BEST srl Privacy Policy

BEST srl collects some Personal Data from its Users.

Policy summary

Personal data collected for the following purposes and using the following services:

To Contact the User

• Contact form
• Personal data: city, surname, E-mail, name, telephone number, CV, province, website and various types of data

   

Contact via telephone

• Personal Data: telephone number
• Mailing list or newsletter
• Personal data: E-mail, address, province and website

Hosting and backend infrastructure

• Amazon Web Services (AWS)
• Personal Data: various types of data in accordance with the specifications of the service privacy policy

Interaction with social networks and external platforms

• “Like” Button and Facebook social media widget and Tweet Button and Twitter social media widget
• Personal Data: Cookies and utilisation data

Protection against SPAM

• Google reCAPTCHA
• Personal Data: Cookies and utilisation data

Platform and hosting services

• com
• Personal Data: various types of data in accordance with the specifications of the service privacy policy

Statistics

• Google Analytics with anonymised IP and WordPress Stat
• Personal Data: Cookies and utilisation data

Content performance and functionality test (A/B testing)

• Google Website Optimizer
• Personal Data: Cookies and utilisation data

Viewing of content from external platforms

• Gravatar
• Personal Data: Utilisation data and E-mail

Google Maps Widget, Instagram Widget and YouTube Video Widget

• Personal Data: Cookies and utilisation data
• Google Fonts and Fonts.com Web Fonts
• Personal Data: Utilisation data and various types of data in accordance with the specifications of the service privacy policy

Contact information

Data Processing Controller
BEST srl – VAT No.: 0422240236
Via Polveriera Vecchia, 31
37234 Verona – Italy
Data controller: BEST srl
Controller E-mail address: brancaleoni@bellagrid.com

 
Complete Policy

Types of Data collected

The Personal Data collected by BEST srl, autonomously or through third parties, includes: Cookies, Utilisation data, E-mail, name, surname, province, city, website, telephone number, various types of data and address.

Complete details on each type of data collected are provided in the dedicated sections of this privacy policy or through specific advisory texts display prior to the collection of the data itself.

Personal Data can be freely provided by the User or, in the case of Utilisation Data, collected automatically during the use of BEST srl

Unless otherwise specified, all the Data requested by BEST srl is compulsory. If the User refuses to communicate it, it may be impossible for BEST srl to provide the Service. In the event that BEST srl indicates Data as optional, Users are free to abstain from providing said Data without this having any consequence on the availability of the Service or on its functionality.

Users who may have doubts on which Data is compulsory are encouraged to contact the Controller.

Any use of Cookies – or other tracking instruments – by BEST srl or controllers of the third-party services used by BEST srl, unless otherwise specified, is for the purpose of providing the Service requested by the User, in addition to further purposes described in this document and in the Cookie Policy, if available.

The User assumes responsibility for the Personal Data of third parties obtained, published or shared through BEST srl and guarantees to have the right to communicate or disclose it, exonerating the Controller from any responsibilities toward third parties.

Method and location of the processing of the collected Data

Handling method

The Controller adopts the appropriate security measures aimed at preventing unauthorised access, disclosure, modification or destruction of the Personal Data.

Processing is carried out using digital and/or telematic instruments with organisational methods and logic strictly correlated with the indicated purposes. In addition to the Controller, in some cases, other subjects involved in BEST srl’s organisation may have access to the Data (administrative, sales, marketing, legal personnel and system administrators) or external subjects (such as third party technical service suppliers, postal couriers, hosting providers, information technology companies and communication agencies) also named as Processing Managers by the Controller if necessary. The updated list of Managers can always be requested from the Processing Controller.

Legal base of the processing

The Controller processes Personal Data relative to the User if one of the following conditions exists:

The User has given consent for one or more specific purposes; Note: in some legal systems, the Controller may be authorised to process Personal Data without the existence of the User’s consent or another of the legal bases specified below until the User opposes to said processing (“opt-out”). Nevertheless, this is not applicable if the Personal Data processing is regulated by European legislation on the protection of Personal Data;

the processing is necessary to carry out a contract with the User and/or pre-contractual measures;

the processing is necessary to fulfil a legal obligation to which the Controller is subject;

the processing is necessary to carry out a public interest task or to exercise public powers with which the Controller has been endowed;

the processing is necessary to pursue the legitimate interest of the Controller or third parties.

In any case, the Controller can always be asked to clarify the concrete legal basis of each processing and particularly to specify whether the processing is based on law, provided for by a contract or necessary to stipulate a contract.

Location

The Data is processed in the Controller’s operational branches and in any location where the parties involved in the processing are located. For more information, contact the Controller.

The User’s Personal Data may be transferred to a country other than the one the User is in. To obtain further information on the location of the processing, the user can refer to the section on the Personal Data processing details.

The User has the right to obtain information on the legal basis of the transfer of Data outside of the European Union or to an international organisation that is an international public-law organisation or one constituted by two or more countries such as, for example, the UN, as well as on the security measures adopted by the Controller to protect the Data.

Should one of the transfers just described take place, the User can refer to the respective sections of this document or ask the Controller for information using the contact details indicated in the introduction.

Retention period

The Data is processed and retained for the time required by the purposes for which it was collected.

Therefore:

The Personal Data collected for purposes connected to the execution of a contract between the Controller and the User will be retained until execution of said contract is completed.

The Personal Data collected for purposes that can be traced to the legitimate interest of the Controller will be retained until said interest has been satisfied. The User can obtain further information on the legitimate interest pursued by the Controller in the relative sections of the document or contacting the Controller.

When the processing is based on the consent of the User, the Controller can retain the Personal Data longer until said consent is revoked. Moreover, the Controller may be obliged to retain the Personal Data for a longer period in compliance with a legal obligation or by the order of an authority.

At the end of the retention period, the Personal Data will be deleted. Therefore, at the expiration of said term, the right to access, cancellation, rectification and the right to portability of the Data can no longer be exercised.

Purpose of the Processing of the collected Data

The User’s Data is collected to allow the Controller to provide services, as well as for the following purposes: Statistics, Protection against SPAM, Content performance and functionality test (A/B testing), Viewing of content from external platforms, Payment management, Platform and hosting services, Interaction with social networks and external platforms, Contacting the User and Hosting and backend infrastructure.

To obtain further detailed information on the purposes of the processing and on the concretely relevant Personal Data for each purpose, the User can refer to the relative sections of this document.

Personal Data processing details

The Personal Data is collected for the following purposes and using the following services:

To Contact the User

Contact form (BEST srl)

By filling in the contact form with his or her Data, the User consents to its use to respond to requests for information, estimates or responses of any other nature indicated by the heading on the form.

Personal Data collected: city, surname, E-mail, name, telephone number, province, website and various types of Data.

Telephone contact (BEST srl)

The Users who have provided their telephone number may be contacted for commercial or promotional purposes connected to BEST srl, as well as for meeting support requests.

Personal Data collected: telephone number.

Mailing list or newsletter (BEST srl)

With subscription to the mailing list / newsletter, the User’s E-mail address is automatically inserted on a list of contacts to whom a periodic newsletter and information, including commercial and promotional information, relative to BEST srl can be transmitted. The User’s E-mail address may also be added to this list as a result of registering with BEST srl or after making a purchase.

Personal data collected: E-mail, address, province and website.

Hosting and backend infrastructure

The function of this type of service is to host Data and files that allow BEST srl to operate, allow distribution of and make available an infrastructure ready for use to provide specific features of BEST srl

Some of these services work through servers that are geographically displaced in different locations, making it difficult to determine the exact location in which the Personal Data is stored.

Amazon Web Services (AWS) (Amazon Web Services, Inc.)

Amazon Web Services is a hosting and backend service provided by Amazon.com Inc.

Personal Data collected: various types of data in accordance with the specifications of the service privacy policy.

Location of the processing: United States – Privacy Policy. Subject in compliance with the Privacy Shield.

Interaction with social networks and external platforms

This type of service allows interaction with social networks or with other external platforms directly from the BEST srl pages.

The interactions and information acquired from BEST srl are, in any case, subject to the User’s privacy settings relative to each social network.

In the event that an interaction service with social networks is installed, it is possible that, even if the Users do not use the service, it may still collect traffic data relative to the pages on which it is installed.

Facebook Like button and social media widgets (Facebook, Inc.)

The Facebook “Like” button and social media widgets are interaction services with the Facebook social network provided by Facebook, Inc.

Personal Data collected: Cookies and Utilisation Data.

Location of the processing: United States – Privacy Policy. Subject in compliance with the Privacy Shield.

Twitter Tweet button and social media widgets (Twitter, Inc.)

The Facebook Tweet button and social media widgets are interaction services with the Twitter social network provided by Twitter, Inc.

Personal Data collected: Cookies and Utilisation Data.

Location of the processing: United States – Privacy Policy. Subject in compliance with the Privacy Shield.

Protection against SPAM

This type of service analyses the BEST srl traffic, potentially containing the User’s Personal Data, for the purpose of filtering it from parts of traffic, messages and content recognised as SPAM.

Google reCAPTCHA (Google Inc.)

Google reCAPTCHA is a SPAM protection service provided by Google Inc.

Use of the reCAPTCHA system is subject to the Google privacy policy and terms of use.

Personal Data collected: Cookies and Utilisation Data.

Location of the processing: United States – Privacy Policy. Subject in compliance with the Privacy Shield.

Platform and hosting services

The purpose of these services is to host BEST srl key components and make them work, making distribution of BEST srl possible from a single platform. These platforms provide the Controller with a broad range of instruments such as, for example, analytical instruments to manage user registration, to manage comments and the database, for electronic commerce, for processing payments, etc. Use of these instruments implies the collection and processing of Personal Data. Some of these services work through servers that are geographically displaced in different locations, making it difficult to determine the exact location in which the Personal Data is stored.

WordPress.com (Automatic Inc.)

WordPress.com is a platform provided by Automattic Inc. which allows the Controller to develop, operate and host BEST srl

Personal Data collected: various types of data in accordance with the specifications of the service privacy policy.

Location of the processing: United States – Privacy Policy.

Statistics

The services contained in this section allow the Processing Controller to monitor and analyse the traffic data and keep track of the User’s behaviour.

Google Analytics with anonymised IP (Google Inc.)

Google Analytics is an analysis service provided by Google Inc. (“Google”). Google uses Personal Data collected for the purpose of tracking and examining the use of BEST srl, to compile reports and share them with the other services developed by Google.

Google may use the Personal Data to contextualise and personalise the advertisements on its advertising network.

This integration with Google Analytics renders your IP address anonymous. The anonymisation function abbreviates the User’s IP address within the confines of the European Union member States or in other countries in compliance with the agreement on the European Economic Space. Only in exceptional cases will the IP address be sent to Google servers and abbreviated inside the United States.

Personal Data collected: Cookies and Utilisation Data.

Location of the processing: United States – Privacy Policy – Opt Out. Subject in compliance with the Privacy Shield.

WordPress Stat (Automattic Inc.)

WordPress Stats is a statistics service provided by Automattic Inc.

Personal Data collected: Cookies and Utilisation Data.

Location of the processing: United States – Privacy Policy.

Content performance and functionality test (A/B testing)

The services contained in this section allow the Processing Controller to keep track of and analyse the User’s response in terms of traffic or behaviour, in relation to changes of the structure, the text or any other component of BEST srl

Google Website Optimizer (Google Inc.)

Google Website Optimizer is an A/B testing service provided by Google Inc. (“Google”).

Google may use the Personal Data to contextualise and personalise the advertisements on its advertising network.

Personal Data collected: Cookies and Utilisation Data.

Location of the processing: United States – Privacy Policy. Subject in compliance with the Privacy Shield.

Viewing of content from external platforms

This type of service allows you to view content hosted on external platforms directly from the BEST srl pages and interact with them.

In the event that this type of service is installed, it is possible that, even if the Users do not use the service, it may still collect traffic data relative to the pages on which it is installed.

Gravatar (Automattic Inc.)

Gravatar is an image viewing service managed by Automattic Inc. which allows BEST srl to integrate this content within its own pages.

Please note that, if the Gravatar images are used for comment systems, the commenter’s E-mail (or part of it) could be sent to Gravatar, even if it is not registered for this service.

Personal Data collected: Utilisation data and E-mail.

Location of the processing: United States – Privacy Policy.

Google Maps Widget (Google Inc.)

Google Maps is a maps viewing service managed by Google Inc. which allows BEST srl to integrate this content within its own pages.

Personal Data collected: Cookies and Utilisation Data.

Location of the processing: United States – Privacy Policy. Subject in compliance with the Privacy Shield.

Google Fonts (Google Inc.)

Google Fonts is a font styles viewing service managed by Google Inc. which allows BEST srl to integrate this content within its own pages.

Personal Data collected: Utilisation data and various types of Data in accordance with the specifications of the service privacy policy.

Location of the processing: United States – Privacy Policy. Subject in compliance with the Privacy Shield.

Fonts.com Web Fonts (Monotype Imaging Holdings Inc.)

Fonts.com Web Fonts is a font styles viewing service managed by Monotype Imaging Holdings Inc. which allows BEST srl to integrate this content within its own pages.

Personal Data collected: Utilisation data and various types of Data in accordance with the specifications of the service privacy policy.

Location of the processing: United States – Privacy Policy.

Instagram Widget (Instagram, Inc.)

Instagram is an image viewing service managed by Instagram Inc. which allows BEST srl to integrate this content within its own pages.

Personal Data collected: Cookies and Utilisation Data.

Location of the processing: United States – Privacy Policy.

YouTube Video Widget (Google Inc.)

YouTube is a video content viewing service managed by Google Inc. which allows BEST srl to integrate this content within its own pages.

Personal Data collected: Cookies and Utilisation Data.

Location of the processing: United States – Privacy Policy. Subject in compliance with the Privacy Shield.

Users’ Rights

Users can exercise certain rights with reference to the Data processed by the Controller.

Specifically, Users have the right to:

revoke consent at any time. Users can revoke previously expressed consent to the processing of their Personal Data.

oppose to the processing of their Data. Users can oppose to the processing of their Data when it takes place on a legal basis different than the consent. Further details on the right to oppose are indicated in the section below.

access their Data. Users have the right to obtain information on the Data processed by the Controller, on certain aspects of the processing and to receive a copy of the processed Data.

verify and request rectification. Users may verify the accuracy of their Data and ask for it to be updated or corrected.

to obtain limitation of the processing. When certain conditions exist, Users may request limitation of the processing of their Data. In this case, the Controller will not process the Data for any other purpose except to store it.

to obtain cancellation or removal of their Personal Data. When certain conditions exist, Users may request the cancellation of their Data by the Controller.

to receive their Data or to have it transferred to another controller. Users have the right to receive their Data in structured format for common use and legible by an automatic device and, where technically feasible, to obtain its transfer without any impediment to another controller. This disposition is applicable when the Data is processed with automated instruments and the processing is based on the consent of the User, on a contract which the User is part of or on contractual measures connected to it.

to lodge a complaint. Users may lodge a complaint with the relevant personal data protection monitoring authority or engage in legal proceedings.

Details on the right to oppose

When the Personal Data is processed in the public interest, in exercising the public powers with which the Controller is endowed or to pursue a legitimate interest of the Controller, Users have the right to oppose to the processing for reasons connected to their particular situation.

Users should note that, where their Data may be processed for direct marketing purposes, they may oppose to the processing without providing any motivation. To find out whether or not the Controller processes data for direct marketing purposes, Users can refer to the respective sections in this document.

How to exercise the rights

To exercise the Users’ rights, Users can address a request to the Controller’s contact details indicated in this document. The requests are filed free of charge and responded to by the Controller as quickly as possible, in any case within one month.

Further information on the processing

Legal defence

The User’s Personal Data can be used by the Controller in legal proceedings or in the preparatory phases for any establishment for defence against abuse in using BEST srl or the connected Services by the User.

The User declares that he or she is aware that the Controller may be obliged to disclose the Data by order of the public authorities.

Specific advisories

At the request of the User, in addition to the information contained in this privacy policy, BEST srl may provide the User with additional and contextual advisories concerning specific Services or the collection and processing of Personal Data.

System and maintenance logs

For needs connected to operation and maintenance, BEST srl and any third-party services used by it may collect system logs, in other words, files that record interactions and which may also contain Personal Data such as the User’s IP address.

Information not contained in this policy

Further information concerning the processing of Personal Data can be requested at any time from the Processing Controller using the contact details.

Response to “Do Not Track” requests

BEST srl does not support “Do Not Track” requests.

To find out if any third-party services used support them, the User is asked to consult the respective privacy policies.

Changes to this privacy policy

The Processing Controller reserves the right to make changes to this privacy policy at any time, informing the Users on this page and, if possible, on BEST srl, as well as, if technically and legally feasible, sending a notice to the Users through one of the contact details in the Controller’s possession. Therefore, please consult this page regularly, noting the date of the most recent change indicated at the bottom.

Should the changes involve processing the legal basis of which is consent, the Controller will obtain the consent of the User again if necessary.

Definitions and legal references

Personal Data

Personal data is constituted by any information which, directly or indirectly, even in connection with any other information, including a personal identification number, identifies a physical person or renders the same identifiable.

Utilisation Data

This is information collected automatically through BEST srl (even by third-party applications integrated in BEST srl), including: the IP addresses or domain names of the computers utilized by the users who connect to BEST srl, the URI addresses (Uniform Resource Identifier), the time of the request, the method utilized to send the request to the server, the size of the file received in response, the numerical code indicating the status of the server’s answer (successful outcome, error, etc.), the country of origin, the features of the browser and the operating system utilized by the visitor, the various time details per visit (e.g., the time spent on each page) and the details concerning the path followed within the Application, with particular reference to the sequence of the pages visited and other parameters concerning the operating system and the User’s digital environment.

User

The individual who uses BEST srl who, unless otherwise specified, coincides with the interested party.

Interested party

The physical person to whom the Personal Data refers.

Processing Manager (or Manager)

The physical person, corporate body, public administration and any other body that processes personal data on behalf of the Controller, in accordance with what is set forth in this privacy policy.

Processing Controller (or Controller)

The physical person or corporate body, the public authority, the service or other organism which, individually or together with others, determines the purposes and means of the personal data processing and the instruments adopted, including the security measures relative to the operation and the use of BEST srl The Processing Controller, except what is otherwise specified, is the owner of BEST srl

BEST srl (or this Application)

The hardware or software instrument through which the Users’ Personal Data is collected and processed.

Service

The service provided by BEST srl as defined in the relative terms (if present) on this website/application.

European Union (or EU)

Except where otherwise specified, any reference to the European Union contained in this document is understood to extend to all the current member states of the European Union and the European Economic Space.

Cookies

No personal data of the users is purposely acquired by the site. The session cookies used on this website preclude the use of other digital techniques which are potentially compromising to the confidentiality of the users’ navigation and which do not allow acquisition of the user’s personal identification.

Deny and block cookies

Most Internet browsers are initially set up to accept cookies automatically. This means that you can, at any time, set your browser up to accept all cookies, only some cookies, or reject them, disabling use of them by websites. You can also normally set the preferences of your browser so that you are notified each time a cookie is stored on your computer. Last, but not least, at the end of each browsing session, you can delete the collected cookies from your device’s hard disk. If you wish to delete the cookies installed in the cookies folder of the browser used, you must remember that each browser has different procedures for managing the settings.

You can obtain specific instructions for some of the major browsers by selecting the links below.

1. Microsoft Windows Explorer: http://windows.microsoft.com/en-us/windows-vista/block-or-allow-cookies
2. Google Chrome: https://support.google.com/chrome/bin/answer.py?hl=en&answer=95647&p=cpn_cookies
3. Mozilla Firefox: http://support.mozilla.org/en-US/kb/Enabling%20and%20disabling%20cookies
4. Apple Safari: http://docs.info.apple.com/article.html?path=Safari/5.0/en/9277.html
5. In order not to receive Google Analytics cookies, go to: https://tools.google.com/dlpage/gaoptout/
6. If you would like more information on cookies in general, go to allaboutcookies.org

Legal references

This privacy advisory has been drafted based on multiple legislative frameworks, including articles 13 and 14 of European Regulation (EU) 2016/679).

Where not otherwise specified, this privacy advisory concerns exclusively BEST srl