. No. and Tax Code 06516430961
privacy@bianchi-industrial.it 

DPO (Data Protection Officer)

The Controller has nominated as the Data Protection Officer, pursuant to Art. 37 of the European regulation on the Protection of Personal Data, EU 2016/679, and in particular as foreseen by paragraph 6, Schmidt Consulting Privacy Srl – Benefit Company, with registered office in Via Bagutta 13, 20121 Milano, who can be contacted via email at dpo@schmidtconsulting.it

Nature of data provision

Providing us with your personal data is optional but if you don’t give us your details and your consent to use them, we will not be able to contact you or to send you any promotional offers for the purposes listed below. The provision for marketing purposes is optional and does not prevent being contacted for other purposes.

Purposes of processing of personal data and legal basis

a) execution of obligations arising from contracts concluded with the Controller and/or obligations, prior to concluding the contract, relating to specific requests of the person concerned;

b) fulfilment of obligations pursuant to the law, regulations or Community legislation and defence before the courts;

c) promotional activities for marketing such as, by way of example but not limited to, sending newsletters; sending educational and information material; sending marketing material via email, newsletters, postal mail, SMS, MMS, and new communication platforms such as, for example but not limited to, WhatsApp, X, Facebook, Viber, Telegram, Skype.

d) Photographic and video images made during the event will be used for information, information, training, promotional and advertising purposes by the controller, its managers and agents. They will be published in print, television and new communication platforms such as, for example, in an explanatory but not exhaustive way, YouTube, Vimeo, LinkedIn, WhatsApp, X, Facebook, Viber, Telegram, Skype.

With regard to purposes in points a) and b), we inform you that the processing and communication of your personal data by the Controller does not require your consent as processing is necessary for the execution of obligations under the contract and/or to perform services requested by you prior to the conclusion of the contract and for compliance with legal obligations.

With regard to the purposes in point c), you have the right to refuse the Controller, at any time, your consent to processing, without adverse consequences in the contractual relationship and/or in the performance of services you requested prior to the conclusion of the contract.

If you deny consent to point d) images and videos, you will not be able to access the event, because it would be too costly for the controller to delete the images of the subjects who do not give consent.

Legitimate interest

The Controller does not make use of legitimate interest for the processing of personal data except for the protection of their own rights, namely, to establish, exercise, or defend a right before the courts.

Methods of data processing

The collected data is processed both in paper form and using computer tools. Appropriate security measures are observed to prevent data loss, unlawful or incorrect uses, and unauthorised access.

Who processes with your data

The processing of personal data is carried out by authorised personnel or by duly appointed data processors. The updated list of data processors or any autonomous data controllers can be requested from the Data Controller or the Data Protection Officer (DPO).

Data transfer

The data will be transferred only within the EU.

Some applications, such as, but not limited to, Google Analytics, ReCaptcha, and Facebook Pixel, may be transferred to the USA to companies that have obtained certification under the Data Privacy Framework. No further transfers outside the EU will be made.

Period of data retention

Personal data processed for contractual or economic purposes, such as invoicing, will be processed for the mandatory periods required by relevant laws, such as administrative accounting data for 10 years.

Data related to marketing activities will be retained for a maximum period of 24 months from the last active interaction with the user. The user is guaranteed the right to request the deletion of their data at any time, and in such case, it will be deleted immediately.

Data subjects rights pursuant to art. 15 EU 2016/679

Data subjects have the right, where applicable, to obtain from the Data Controller access to their personal data and the rectification or erasure of such data or the restriction of processing concerning them, or to object to processing (Articles 15 and following of the GDPR). Opposition for marketing purposes is always possible and free of charge. Requests should be addressed to the Data Controller using the contact details provided at the beginning of this notice.

Complaints

Data subjects who believe that the processing of their personal data through this website is in violation of the provisions of the Regulation have the right to lodge a complaint with the Supervisory Authority as provided for in Article 77 of the Regulation, or to take appropriate legal action (Article 79 of the Regulation).

 

Video Surveillance Information

Dear Customer, we inform you that the Data Controller, pursuant to art. 13 of the EU 2016/679 European Regulation, will proceed with the processing of your images in compliance with current legislation, with the aim of improving the protection and safety of property and people, through a video surveillance system with image recordings.

Data controller

Bianchi Industrial S.p.A. single-member company
Via G. Zuretti 100 - 20125 Milan, Italy
VAT Reg. No. and Tax Code 06516430961
privacy@bianchi-industrial.it 

DPO (Data Protection Officer)

The Controller has nominated as the Data Protection Officer, pursuant to Art. 37 of the European regulation on the Protection of Personal Data, EU 2016/679, and in particular as foreseen by paragraph 6, Schmidt Consulting Privacy Srl – Benefit Company, with registered office in Via Bagutta 13, 20121 Milano, who can be contacted via email at dpo@schmidtconsulting.it

Nature of data provision

Provision of personal data is mandatory for individuals wishing to gain access to the premises of the Controller, as entry is subject to surveillance by cameras. Failure to provide the required data will result in denial of access to the premises.

Purposes of processing of personal data and legal basis

The purpose of processing video surveillance images is to improve the protection and security of goods and people, through a video surveillance system with image recordings. The processing of your images is carried out according to the indications of the provision of the Privacy Guarantor Authority regarding video surveillance. The legal basis is to be found in the legitimate interest and in the balancing of interests.

Legitimate interest

The Controller does not make use of legitimate interest for the processing of personal data except for the protection of their own rights, namely, to establish, exercise, or defend a right before the courts.

Methods of data processing

The images recorded through the video surveillance system are protected with adequate and preventive security measures, in order to minimize the risks of destruction, loss, unauthorized access, and processing not allowed or not in accordance with the purposes of the collection, also in relation to the transmission of the images.

Who processes with your data

The processing of such images is carried out by personnel specifically assigned to the processing or by data processors duly appointed. Your images may be disclosed to judicial authorities following a specific request. Your images will neither be disseminated nor communicated to other third parties.

Data transfer

The data will be transferred only within the EU.

Some applications, such as, but not limited to, Google Analytics, ReCaptcha, and Facebook Pixel, may be transferred to the USA to companies that have obtained certification under the Data Privacy Framework. No further transfers outside the EU will be made.

Period of data retention

The images captured by our video recording system are stored in our archives for a period not exceeding 72 hours, given the activities conducted by the data controller.

Data subjects rights pursuant to art. 15 EU 2016/679

Data subjects have the right, where applicable, to obtain from the Data Controller access to their personal data and the rectification or erasure of such data or the restriction of processing concerning them, or to object to processing (Articles 15 and following of the GDPR). Opposition for marketing purposes is always possible and free of charge. Requests should be addressed to the Data Controller using the contact details provided at the beginning of this notice.

Complaints

Data subjects who believe that the processing of their personal data through this website is in violation of the provisions of the Regulation have the right to lodge a complaint with the Supervisory Authority as provided for in Article 77 of the Regulation, or to take appropriate legal action (Article 79 of the Regulation).