Privacy Policy

PRIVACY POLICY FOR THE PROCESSING OF PERSONAL DATA
 
 
SALA S.r.l. with registered office in Via G. Marconi n.29, 24036 Ponte S. Pietro (Bergamo), Italy,
Tax Code and VAT No. 01924950163 (hereinafter, the “Controller”), informs you pursuant to Article 13 of EU Regulation No. 2016/679 (hereinafter, “GDPR”) that your data will be processed in the following ways and for the following purposes:
1. Data Controller

The Data Controller is SALA S.r.l., with registered office in Via G. Marconi n.29, 24036 Ponte S. Pietro (Bergamo), Italy, Tax Code and VAT No. 01924950163, represented by its legal representative pro tempore, who can be contacted at:
email: info@salasrl.it
 – PEC: salasrl@pec.it – tel. +39 035 460402
2. Data Protection Officer

The Controller has not appointed a Data Protection Officer, as the legal requirements for such appointment do not apply.
3. Purpose of the Processing
Your personal data are processed for:
a) concluding contracts for the Controller’s services;
b) fulfilling pre-contractual, contractual and legal obligations arising from existing relationships with you;
c) fulfilling obligations provided by law, regulations, EU legislation or orders from authorities;
d) exercising the Controller’s rights, for example the right of legal defense;
e) pursuing the legitimate interests of the Controller, for example promoting products and services through commercial communications and customer satisfaction surveys regarding the quality of services.
4. Processing Methods

The processing of your personal data is carried out through the operations indicated in Article 4 No.2 GDPR, including collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion and destruction of data. Your personal data are processed both on paper and electronically or via telematic systems.
5. Automated Decision-Making

The Controller does not process personal data through automated decision-making processes or profiling.
6. Data Disclosure

Your data may be disclosed, in addition to authorized personnel of the Controller, to collaborators and professionals appointed by the Controller for specific processing activities strictly related to the purposes described above, as well as to public authorities and public or private entities for compliance with legal obligations.

These parties will process the data as independent data controllers.
7. Data Transfer

Personal data provided to the Controller may be transferred, in pursuit of the legitimate interests of the Controller pursuant to Recital (48) of the GDPR, within the business group “Gruppo Sala Bullonerie”, which includes: Sala Italdadi S.r.l. (email: info@salaitaldadi.it); Sala S.r.l. (email: salasrl@salasrl.org); Sala STF S.r.l. (email: info@salastf.it).

The Controller does not transfer personal data to third countries or international organizations. However, the Controller may use cloud services; in such cases, providers will be selected among those offering adequate guarantees as required by Article 46 GDPR.
8. Processing of Personal Data through the Controller’s Website – Cookie Policy

The Controller’s website (the “Site”), accessible at https://www.salabullonerie.com/, automatically collects access information which is stored electronically and processed solely to enable navigation of the site and to generate anonymous statistics. Such data are retained only for the time reasonably necessary.

The use of cookies on the Site is strictly limited to enabling certain functions and ensuring safe and efficient browsing of the Site.

Session cookies used do not compromise users’ privacy and do not allow the acquisition of personally identifiable data.

Without the required consent, no information capable of identifying visitors is stored through cookies.
What is a cookie?

Cookies are small text files downloaded onto the User’s device when visiting a website. At each subsequent visit, cookies are sent back to the originating website (first-party cookies) or to another website that recognizes them (third-party cookies).

Cookies are useful because they allow a website to recognize the user’s device and improve navigation experience.

They allow efficient navigation between pages, remembering preferences and improving the overall browsing experience.

Depending on their function and purpose, cookies may be classified as technical cookies, profiling cookies, and third-party cookies.

Cookies alone cannot be used to identify visitors. A cookie usually contains the domain name from which it originates, its duration and a value, typically a randomly generated unique number.
Technical Cookies

Technical cookies are those whose use does not require user consent pursuant to Article 122 paragraph 1 of Legislative Decree 196/2003. These include essential cookies which enable functions without which it would not be possible to fully use the Site.

These cookies are used exclusively by the Site and are therefore first-party cookies. They are stored on the user’s computer only during the current browser session.

Analytics cookies are also included among technical cookies when used solely for statistical purposes and collect aggregated information without identifying individual users.
Third-Party Cookies

While browsing the Site, users may receive cookies from websites or web servers other than the Site itself (so-called “third-party cookies”), for example through images, maps, sounds or specific links to web pages hosted on other servers.

Third-party cookies are set directly by the operators of external websites and may collect information about the user’s visit to the Site.
Cookie Duration

Some cookies (session cookies) remain active only until the browser is closed.

Others remain available for subsequent visits by the user and are called persistent cookies.
Cookie Management

Cookie settings can be controlled and modified through the browser preferences.
Chrome
Firefox
Internet Explorer
Opera
Safari
9. Data Retention

Personal data will be processed for the time necessary to fulfill the above purposes and in any case no longer than 12 months after the termination of the relationship for service-related purposes and no longer than 24 months from the data collection for marketing purposes.
10. Nature of Data Provision

Providing data for the purposes referred to in Article 3 letters a), b) and c) is necessary for the fulfillment of contractual and legal obligations and for the provision of services.

Failure to provide such data will make it impossible for the Controller to provide the requested services.

Providing data for marketing purposes (Article 3 letter e) is optional.
11. Withdrawal of Consent

Pursuant to Article 6 GDPR, the data subject may withdraw consent at any time.
12. Rights of the Data Subject

The data subject may exercise the rights provided by Article 15 GDPR, including:
1) obtain confirmation of whether personal data concerning them exist;
2) obtain information on the origin of the data;
3) request updating, correction, integration, deletion or limitation of processing;
4) object to the processing of personal data for legitimate reasons or for marketing purposes;
5) lodge a complaint with the Data Protection Authority.
13. Exercising Your Rights

As a data subject, you may exercise your rights at any time by sending:
– a registered letter to SALA S.r.l., Via G. Marconi n.29, 24036 Ponte S. Pietro (Bergamo), Italy;
– an email to: info@salasrl.it
– a certified email (PEC) to: salasrl@pec.it
– for complaints to the supervisory authority: https://www.garanteprivacy.it