Privacy Policy Sala S.T.F.
Privacy Notice on the Processing of Personal Data of Website Users Articles 13 and 14 of Regulation (EU) 2016/679 (hereinafter also “GDPR”)
Why this notice
SALA-S.T.F. SRL (hereinafter also the “Company” or the “Controller”) is committed to respecting and protecting your privacy and wishes you to feel safe both while simply browsing the website and if you decide to register by providing us with your personal data in order to use the services made available to its Users and/or Clients. On this page, the Company intends to provide some information regarding the processing of personal data relating to users who visit or consult the website accessible electronically at www.salabullonerie.com (the “Site”). This notice is provided only for the Company’s website and not for any other websites that may be consulted by the user through links (for which reference should be made to the respective privacy notices/policies). Reproduction or use of pages, materials and information contained within the Site, by any means and on any medium, is not permitted without the prior written consent of the Company. Copying and/or printing are permitted բացառively for personal and non-commercial use (for requests and clarifications, please contact the Company using the contact details indicated below). Any other use of the contents, services and information on this site is not permitted.
With regard to the contents offered and the information provided, the Company will make reasonable efforts to keep the contents of the Site reasonably updated and reviewed, without providing any guarantee as to the adequacy, accuracy or completeness of the information provided, and explicitly disclaims any liability for any omission errors in the information provided on the Site.
Source – Browsing Data
The Company informs you that the personal data you provide and that are acquired when requesting information and/or contact, registering on the site and using the services through a smartphone or any other device used to access the Internet, as well as the data necessary for the provision of such services, including browsing data and data used for the possible purchase of products and services offered by the Company, as well as the so-called website “browsing” data of Users, will be processed in compliance with the applicable legislation. The IT systems and software procedures used for the operation of this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the “IP addresses” or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used in submitting the request to the web server, the size of the file obtained in response, the numerical code indicating the status of the response given by the web server (successful, error, etc.) and other parameters relating to the user’s operating system and IT environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check the correct functioning of the Company’s website. Please note that the above data could be used to ascertain responsibility in the event of cybercrimes against the Company’s site or other connected or linked sites: except for this possibility, web contact data do not currently persist for more than a few days.
Source – Data Provided by the User
The Company collects, stores and processes your personal data for the purpose of providing the products and services offered on the Site, or for legal obligations. With regard to certain specific Services, Products, Promotions, etc., the Company may also process your data for commercial purposes. In such cases, specific, separate, optional and always revocable consent will be requested in the manner and using the contact details indicated below.
The optional, explicit and voluntary sending of emails to the addresses indicated in the appropriate section of the Website, as well as the completion of questionnaires (e.g. forms), communication via chat, push notifications via APP, social networks, call centers, etc., entails the subsequent acquisition of some of your personal data, including those collected through the use of Apps and related services, necessary to respond to requests. We also inform you that when using a mobile connection to access digital content and services offered directly by
the Company or by our Partners, it may be necessary to transfer your personal data to such third parties. We also point out that you may access the Site or connect to areas where you may be enabled to publish information using blogs or message boards, communicate with others, for example by coming from the Company page on Facebook®, LinkedIn®, YouTube®, and other social networking sites, review products and offers and publish comments or content. Before interacting with such areas, we invite you to carefully read the General Terms of Use, taking into account that, in some circumstances, the information published may be viewed by anyone with Internet access and all the information you include in your posts may be read, collected and used by third parties.
Purposes of Processing and Legal Basis
The data are processed for the following purposes:
1) purposes strictly connected and necessary for registration on the website www.Azienda.it, for services and/or Apps developed or made available by the Company, for the use of the related information services, for the management of contact or information requests, and for the purchase of products and services offered through the Company website;
2) ancillary activities connected to the management of User/Client requests and the sending of replies, which may include the transmission of promotional material; for the completion of purchase orders for products and services offered, including aspects relating to payment by credit card, the management of shipments, the possible exercise of the withdrawal right provided for distance purchases, and updates on the availability of temporarily unavailable products and services;
3) purposes connected with compliance with obligations set forth by EU and national legislation, the protection of public order, and the prevention and prosecution of criminal offences;
4) direct marketing, namely the sending of advertising material, direct sales, market research or commercial communications relating to products and/or services offered by the Company; such activity may also concern products and services of companies belonging to the Company Group and may be carried out through the sending of advertising/information/promotional material and/or invitations to participate in initiatives, events and offers aimed at rewarding users/clients, using “traditional” methods (for example paper mail and/or operator-assisted calls), or through “automated” contact systems (for example SMS and/or MMS, telephone calls without operator intervention, e-mail, fax, interactive applications), pursuant to Article 130 paragraphs 1 and 2 of Legislative Decree 196/03 as amended.
The provision of data for the purposes referred to in points 1), 2) and 3), connected to a pre-contractual and/or contractual phase or functional to a user request or required by a specific legal provision, is mandatory and, failing this, it will not be possible to receive the requested information or access the requested services; with regard to point 4) of this Notice, the user/client’s consent to the processing of data is free and optional and may always be revoked without consequences on the usability of the products and services, except for the impossibility for the Company to keep users/clients updated on new initiatives or particular promotions or advantages that may be available.
The Company may send commercial communications relating to products and/or services similar to those already provided, pursuant to Directive 2002/58/EC, using the email or postal addresses you indicated on those occasions, to which you may object in the manner and at the contact details indicated below.
Methods, Logic of Processing, Retention Periods and Security Measures
Processing is also carried out with the aid of electronic means or otherwise automated tools and is performed by the Company and/or by third parties that the Company may use to store, manage and transmit the data. The processing of data will be carried out according to organizational and processing logics of your personal data, including logs generated by access to and use of the services made available via the web, and of the products and services used, related to the above-mentioned purposes and, in any case, in such a way as to guarantee the security and confidentiality of the data. The processed personal data will be retained for the periods provided for by the legislation applicable from time to time.
Also with regard to data security, in the sections of the website prepared for particular services, where personal data are requested from the user browsing the site, the data are encrypted through a security technology called Secure Sockets Layer, abbreviated as SSL. SSL technology encodes information before it is exchanged via the Internet between the user’s computer and the Company’s central systems, making it unintelligible to unauthorized persons and thus ensuring the confidentiality of the transmitted information; furthermore, transactions carried out using electronic payment instruments are performed directly using the platform of the Payment Service Provider (PSP), and the Company stores only the minimum set of information necessary to manage any disputes. With specific reference to the protection of personal data, the user/client is invited, pursuant to Article 33 of the GDPR, to report to the Company any circumstances or events from which a potential “personal data breach” may arise, in order to allow immediate assessment and the adoption of any actions aimed at countering such event, by sending a communication to privacy@Azienda.it or contacting Customer Service. The measures adopted by the Company do not exempt the Client from paying the necessary attention to the use, where required, of passwords/PINs of adequate complexity, which must be updated periodically, especially in the event that he/she
fears that they may have been violated/known by third parties, and from keeping them carefully and making them inaccessible to third parties, in order to avoid improper and unauthorized use.
Cookies
A cookie is a short text string that is sent to your browser and, possibly, saved on your computer (or alternatively on your smartphone/tablet or any other device used to access the Internet); such transmission generally occurs every time you visit a website. The Company uses cookies for various purposes, in order to offer you a fast and secure digital experience, for example by allowing you to keep the connection to the protected area active while browsing the pages of the site.
The cookies stored on your device cannot be used to retrieve any data from your hard drive, transmit computer viruses, or identify and use your email address. Each cookie is unique in relation to the browser and device you use to access the Website or use the Company App. In general, the purpose of cookies is to improve the functioning of the website and the user’s experience in using it, although cookies may also be used to send advertising messages (as specified below). For more information about what cookies are and how they work, you can visit the website “All about cookies” http://www.allaboutcookies.org.
Scope of Communication and Data Transfer.
For the pursuit of the above purposes, the Company may disclose and allow the processing, in Italy and abroad, of the personal data of users/clients to third parties with whom we have relationships, where such third parties provide services on our behalf. We will provide such third parties only with the information necessary to perform the requested services, taking all measures to protect your personal data. Data may be transferred outside the European Economic Area where this is necessary for the management of your contractual relationship. In such cases, recipient parties will be subject to protection and security obligations equivalent to those guaranteed by the Controller. In the event of use of services offered directly by Partners, we will provide only the data strictly necessary for their performance. In any case, only the data necessary for the pursuit of the intended purposes will be communicated and, where required, the applicable safeguards for transfers of data to third countries will be applied. We may also disclose personal data to our commercial service providers for marketing reasons, who for this purpose are appointed as external processors. In addition, personal data may be communicated to competent public bodies and authorities for compliance with legal obligations or for the ascertainment of responsibility in the event of cybercrimes against the site, as well as disclosed to, or hosted by, third parties (as processors or, where they are providers of electronic communication services, as independent controllers) that provide IT and telematic services (e.g. hosting, website management and development services) and which the Company uses for the performance of tasks and activities, including technical and organizational ones, instrumental to the operation of the website. The subjects belonging to the categories listed above act as separate Data Controllers or as Data Processors duly appointed by the Company.
Personal data may also be known by the Company’s employees/consultants who are specifically instructed and appointed as persons authorized to process data.
The categories of recipients to whom data may be disclosed are available by contacting the Company at the contact details indicated below.
Rights of Data Subjects
You may exercise at any time the rights granted to you by law, including the right:
- to access your personal data, obtaining evidence of the purposes pursued by the Controller, the categories of data involved, the recipients to whom the data may be disclosed, the applicable retention period, and the existence of automated decision-making processes;
- to obtain without undue delay the rectification of inaccurate personal data concerning you;
- to obtain, in the cases provided for, the erasure of your data;
- to obtain the restriction of processing or to object to it, where possible;
- to request the portability of the data you have provided to the Company, namely to receive them in a structured, commonly used and machine-readable format, also for the purpose of transmitting such data to another controller, within the limits and subject to the conditions set out in Article 20 GDPR;
In addition, you may lodge a complaint with the Data Protection Authority pursuant to Article 77 GDPR.
For the processing referred to in point 4) of the purposes, the Client may always withdraw consent and exercise the right to object to direct marketing (in both “traditional” and “automated” form). Unless otherwise indicated, the objection will refer both to traditional and automated communications.
Data Controller
The Data Controller, pursuant to Article 4 GDPR, is SALA-S.T.F. SRL, with registered office in Via G. Marconi, 29/C 24036 Ponte San Pietro (Bergamo), Italy, VAT No./Tax Code: IT02166710166.
The above rights may be exercised at the request of the Data Subject in the manner made known by Customer Service or on the Company’s website, or by using the following contact details: Roberto Sala (info@salastf.it).
Use of the Website, including those intended for tablets and/or smartphones, by the Client and/or User implies full knowledge and acceptance of the contents and of any indications included in this version of the notice published by the Company at the time the site is accessed. The Company informs you that this notice may be amended without prior notice and therefore recommends that it be read periodically.
The Data Controller
SALA-S.T.F. SRL
This privacy notice was last updated on 01/01/2026