Privacy policy

Your data and our website

How does it work?

Transparency first!

We will use your data only to allow you to use our website.

On this page you will find all the information regarding the processing of your personal data: where, when, how and why we process your data, as well as a list of your rights.

Your data will not be sold or transferred to Third Parties

Your data (i.e., the one you provide us) will only be used by TECHNOLOGY BSA S.P.A.

We are committed to never selling or transferring your data.

If in some cases we use external providers, please note that they will operate solely on our behalf and in compliance with our instructions.

How to contact us

The Data Controller is TECHNOLOGY BSA S.P.A (Tax Code and VAT no. 07875400017), headquartered in Via Lungo Serio, 17 – 24050 Grassobbio (BG), Italy.

You can contact us at any time by writing to: privacy@techbsa.com

Our Data Protection Officer (DPO) can be contacted at the following e-mail address: dpo@techbsa.com

Why this Privacy Notice?

This notice, provided pursuant to Articles 13 and 14 of the GDPR, informs you about how we collect, use, share and store personal data provided and/or collected through the Website as described below.

This notice is provided by TECHNOLOGY BSA S.P.A. as the Data Controller.

What information do we collect, for what purposes, on what legal basis, and how long do we retain your data?

Website navigation purposes

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

Such data, necessary for the use of web services, are also processed in order to:

• obtain statistical information on the use of services (most visited pages, number of visitors per time slot or per day, geographical areas of origin, etc.);
• check the proper functioning of the services offered.

Types of data processed

• IP addresses or domain names of the computers and terminals used by users,
• URI/URL addresses (Uniform Resource Identifier/Locator) of the requested resources,
• the time of the request,
• the method used to submit the request to the server,
• the size of the file obtained in response,
• the numerical code indicating the status of the server’s response (success, error, etc.),
• other parameters related to the user’s operating system and IT environment.

Legal basis for processing

• the processing is necessary to comply with a legal obligation to which the Data Controller is subject (Art. 6, para. 1, lett. c) GDPR);
• the processing is necessary for the legitimate interest of the Data Controller (Art. 6, para. 1, lett. f) GDPR) to ensure the security and usability of the website.

Retention period

Browsing data are not kept for more than seven days (except where the Judicial Authority needs them to ascertain crimes).

 

User Reserved Area Registration purposes

The User’s personal data will be processed by Technology BSA S.p.A. to allow them to complete their registration to the website’s reserved area and to create a personal space in order to purchase products and/or services offered on the site and to use the services provided therein.

Types of data processed

• contact data (e-mail address and password),
• IP addresses or domain names of the computers and terminals used by users,
• URI/URL addresses of the requested resources.

Legal basis for processing

Contractual or pre-contractual obligations related to registration in the company website’s reserved areas (Art. 6, para. 1, lett. b) GDPR).

Retention period

The data processed for registration purposes referred to in paragraph 1 lett. a. will be stored until the user requests the cancellation of their registration on the website.

 

Management and response to your requests

We will process the personal data you provide by sending e-mails and/or filling out forms on the website, solely to provide a response to the submitted requests.

Types of data processed

Personal data voluntarily provided:

• first name, last name,
• contact details,
• phone number,
• e-mail,
• address.

Legal basis for processing

The need to respond to a request by a User of the website, by virtue of contractual or pre-contractual obligations (Art. 6, para. 1, lett. b) GDPR).

Retention period

The data processed as described in this paragraph will be kept for the time strictly necessary to provide a response to the requests of the data subjects. The above period may be extended if necessary to comply with legal obligations or to protect a right before a competent authority.

 

“Work with Us” section management purposes

The data are also processed in order to:

• carry out recruitment and personnel selection by Technology BSA S.p.A., including sending service communications or updates on new job openings.

Types of data processed

Personal data voluntarily provided:

• Personal details (first name, last name),
• Contact details (e-mail).

If the CVs contain special categories of data (e.g. data revealing membership of protected categories), Technology BSA S.p.A. will process only the data relevant for assessing professional suitability, within the limits in which the acquisition of such information is strictly necessary for the establishment of the employment relationship.

Legal basis for processing

Processing is necessary for the performance of a contract to which the data subject is party or for the implementation of pre-contractual measures adopted at the request of the data subject (Art. 6, para. 1, lett. b) GDPR).

Retention period

Your data will not be shared with third parties and will be stored in our databases for no longer than is necessary to manage and monitor the recruitment and selection process.

 

Newsletter subscription purposes

Types of data processed

Some of the personal data provided at the time of registration to the Newsletter or during the purchase of a product or service, such as: e-mail address, phone number, and postal details.

Legal basis for processing

• legitimate interest in the case of communications to our Customers relating to products similar to those purchased (soft-spam), pursuant to Art. 6, para. 1, lett. f) GDPR and Art. 130, para. 4 of Legislative Decree 196/2003 (“Privacy Code”);
• consent of the data subjects (Art. 6, para. 1, lett. a) GDPR).

 

Purposes of registration for training courses or information events

Types of data processed

We will process the personal data you provide by filling in the registration forms available in the “Training and Events” section in order to enable registration for training courses, events or workshops promoted by Technology BSA S.p.A., as well as the download of sheets and/or information relating to the course or event.

Types of data processed

First and last name
Company name
VAT number
Job role in the company
E-mail

Legal basis for processing

Contractual or pre-contractual obligations related to registration in the dedicated form within the company website (Art. 6, para. 1, lett. b) GDPR)

Retention period

For a period of 6 months from the date of the event’s conclusion, without prejudice to compliance with legal obligations or the need to protect a right before a competent authority.

Methods of processing

The processing of the personal data of data subjects will mainly be carried out using electronic or otherwise automated means, in accordance with the methods and tools suitable to ensure the security and confidentiality of the data, in compliance with the GDPR. In particular, all technical, IT, organizational, logistical and procedural security measures necessary to guarantee the adequate level of protection of the data provided for by the applicable privacy legislation will be adopted, allowing access only to persons authorized to process the data.

The information acquired and the methods of processing will be relevant and not excessive in relation to the type of services provided. The data will also be managed and protected in environments where access is under constant control.

Who do we share personal data with?

Without prejudice to all communications carried out in compliance with legal or contractual obligations, the personal data collected and processed may be shared exclusively for the purposes stated in this Privacy Notice, for example with:

• legal entities or natural persons acting as data processors, carrying out outsourcing activities (e.g., website management and maintenance), formally appointed by us pursuant to Art. 28 GDPR;

• employees and/or collaborators (including system administrators) who, operating under our direct authority, are authorized to process personal data;

• employees and/or collaborators of the data processors (including system administrators) who, operating under the direct authority of the external data processors, will be authorized to process personal data;

• all public and/or private entities, natural and/or legal persons, where sharing is necessary or functional to the proper functioning of the website, as well as to obligations deriving from the law.

The data relating to data subjects will not be disseminated, except in anonymous and aggregated form, for statistical or research purposes.

Identity and contact details of Data Processors

The full list of personal data processors is available by contacting us at privacy@techbsa.com

Transfer of data to Third Countries

We will not transfer your personal data to countries outside the European Economic Area (“EEA”), which includes EU Member States, Norway, Liechtenstein and Iceland.

If such transfer becomes necessary to pursue the purposes of the processing described in this Privacy Notice, our Organization ensures that all possible transfers outside the EEA will be carried out in such a way as to ensure the full protection of the rights and freedoms of the data subjects. Where no adequacy decisions have been issued by the European Commission regarding the recipient third country, data transfers will be carried out by adopting the safeguards provided for in Articles 46 et seq. of the GDPR, including the standard contractual clauses approved by the European Commission, and a careful assessment of the legislation of the potential recipient country.

Your rights and how to contact us

As a data subject, you may exercise the rights provided for in Articles 15 et seq. of the GDPR, namely the rights to:

1. obtain confirmation at any time of the existence of the processing of your personal data and access such data and information concerning the processing;

2. request the rectification of inaccurate personal data and the completion of incomplete data;

3. request, in the cases provided for by the GDPR and subject to the special rules for certain processing, the erasure or restriction of the data once the retention periods have expired;

4. request the portability of your data in accordance with the GDPR and national legislation.

Requests should be sent to privacy@techbsa.com

Right to lodge a complaint

If you believe that the processing of your personal data is in violation of the Regulation, you have the right to lodge a complaint with the Data Protection Authority, pursuant to Art. 77 of the Regulation, or to seek judicial remedies (Art. 79 of the Regulation).

Changes

TECHNOLOGY BSA S.P.A. reserves the right to make changes to this Privacy Notice at any time, duly informing data subjects and in any case ensuring adequate and equivalent protection of personal data. To view any changes, you are invited to contact us at the following e-mail: privacy@techbsa.com

Last update: 31/10/2024