Data Notice

/Data Notice
Data Notice 2018-07-18T11:46:42+00:00

COLLECTED DATA
When you use our services, you allow our company to collect some of your personal data. The purpose of this page is to explain to you which data we collect, why and how we use it.
We only process data supplied by the user, we do not acquire nor process data in an automated manner.

Third-party data

If you provide personal data of third parties, such as data about your family or friends, you must be sure that these subjects have been adequately informed and have agreed to the processing in the manner described by this notice.

Data of persons under 16 years of age

If you are under 16 years of age, you cannot provide us your personal data and you cannot register on Butti Srl, and in any case, we are not liable for any false statement supplied by you. If we realize that your declarations are untruthful, we will immediately delete any personal data acquired.

USE OF THE COLLECTED DATA
We may use the data collected, if you have given us an explicit consent, to inform you about the activities related to your interests.

In particular, we use it to:

Communicate to you promotional, commercial and advertising activities about events, initiatives or partnerships of Butti Srl, via email.
Perform activities of analysis and reporting related to promotional communication systems, such as the recognition of the number of e-mails opened, of the clicks on links located inside the communication, the type of device used to read the communication and its operating system or the list of persons unsubscribed from the newsletter.

COMPULSORY DATA PROVISION
The provision of the personal data is compulsory only for the processing required for the delivery of the services offered by Butti Srl (a refusal for purposes of service delivery makes impossible the use of the service itself).

PROCESSING SUBJECTS
The data controller is Butti Srl in the person of its legal representative pro-tempore, with registered office located in Via S. Mayer 13 – 24034 Cisano Bergamasco (BG) Vat Code/ Tax Code 01900630169

The data controller uses data processors for the achievement of the purposes specified in paragraph 1 to supervise personal data protection.

The data collected within the scope of the provision of services may be communicated to:

Companies that perform functions closely related and instrumental to the operations (also technical operations), such as providers of direct marketing and customer care services, companies that deliver storage, administration, billing and payment services, and administrative and judicial authorities in accordance with the obligations of the law provisions.
Your personal data may be transferred outside the European Union to be processed by some of our service suppliers. In this case, we ensure that this transfer takes place in compliance with the legislation in force and that it is guaranteed an adequate level of protection of the personal data based on a decision of adequacy, according to standard clauses laid down by the European Commission or to Binding Corporate Rules.

In no case we transfer or sell your personal data to third parties.

DATA EDITING AND ACCESS
At any time you can withdraw the consent to the processing by sending an email via the form on the contacts page of our site, with the subject “use consent withdrawal and personal data”.

At any time you can export your data by sending an email request via the form on the contacts page of our site, with the subject “personal data export”.

Your personal data will be exported within 30 days or, if the export is particularly complex, within three months.

Any natural person who uses our service can:

Obtain from the controller, at any time, information about the existence of his/her personal data, the origin of the same, the aims and modalities of the processing and, if the personal data exists, obtain access to the personal data and to the information referred to in Article 15 of the GDPR, request the updating, correction, integration, deletion, limitation of the processing of the data if one of the conditions provided for in Article 18 of the GDPR is met, the transformation in anonymous form or the blocking of the personal data, processed in violation of the law, including that whose retention is not necessary in relation to the purposes for which data was collected and/or subsequently processed, object, in whole or in part, for legitimate reasons, to the processing of data, even if pertinent to the purpose of the collection and processing of the personal data provided for the purposes of commercial information or of sending advertising or direct sale materials or for market researches or commercial communication. Each user has also the right to withdraw his/her consent at any time without affecting the lawfulness of processing based on the consent given before the withdrawal, to receive his/her personal data, supplied deliberately and actively or through the utilization of the service, in a structured format, of common use and readable by an automatic device, and to transmit it to another data controller without impediments, to file a complaint to the Italian Data Protection Authority (Garante).

DATA RETENTION
For the purpose of analyses aimed at the development and improvement of the service, the personal data of the user may be subject to the same retention period.

For the purpose of direct marketing and profiling, we keep your data for a maximum period equal to that provided for by the applicable regulations (respectively equal to 24 and 12 months).

For the purpose of direct marketing and profiling, we keep your data for a maximum period equal to that provided for by the applicable regulations (respectively equal to 24 and 12 months).
Invoices, accounting documents, and data related to transactions are retained for 11 years within the meaning of the law (including tax obligations).

In the case of the exercise of the right to be forgotten through explicit request of deletion of the personal data processed by the controller, we remind you that this data will be kept in protected form and with limited access, solely for the purposes of investigation and prosecution of offenses, for a period not exceeding 12 months from the date of the request and will subsequently be deleted safely or anonymised in an irreversible manner.

We also remind you that, for the same purposes, the data related to the telematic traffic, excluding however the contents of communications, will be retained for a period not exceeding 6 years from the date of communication, within the meaning of Article 24 of the Law no. 167/2017, which has transposed the EU Directive 2017/541 relating to terrorism.

CHANGES TO THE NOTICE
This notice could be subject to change. If substantial changes are made to the use of the data related to the user on the part of the Data Controller, the latter will alert the user by posting them with the utmost evidence on its pages or through alternative or similar means.