Privacy System

Disclosure pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 – WEB SERVICE (berti.net)
With this document (“Disclosure”), the Data Controller, as defined below, wishes to inform you about the purposes and methods of the processing of your personal data and your rights under Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on their free movement (“GDPR”). This Notice may be supplemented by the Data Controller where any additional services you request would involve further processing.

1. Data Controller
The Data Controller is Berti Pavimenti Legno di Berti Giancarlo & C P.IVA / CF: 00222430282 , Italy

The Data Controller, including through the designated facilities, will take charge of your request and provide you, without undue delay and in any case, at the latest, within one month of its receipt, with information regarding the action taken regarding your request.

Please be advised that if the Controller has doubts about the identity of the individual making the request, the Controller may request additional information necessary to confirm the identity of the data subject.

Categories of Interested Parties: Individuals, legal persons, public and private organizations.

2. Treatments
2.1. Performance of the Contract – Use of the Service

PROCESSING: E-COMMERCE (B2B)
The processing of your personal data is necessary for the acquisition of information prior to the conclusion of contracts that you will enter into with the Data Controller, for the completion and execution of the contract that provides for the provision of the service related to e-commerce B2B.

Purpose of Processing
Condition Lawfulness Processing: Contract Execution
Purpose: Use of the service in order to deliver B2B ecommerce services.
Description: Use of the service in order to deliver B2B ecommerce services.

Nature of conferral: Mandatory

Consequences of refusal to provide data: Refusal of consent to data processing will prevent the provision of the service by the Data Controller.

Minimum data protection measures: Unique user access to the ecommerce platform.At the digital level, Data Subjects’ data are contained in a server with exclusive authentication and suitable logical and physical security measures.Data are stored and historicized through periodic backup operations.

Personal data retention period: Your personal data will be actively processed for as long as necessary for the management of the existing relationship and/or the execution of the contract. The information collected for the evaluation of the conclusion of the contract, if not completed, will be deleted within 30 days.

Treatment Reference Standards: European Regulation 679/2016

Data recipients:
Berti Pavimenti Legno di Berti Giancarlo & C P.IVA / CF: 00222430282 , Italy , privacy@berti.net

Types of data processed:
Category: common data/Type: master data
Scope of dissemination: Data are not disseminated and/or transmitted to third parties
Automated prof ilingprocessing: No automated profiling activities
Information on minors: The service is intended for users who have reached the age of 16.
Transfer to third countries: Data are resident within Italian territory

2.2. Performance of the Contract – Use of the Service

PROCESSING: USE OF THE SERVICE
The processing of your personal data is necessary for the acquisition of information prior to the conclusion of contracts that you will enter into with the Data Controller, for the completion and execution of the contract that provides for the provision of the service aimed at the sale of goods offered by the Data Controller.

Purpose of processing:
Condition of lawfulness Processing: Execution Contract
Purpose: Execution of the contract for use of the service.
Description: Implied acquisition of consent from the customer act for the provision of the service offered.
Nature of conferment: Mandatory

Consequences of refusal to provide data: Failure to provide data will make it impossible for the company to follow up on your pre-contractual/contractual requests and execute the contract.

Minimum data protection measures: At the paper level, Data Subjects’ data are contained within archives of exclusive access by designated appointees. At the digital level, Data Subjects’ data are contained in a server with exclusive authentication and suitable logical and physical security measures.

Treatment Reference Standards: Execution of pre-contractual measures, of the contract.

Data recipients:
Berti Pavimenti Legno di Berti Giancarlo & C P.IVA / CF: 00222430282 , Italy , privacy@berti.net

Types of data processed:
Category: Common data/Type: master data
Category: Economic data/Type: bank data

2.3. Legal obligations

PROCESSING: LAW FULFILLMENTS
The processing of your personal data by the Data Controller may also be related to the fulfillment of obligations required by laws, regulations and/or EU legislation, or by supervisory and control bodies or other authorities empowered to do so.

Purpose of Processing
Condition Lawfulness Processing: Legal Obligation
Purpose: fulfillment of legal obligations.
Description: fulfillment of legal obligations.

Nature of conferral: Mandatory

Consequences of refusal to provide data: Failure to provide the data will prevent the Data Controller from performing the activity you requested and which presupposes the fulfilment of the legal obligation by the Data Controller.

Personal Data Retention Period: Your personal data will be processed for this purpose for as long as necessary for the fulfillment of legal obligations under applicable law. In this regard, your personal data will be retained for 10 years from the termination of the contract or, if later, from a binding decision issued by a competent authority (e.g., court ruling), without prejudice to any retention obligations relating to particular categories of data, for longer periods of time, prescribed by the legal system.

Treatment Reference Standards: Fulfilling a legal obligation.

Data recipients:
Berti Pavimenti Legno di Berti Giancarlo & C P.IVA / CF: 00222430282 , Italy , privacy@berti.net
Studio Bogoni P.IVA / CF: 04086760289 – Via Foscolo, 8 35131 Padova (Padua) , Italy , bogoni@studiobogoni.it
Studio Avv. Ernesto De Toni P.IVA / CF: 02473360283 – Via Dante, 58 35139 Padova (Padua) , Italy , ernestodetoni@gmail.com
Mohsen Hamzehian: P.IVA / CF: HMZMSN53L24Z224F – PIAZZA MODIN 12 35129 Padova (Padua) , Italy
Studio B.S.A. Srl P.IVA / CF: 01258670296 – Via Aldo Moro,6 45100 Rovigo (Rovigo) , Italy , info@studiobsa.it

Types of data processed:
Category: Common data/Type: master data
Category: Economic data/Type: banking

2.4. Profiling

PROCESSING: PROFILING
The processing of your personal data and consumption habits allows the Data Controller to propose the best offers in accordance with your personal needs.

Purpose of Processing
Condition Lawfulness Processing: Consent
Purpose: Acquisition of explicit consent for profiling activities.
Description: Acquisition of explicit consent from the Data Subject in order to initiate profiling activities aimed at promoting targeted products and services based on the preferences of the Data Subject.

Nature of conferment: Optional

Consequences of refusal to provide data: Failure to provide consent, although it will likewise enable the Data Controller to execute the activity you requested, will prevent the Data Controller from identifying services that conform to your personal qualities.

Personal Data Retention Period: Your personal data will be processed for profiling purposes only for 12 months after collection. In addition, your personal data, processed as described, will in any case be deleted within 30 days from the dissolution of the last contractual link with the Data Controller. In any case, should you decide to revoke consent or object to the processing, your data will be deleted within 30 days of the request.

Reference Standards of Processing: Express consent of the data subject.

Data recipients:
Berti Pavimenti Legno di Berti Giancarlo & C P.IVA / CF: 00222430282 , Italy , privacy@berti.net

Types of data processed:
Category: common data/Type: master data

2.5. Marketing

PROCESSING: DIRECT MARKETING
The Data Controller intends to process your personal data for the purpose of sending you commercial communications of products and services of the Data Controller, including direct marketing conducted using the results of analytical or profiling activities, as well as conducting direct sales and carrying out surveys or market research.

Purpose of Processing
Condition Lawfulness Processing: Consent
Purpose: Acquisition of consent from the Data Subject
Description: Acquisition of explicit consent from the Data Subject for promotional and direct marketing purposes promoted by Data Controller.

Nature of conferment: Optional
Consequences of refusal to provide data: Failure to provide data will not affect the fulfillment of your requests and the execution of contracts but will result in the inability of the Data Controller to send you marketing communications.

Personal Data Retention Period: Your personal data, processed as described, will be deleted within 30 days from the dissolution of the last contractual link with the Data Controller. In any case, if you decide to revoke consent or object to the processing, your personal data will be deleted within 30 days of the request.

Recipients of the Processing:
Berti Pavimenti Legno di Berti Giancarlo & C P.IVA / CF: 00222430282 , Italy , privacy@berti.net

Types of data processed:
Category: common data
Type: master data

3. Cookies Policy:
3.1. Informational Url: http://www.berti.net/privacy/

3.2. Extended Cookie Policy:

We use technology on this site to collect information to help improve Your online experience.
This policy refers to the use of cookies and how you can manage them.
We reserve the right to change this policy at any time.
Any change in this policy will take effect on the date it is posted on the Site.
Cookies are small text strings that sites visited by the user send to the user’s terminal (usually the browser), where they are stored and then transmitted back to the same sites on the next visit by the same user.
In the course of browsing a site, the user may also receive cookies on his terminal that are sent by different sites or web servers (so-called “third parties”), on which some elements (such as, for example, images, maps, sounds, specific links to pages of other domains) present on the site he is visiting may reside.

Cookies, usually present in users’ browsers in very large numbers and sometimes even with characteristics of wide temporal persistence, are used for different purposes: performing computer authentication, session tracking, storing information about specific configurations regarding users accessing the server, etc.

In order to arrive at a proper regulation of these devices, it is necessary to distinguish them given that there are no technical characteristics that differentiate them from each other precisely on the basis of the purposes pursued by those who use them.

FIRST PARTY, technical (session) persistent cookies
Technical cookies are those used for the sole purpose of “carrying out the transmission of a communication over an electronic communications network, or to the extent strictly necessary for the provider of a WEB service explicitly requested by the user to provide such service.” They are not used for any further purposes and are normally installed directly by the website owner or operator. They can be divided into navigation or session cookies, which ensure normal navigation and use of the website (allowing, for example, to make a purchase or authenticate to access restricted areas). This website makes use of first-party persistent technical session cookies.

FIRST PARTY, analytical cookies
Analytical cookies, also known as “analytics”, enable detailed statistics about visitors to a website such as how certain pages are viewed, the number of visitors, time spent on the site by users and how they arrive. Analytics cookies are assimilated to technical cookies where they are used directly by the site operator to collect information in aggregate form about the number of users and how they visit the site.
This site makes use of first-party analytics cookies.

FIRST-PARTY, profiling cookies
Profiling cookies are aimed at creating profiles related to the user and are used in order to send advertising messages in line with the preferences expressed by the user when browsing the web. Due to the particular invasiveness that such devices can have within the private sphere of users.
This site may share this information with other parties, such as, for example, advertisers. European and Italian law provides that you may withhold consent regarding the use of such cookies. This site makes use of FIRST PARTY, profiling cookies.

THIRD-PARTY, analytical cookies
Analytical cookies, also known as “analytics”, enable detailed statistics about visitors to a website such as, for example, the display of certain pages, the number of visitors, of the time spent on the site by users, and of the mode of arrival. This site makes use of a Web analytics service provided by Google.

THIRD-PARTY, profiling cookies
In order to provide you with additional features and services within this site, we work with third parties who, independently and beyond our direct control, may use their cookies to collect information about your activities while browsing the pages of this site.
This information could be used to serve you advertisements in line with your interests, based on the content you visit, or to measure the effectiveness of advertising campaigns.
Such cookies could be contained in various elements within the web page, such as banner ads, images, videos, etc.
A sensitive example is the presence of the so-called “social plugins” or “social sharing buttons” of the main social networks (Facebook, Twitter, Google+ and LinkedIn), aimed at sharing the content of the web page on the social networks themselves. The use of data collected through third-party cookies, over which we do not exercise any kind of control, is governed by the relevant disclosures, which we ask you to refer to.
This site makes use of THIRD-PARTY, profiling cookies.

Cookie Management
Below is a list of the most common browsers with links to their cookie management settings:

Microsoft Edge
Safari 2 or higher;
Opera 10.5 and above;
FireFox 3.5 and above;
Google Chrome 10 and above;

Browsers provide a “private” browsing mode, enabling which cookies are always deleted after each browsing session is closed.
Second, you can disable third-party profiling cookies by visiting http://www.youronlinechoices.com.

You can also disable Google Analytics cookies by downloading the appropriate browser add-on to disable Google Analytics at
following web address: https://tools.google.com/dlpage/gaoptout.

Cookie Policy Third Party
Cookie Policy Facebook https://it-it.facebook.com/policies/cookies/
Cookie Policy Google https://www.google.it/intl/it/policies/technologies/cookies/
Cookie Policy Google https://www.linkedin.com/legal/cookie-policy
Cookie Policy Twitter https://twitter.com/it/privacy

Granting Consent Cookie Use
By continuing navigation from the banner containing the so-called brief information, scrolling this page or clicking any of its elements, you grant the use of the
cookies employed on this Internet site by accepting the policy on cookies described above.
You can always revoke the consent previously given through the methods indicated in the section headed “COOKIE MANAGEMENT”.

3.3. Site Cookies:

To view all cookies used on this site click https://webcookies.org/cookies/berti.net/16026627/nocache

3.4. Types of Cookies active on the site:

Third-party profilers
Third-party analytics WITHOUT IP address anonymization using cookies in order to cross-reference user data.
Technical – session – first-party persistent

3.5. List of Web Services:

Social Media Buttons and WidGet: Like Button and Facebook Widget
Registration and Authentication: Registration with Form
Remarketing, behavioral advertising (Behavioral Marketing): DoubleClick for Publishers Audience
Remarketing, behavioral advertising (Behavioral Marketing): Facebook Remarketing
Statistics, Performance: Google Analytics
Statistics, Performance: Google Tag Manager

4. What rights do you have as a data subject:
In relation to the processing operations described in this Notice, as a data subject you may, as provided for in European Regulation 679/2016, exercise the rights enshrined in Articles 15 to 21 and, in particular:

Right of access – Article 15 GDPR: the right to obtain confirmation as to whether or not personal data concerning you are being processed and, if so, to obtain access to your personal data, including a copy thereof.

Right of rectification – Article 16 GDPR: Right to obtain, without undue delay, rectification of inaccurate personal data concerning you and/or supplementation of incomplete personal data;

Right to erasure (right to be forgotten) – Article 17 GDPR: Right to obtain, without undue delay, the erasure of personal data concerning you.

Right to restriction of processing – Article 18 GDPR: right to obtain restriction of processing, when:
1. the data subject disputes the accuracy of personal data, for the period necessary for the controller to verify the accuracy of such data;
2. the processing is unlawful and the data subject objects to the deletion of the personal data and instead requests that its use be restricted;
3. the personal data are necessary for the data subject to establish, exercise or defend a right in a court of law;
the data subject has objected to the processing pursuant to Article 21 GDPR, during the period pending verification as to whether the data controller’s legitimate reasons prevail over those of the data subject.

Right to data portability – Article 20 GDPR: the right to receive, in a structured, commonly used and machine-readable format, personal data concerning you provided to the Controller and the right to transmit it to another controller without hindrance, if the processing is based on consent and carried out by automated means. In addition, the right to have your personal data transmitted directly from the Bank to another controller if this is technically feasible;

Right of opposition – Article 21 GDPR: the right to object at any time on grounds relating to your particular situation to the processing of personal data concerning you based on the lawful condition of legitimate interest or the performance of a task carried out in the public interest or in the exercise of official authority, including profiling, unless there are legitimate grounds for the Controller to continue the processing that override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of a legal claim; may object at any time to the processing if personal data are processed for direct marketing purposes, including profiling, insofar as it is related to such direct marketing;

The above rights may be exercised, vis-à-vis the Holder, by contacting the references above.

The exercise of your rights as a data subject is free of charge under Article 12 GDPR. However, in the case of requests that are manifestly unfounded or excessive, including because they are repetitive, the Data Controller may charge you a reasonable fee in light of the administrative costs incurred in handling your request, or deny satisfaction of your request.

RIGHT OF WITHDRAWAL: To revoke consent – at any time, as easily as it was given, without affecting the lawfulness of the processing based on the consent given before revocation.

RIGHT TO COMPLAIN: The data subject has the right to lodge a complaint with the Italian Data Protection Authority, Piazza di Montecitorio n. 121, 00186, Rome (RM).

The undersigned hereby declares that he/she has received from the Data Controller the information on the use of his/her personal data and that he/she consents, in accordance with the privacy legislation, to the processing by the same of the special categories of personal data provided for the purpose of carrying out the activities necessary for the activation and management of the relationships, operations and services requested.