Privacy Policy

1. Data Controller

Biglia Serramenti S.r.l.
S.P. Asti-mare 18/A, 14041 Agliano Terme (AT)
VAT No.: 00904570058
Email: info@bigliaserr.it
Tel: 0141 954344

Legal representative and Data Controller: Gianni Biglia

A Data Protection Officer (DPO) has not been appointed as the conditions set out in Art. 37 of the GDPR (EU Regulation 2016/679) do not apply.

2. Types of data processed

The Data Controller processes the following categories of personal data:

• Browsing data: IP addresses, URLs of pages visited, access times, browser and operating system used, collected automatically by the website's computer systems.
• Data voluntarily provided by the user via forms on the website: name, surname, email address, telephone number, company, messages and any other information freely entered.
• Newsletter subscription data: email address and consent to receive marketing communications.

3. Purposes and legal bases for processing

Personal data is processed for the following purposes:

• Handling contact and quotation requests (legal basis: performance of pre-contractual measures — Art. 6.1.b GDPR).
• Processing spontaneous applications and open positions (legal basis: data subject's consent — Art. 6.1.a GDPR).
• Sending the newsletter with updates, articles and company news (legal basis: data subject's consent — Art. 6.1.a GDPR).
• Compliance with legal obligations (legal basis: legal obligation — Art. 6.1.c GDPR).
• Security and correct functioning of the website (legal basis: Data Controller's legitimate interest — Art. 6.1.f GDPR).

4. Processing methods and retention

Data is processed using electronic tools and stored in secure databases managed via the Lovable (Supabase) platform. The website is hosted on IONOS servers with EU-based infrastructure.

Data is retained for the time strictly necessary for the purposes for which it was collected:

• Contact form data: 24 months from collection, unless retention is required for legal compliance.
• Application data: 12 months from receipt, unless otherwise agreed with the candidate.
• Newsletter data: until consent is withdrawn by the data subject.
• Browsing data: maximum 12 months.

5. Disclosure and transfer of data

Personal data is not sold or transferred to third parties for their own commercial purposes. It may be disclosed to:

• Technical service providers: Lovable (website platform), IONOS (hosting and domain), Resend (newsletter email service).
• Entities that process data on behalf of the Data Controller as Data Processors pursuant to Art. 28 GDPR.
• Competent authorities, where required by law.

Data is not transferred outside the EU. In the event of a transfer, the Data Controller will adopt the safeguards provided for by the GDPR (standard contractual clauses or adequacy decisions of the European Commission).

6. Data subject rights

The data subject has the right to:

• Access their personal data (Art. 15 GDPR).
• Rectification of inaccurate data (Art. 16 GDPR).
• Erasure of data ("right to be forgotten") (Art. 17 GDPR).
• Restriction of processing (Art. 18 GDPR).
• Data portability (Art. 20 GDPR).
• Objection to processing (Art. 21 GDPR).
• Withdrawal of consent at any time, without prejudice to the lawfulness of processing carried out before withdrawal.
• Lodge a complaint with the supervisory authority (Italian Data Protection Authority — www.garanteprivacy.it).

To exercise their rights, the data subject may write to: info@bigliaserr.it

7. Cookie

For detailed information on the cookies used by the website, please refer to the Cookie Policy available on the dedicated page.

8. Changes to this Policy

The Data Controller reserves the right to amend this Privacy Policy at any time. Changes will be published on this page with an indication of the date of update. Users are encouraged to consult this page periodically.