Privacy Policy

General information

Business&Sustainability S.R.L. is committed to protecting your privacy and processing your personal data in a clear and transparent way. We kindly invite you to read this policy, that is compliant with the current legislation on the protection of personal data (EU Regulation 2016/679 – GDPR), to understand how the personal data of users who browse or interact with the website of Business&Sustainability S.r.l. are processed, at the following address: www.b-st.it  (hereinafter referred to as “Website”).

Any other web pages, as well as other websites that may be linked to the Website, are not governed by this Privacy Policy. Therefore, we encourage you to review their applicable privacy notices before disclosing any personal information.

 

Data controller, type of data processed and nature of the provision

The Data Controller of personal data is Business&Sustainability S.R.L., with registered office in Piazza Repubblica 5, 21100 Varese (VA), Italy, VAT n. IT 03923880128 (hereinafter “B&ST”).

B&ST may collect users’ personal data while browsing the Website or data provided voluntarily when requesting information and/or activating services through specific data collection forms or any other contact methods. B&ST may also acquire information on users by obtaining it from the interaction methods carried out on the Website. For example, to ensure its proper functioning and improve the user experience, B&ST (or its service providers) may use cookies that can collect personal data. For more information on how to use cookies and how to handle them, please refer to our Cookie Policy.

 

• Navigation data

In the course of normal operation, the servers and computer systems responsible for the operation of the Website acquire certain personal data, the transmission of which is implicit in the use of Internet communication protocols. By its very nature, this information could, through processing and association with data held by third parties, allow the users to be identified. This category of data includes IP addresses or the domain names of the computers used by users who connect to the Website and other parameters relating to the users’ operating system and computer environment.

 

• Data provided voluntarily

The optional, explicit and voluntary sending of messages to the contact addresses indicated on the Website, as well as the filling in and forwarding of the forms on the Website, entail the acquisition of the sender’s personal and contact data necessary to reply, as well as all the personal data included in the communications and transmitted forms. The personal data that we kindly ask to provide through the contact channels set up by B&ST are collected only to follow up on user’s requests and could possibly be disclosed to third parties only to the extent that such communication is necessary to comply with the users’ requests.

Unless otherwise specified, all data requested by this Website are mandatory. If users refuse to communicate them, it may be impossible for this Website to provide its services. In the event that the Website indicates some data as optional, users are free to avoid to communicate such data, without this having any consequence on the availability of services or on the operation of the Website.

B&ST does not collect any personal data related to activities carried out on third party websites.

For any communication regarding data processing and use of cookies, B&ST provides the following email address: info@b-st.it.

 

Purposes of data processing

B&ST will process personal data for the following purposes:

• Navigation data

Navigation data is used to check the correct functioning of this Website.

• Data provided voluntarily

 

1. Manage access to the private area accessible via the “Login” section of the Website;
2. Follow up on users’ requests received through the “Contact” section of the Website.

The navigation data and data provided voluntarily may also be used to fulfill legal obligations, regulations or Community legislation, comply with requests from Authorities, bodies and public bodies, for the exercise of rights, including those of third parties, in court as well as, where required, in administrative or arbitration or conciliation procedures.

 

Legal basis for data processing

B&ST processes personal data relating to users if one of the following conditions exists:

• the user has given consent for one or more specific purposes;
• the processing is necessary for the execution of a contract with the user and/or for the execution of pre-contractual measures;
• the processing is necessary to fulfill a legal obligation to which the Data Controller is subject;
• the processing is necessary for the execution of a task in the public interest or for the exercise of public powers vested in the Data Controller;
• the processing is necessary for the pursuit of the legitimate interest of the Data Controller or of third parties.

However, it is always possible to ask the Data Controller to clarify the concrete legal basis of each treatment.

 

Processing methods

In relation to the above mentioned purposes, the processing of data takes place using manual, IT and telematic tools with logic strictly related to the purposes themselves and, in any case, in such a way as to guarantee the security and confidentiality of the data.

Storage times

The data are processed and stored for the time required by the purposes for which they were collected. Therefore:

• data collected for purposes related to the execution of a contract between the Data Controller and the user will be retained until the execution of this contract is completed.
• data collected for purposes related to the legitimate interest of the Data Controller will be retained until such interest is satisfied. Users can obtain further information regarding the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.

When the treatment is based on the user’s consent, the Data Controller can keep the data for longer until said consent is revoked. Furthermore, the Data Controller may be obliged to keep the data for a longer period in compliance with a legal obligation or by order of an authority.

 

Communication and data disclosure

Users’ personal data will not be published, exposed or made available and/or consulted by indeterminate subjects. In relation to one or more purposes described in the “Purpose of data processing” section, personal data may be known by:

• subjects in Italy or in countries of the European Union, who on behalf and/or in the interest of B&ST carry out specific services or carry out related, correlated, instrumental or support activities to those of B&ST or to navigation of the Website;

 

• third parties for the installation of any cookies as required by the Cookie Policy;

 

• competent authorities (including courts), for the performance of their institutional functions within the limits established by laws and/or regulations.

 

Data transfer

Personal data will not be transferred outside the European Union.

 

Rights of the data subject

The interested party may exercise, in relation to the data processing described herein, the rights provided for by the Regulation (Articles 15-21) where applicable, including:

• receive confirmation of the existence of personal data and access their content;
• receive a copy of their personal data provided to B&ST in a structured, commonly used format and transmit the same to another Data Controller;
• request the update, integration, correction of personal data;
• request the deletion of personal data or restrict the way in which their are used;
• withdraw the consent to the processing of personal data (to the extent that the processing is based on consent);
• oppose the processing of personal data by B&ST;
• obtain from B&ST the transformation into anonymous form or the blocking of personal data processed in violation of the law;
• to lodge a complaint with the Data Protection Authority.

 

Modifications to this Privacy Policy

The possible introduction of new sector regulations and the constant examination and updating of the services offered, could involve the need to make changes to the methods of processing personal data. It is therefore possible that this policy may vary over time. Therefore, we kindly invite you to periodically consult this webpage and check the below stated revision date. The new modified or amended Privacy Policy will apply from the stated revision date.

This Privacy Notice was written in Italian. To the extent any translated version of this Privacy Policy conflicts with the Italian version, the Italian version controls.

Rev. 1, 07.12.22