Privacy Policy
PRIVACY POLICY ON THE PROCESSING OF PERSONAL DATA Pursuant to Art. 13 of Regulation (EU) 2016/679 (GDPR) and Legislative Decree 196/2003 as amended.
This notice describes how the website bmbmontaggi.com is managed with regard to the processing of personal data of users who browse it and interact with the web services integrated therein.
1. Data Controller
The Data Controller is:
- Company: BMB MONTAGGI S.r.l.
- Registered office: Contrada Rosa n. 5 – 89042 Gioiosa Ionica (RC), Italy
- VAT No. and Tax Code: IT02609720806
- Legal Representative: Mr. Barbiero Natale
- Email for communications and privacy: info@bmbmontaggi.it
2. Types of Data Processed, Purposes and Legal Bases
a) Browsing data The IT systems used to operate this site automatically acquire certain personal data whose transmission is implicit in the use of Internet protocols (e.g. IP addresses, request times, operating systems).
- Purpose: Ensure the proper technical operation of the site and IT security (attack prevention).
- Legal basis: Legitimate interest of the Controller (Art. 6(1)(f), GDPR).
b) Data provided voluntarily via Contact Form, Email or WhatsApp By sending requests through the “Write to us / Request a Quote” form, sending messages via WhatsApp or writing to the email address shown on the site, the Controller will acquire the name, email address, any phone number and the content of the message.
- Purpose: Reply to information requests or prepare quotations.
- Legal basis: Performance of pre-contractual measures taken at the data subject’s request (Art. 6(1)(b), GDPR).
c) Statistical data and Cookies (Google Analytics 4) The site uses Google Analytics 4 (GA4) to collect aggregated statistical data. The user’s IP address is anonymized by default. With the default settings kept (which may involve sharing metrics with the Google ecosystem), analytics cookies are enabled only after the user’s consent collected through the initial Cookie Banner.
- Purpose: Statistical analysis of web traffic and monitoring of site performance.
- Legal basis: The data subject’s explicit consent (Art. 6(1)(a), GDPR), revocable at any time.
3. Processing Methods and Retention
Processing is carried out using IT and telematic tools, ensuring adequate security measures (Art. 32 GDPR). Data will be kept for the time strictly necessary to achieve the purposes for which they were collected:
- Browsing data: Deleted or anonymized shortly after processing, unless required for investigations into cybercrimes.
- Contact/quote requests: Kept for the time needed to handle the request. If a contract is subsequently entered into, the data will be retained for 10 years (civil and tax obligations). If no contract is concluded, they will be deleted 1 year after the last interaction.
- Analytics data: Retained according to Google’s standard retention policies (maximum 14 months).
4. Data Recipients and Transfer (Non-EU)
The collected data are not subject to disclosure. They may be processed by external parties appointed as Data Processors (Art. 28 GDPR):
- Hosting provider: Aruba S.p.A., whose servers are located within the European Union. Aruba operates in full compliance with the GDPR, acting as Data Processor under the standard Data Processing Agreement (DPA) signed at the time of purchasing the services.
- Analytics provider: Google Ireland Limited. Any transfer of statistical data (in any case anonymized) to Google LLC servers in the United States is ensured and legitimized by the company’s adherence to the EU-US Data Privacy Framework (European Commission adequacy decision).
5. Data Subject’s Rights
Pursuant to Arts. 15-22 of the GDPR, the user has the right to:
- Request access to their personal data, rectification or erasure of the same (“right to be forgotten”);
- Request restriction of processing or object to it;
- Exercise the right to data portability;
- Withdraw consent given for the use of cookies and trackers at any time (via the cookie management panel on the site).
To exercise their rights, the user may send a written notice by email to: info@bmbmontaggi.it. The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) (www.garanteprivacy.it) if they believe that the processing violates applicable regulations.
Last update: September 2026