Browsing as Customer view opened by BackBack to the back office
Bauking

Privacy Policy

Who is the Data Controller?

Bauking S.r.l., with registered office in Via dei Vanga, 61 – 39100 Bolzano (BZ) (VAT Number: 03128000217) (hereinafter, the “Controller”)

Pursuant to Art. 4 no.7 GDPR: the data controller is the one who determines the purposes and means of the processing of personal data, and their responsibilities are identified by Art. 24 GDPR.

How can I contact the Controller?

The company contact details are:

1. Introduction

Pursuant to the European General Data Protection Regulation (GDPR), legal entities are not considered data subjects, and therefore the European regulation does not apply. However, if personal data referring to a physical person is included in the context of collecting corporate data, this person shall be considered a data subject under the aforementioned regulation, with the consequent applicability of the relevant legislation.

2. What processing activities are carried out through the site? And what are the legal bases, purposes, and retention periods?

  1. REGISTRATION

  • Purpose: The purpose of data processing is to request registration on the Bauking platform; to exercise or protect a right in the context of litigation.

  • Legal Basis: Performance of pre-contractual measures carried out upon request of the Data Subject. In case of litigation, the legal basis is the legitimate interest of the data controller.

  • Retention Period: Data will be processed for 3 years or for a longer period in case of litigation.

  • Note: The User is completely free to provide the requested data, as there is no legal obligation to supply it. However, if the user chooses not to provide the data indicated as essential, the Data Controller will not be able to achieve the stated purpose.

  1. BROWSING DATA

  • Purpose: Site security.

  • Legal Basis: We will process data based on the company's legitimate interest in cybersecurity and compliance with legal obligations. The legal basis for processing non-necessary cookies is consent.

  • Retention Period: 24 months

  • Note: For the cookie policy, please refer to the specific notice.

3. What else should I know?

The data will be processed lawfully, fairly, and with the utmost confidentiality, in compliance with adequate security measures as provided for by the Code and the Regulation. The processing will be carried out using digital means. The data will not be subject to public disclosure. Furthermore, the user will not be subjected to automated decision-making processes such as profiling, unless they consent to this through the installation of cookies or other tracking tools, for the regulation of which please refer to the specific notice.

4. To whom will my data be communicated?

The Controller may communicate the data to all subjects to whom communication is mandatory by law for the fulfillment of purposes provided by law or is necessary for the performance of the contract.

The Controller also uses certain companies or IT tools that carry out data processing activities on the personal data of data subjects exclusively in the interest of the Controller, such as couriers, all adequately appointed as Data Processors pursuant to Art. 28 GDPR.

The data will also be communicated to payment gateways as independent controllers.

The list of Data Processors is available at the registered office.

5. What is the location for data storage and transfer?

The management and storage of personal data will take place on servers located both inside and outside the EU. The Data Controller guarantees that extra-EU transfer takes place in compliance with Art. 44-47 Chapter V of the GDPR through the signing of Standard Contractual Clauses and/or through the EU Commission's Adequacy Decision.

6. What are my rights and how can I exercise them?

a) Data Subject Rights

The user, in their capacity as a data subject, has the rights set forth in Art. 15 et seq. of the Regulation, specifically:

  1. RIGHT OF ACCESS (Art. 15 GDPR)
    The data subject has the right to obtain confirmation as to whether or not personal data concerning them are being processed, even if not yet recorded, and their communication in an intelligible form.

  2. RIGHT TO RECTIFICATION (Art. 16 GDPR)
    The data subject has the right to obtain the rectification of inaccurate personal data concerning them and also the integration of incomplete data.

  3. RIGHT TO ERASURE / "RIGHT TO BE FORGOTTEN" (Art. 17 GDPR)
    The data subject has the right to obtain the erasure of personal data in the presence of specific reasons such as the withdrawal of consent, objection to processing, or if the data are no longer necessary for the purposes for which they were collected and processed, or in case of unlawful processing. It will not always be possible to proceed with erasure, but it will certainly be the Data Controller's responsibility to provide adequate justification.

  4. RIGHT TO RESTRICTION OF PROCESSING (Art. 18 GDPR)
    The data subject has the right to obtain the restriction of processing in the presence of particular circumstances, such as, for example, in the case of a request for rectification or objection during the time of assessment of the requests.

  5. RIGHT TO DATA PORTABILITY (Art. 20 GDPR)
    If the processing is based on consent or a contract and is carried out by automated means, the data subject may receive the data in a structured, commonly used, and machine-readable format or ask for them to be transmitted to another controller.

  6. RIGHT TO OBJECT (Art. 21 GDPR)
    The data subject has the right to object, in whole or in part: a) on legitimate grounds, to the processing of personal data concerning them, even though relevant to the purpose of the collection; b) to the processing of personal data concerning them for purposes not covered by Art. 2. The user can submit a request to object to the processing of their personal data pursuant to Article 21 of the GDPR, highlighting the reasons justifying the objection: the Controller reserves the right to evaluate the request, which would not be accepted in the event of compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the user.

  7. RIGHT TO LODGE A COMPLAINT
    The data subject has the right to lodge a complaint with the competent supervisory authority pursuant to Article 77 of the GDPR if they consider that the processing of their data is contrary to the regulations in force.

b) Methods of Exercise:

The data subject can exercise the rights referred to in the previous article at any time by contacting the Data Controller at the addresses listed above.

Latest Version: ________________________

This privacy notice was drafted by Polimeni.Legal