In compliance with the obligations arising from national legislation (Legislative Decree No. 196 of June 30, 2003, Personal Data Protection Code) and EU legislation (European Regulation for the protection of personal data No. 679/2016, GDPR) and subsequent amendments, this website respects and protects the privacy of visitors and users, making every possible and proportionate effort not to infringe on the rights of users. 
This privacy policy applies exclusively to the online activities of this website and is valid for visitors/users of the website. It does not apply to any information collected through channels other than this website.
The purpose of the privacy policy is to provide maximum transparency regarding the information that the website collects and how it is used.

Legal basis for processing
This website processes data based on consent. By using or consulting this website, visitors and users explicitly approve this privacy policy and consent to the processing of their personal data in relation to the methods and purposes described below, including any disclosure to third parties if necessary for the provision of a service. 
The provision of data and therefore consent to the collection and processing of data is optional. The user may refuse consent and may revoke consent already provided at any time (via the Contact link or the contact details provided at the bottom of the page). However, refusing consent may make it impossible to provide certain services and the browsing experience on the website may be compromised. 
From 25 May 2018 (the date of entry into force of the GDPR), this site will process some of the data based on the legitimate interests of the data controller.

Data collected and purposes
Like all websites, this site also uses log files in which information collected automatically during user visits is stored. The information collected may include the following:
- Internet Protocol (IP) address;
- browser type and parameters of the device used to connect to the site;
- name of the internet service provider (ISP);
- date and time of visit;
- web page from which the visitor came (referral) and left;
- country of origin;
- possibly the number of clicks.

Data and information are collected for the following purposes:
- in an exclusively aggregated and anonymous form to verify the correct functioning of the website. None of this information is related to the physical person-user of the website, and does not allow for identification in any way (from 25 May 2018, this information will be processed based on the legitimate interests of the data controller); 
- for security purposes (spam filters, firewalls, virus detection), automatically recorded data may also include personal data such as the IP address, which could be used, in accordance with applicable laws, to block attempts to damage the website itself or cause damage to other users, or in any case harmful activities or activities constituting a crime. This data is never used to identify or profile the user, nor is it cross-referenced with other data or provided to third parties, but is used solely for the purpose of protecting the site and its users (from 25 May 2018, this information will be processed based on the legitimate interests of the data controller); 

- communicate data to third parties who perform functions necessary or instrumental to the operation of the service.
The data collected by the website during its operation is used exclusively for the purposes indicated above and stored for the time strictly necessary to carry out the specified activities. In any case, personal data collected by the website will never be provided to third parties, for any reason, unless it is a legitimate request by the judicial authorities and only in cases provided for by law. However, the data may be provided to third parties if this is necessary for the provision of a specific service requested by the User or for the performance of security checks or site optimisation. 
Data used for site security purposes (blocking attempts to damage the site) is stored for 7 days. 

Place of processing
The data collected by the website is processed at the Data Controller's headquarters and at the web hosting data centre. The web hosting provider (Logovia LTD, 1, College Yard, 56 Winchester Ave, London NW67UA) is located in the European Economic Area and acts in accordance with European regulations. 

Cookies
As is customary on all websites, this site also uses cookies, small text files that allow information about visitors' preferences to be stored, to improve the functionality of the site, to simplify navigation by automating procedures (e.g. login, site language) and to analyse site usage.
Session cookies are essential in order to distinguish between connected users, and are useful for preventing a requested feature from being provided to the wrong user, as well as for security purposes to prevent cyber attacks on the site. Session cookies do not contain personal data and last only for the current session, i.e. until the browser is closed. No consent is required for them.
The functionality cookies used by the site are strictly necessary for the use of the site and do not require consent.
By using the site, continuing to browse the site, or clicking OK on the banner when first accessing the site, the visitor expressly consents to the use of cookies and similar technologies, and in particular to the recording of such cookies on their terminal for the purposes indicated above, or to access via cookies to information on their terminal.

Disabling cookies
Cookies are linked to the browser used and CAN BE DISABLED DIRECTLY FROM THE BROWSER, thus refusing/revoking consent to the use of cookies. Please note that disabling cookies may prevent the correct use of some features of the website.
Instructions for disabling cookies can be found on the following web pages: 
Mozilla Firefox - Microsoft Internet Explorer - Microsoft Edge - Google Chrome - Opera - Apple Safari 

Third-party cookies
This website also acts as an intermediary for third-party cookies, which are used to provide additional services and features to visitors and to improve the use of the website itself, such as social media buttons. This privacy policy does not apply to services provided by third parties, and this website has no control over their cookies, which are entirely managed by third parties, and has no access to the information collected through these cookies. The data transfer agreement is made directly between the user/visitor and third parties, while this site does not participate in any way in such transfer. As a result, information on the use of these cookies and their purposes, as well as on how to disable them, is provided directly by third parties on the pages indicated below.
In particular, this site uses cookies from the following third parties:

- Google (Google Analytics cookie): Google Analytics is a Google analysis tool that uses cookies (performance cookies) to collect anonymous browsing data (truncated at the last octet) in order to examine users' use of the website, compile reports on website activity and provide other information, including the number of visitors and pages visited. Google may also transfer this information to third parties where required to do so by law or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. The data transmitted to Google is stored on Google's servers in the United States.

Based on a specific agreement with Google, which is designated as the data controller for user data, Google undertakes to process data in accordance with the requests of the Data Controller, which are communicated directly through the software settings. Based on these settings, advertising and data sharing options are disabled. 
Further information on Google Analytics cookies can be found on the Google Analytics Cookie Usage on Websites page. 
Users can selectively disable the collection of data by Google Analytics by installing the appropriate component provided by Google on their browser (opt out). 

- YouTube: a platform owned by Google for sharing videos, which uses cookies to collect information about users and browsing devices. The videos on the website do not transmit cookies when the page is accessed, as the ‘advanced privacy (no cookies)’ option has been set, meaning that YouTube does not store information about visitors unless they voluntarily play the video. 
For further information on the use and processing of data by Google, please refer to the information provided on the relevant page set up by Google and on the page on how Google uses data when you use partner sites or apps. 

Social Network Plugins
This site also incorporates plugins and/or buttons for social networks, in order to allow easy sharing of content on your favourite social networks. These plugins are programmed so as not to set any cookies when accessing the page, in order to safeguard the privacy of users. Cookies may be set, if provided for by the social networks, only when the user makes effective and voluntary use of the plugin. Please note that if the user browses while logged into the social network, they have already consented to the use of cookies conveyed through this site at the time of registration with the social network. 
The collection and use of information obtained through the plugin are governed by the respective privacy policies of the social networks, to which reference should be made.
- Facebook - (cookie policy link)
- Google+ - (cookie policy link)
- Instagram - (cookie policy link)
- Twitter - (cookie policy link)
- LinkedIn - (cookie policy link)

Transfer of data to countries outside the EU
This website may share some of the data collected with services located outside the European Union. In particular, with Google, Facebook and Microsoft (LinkedIn) through social plugins and the Google Analytics service. The transfer is authorised on the basis of specific decisions of the European Union and the Data Protection Authority, in particular Decision 1250/2016 (Privacy Shield - here is the information page of the Italian Data Protection Authority), for which no further consent is required. The above-mentioned companies guarantee their adherence to the Privacy Shield. 

Security measures
This website processes user data in a lawful and correct manner, adopting appropriate security measures to prevent unauthorised access, disclosure, modification or unauthorised destruction of data. The processing is carried out using IT and/or telematic tools, with organisational methods and logic strictly related to the purposes indicated. In particular, the site management software is constantly updated and regularly scanned to check for viruses and dangerous codes. 
In addition to the data controller, in some cases, categories of persons involved in the organisation of the website (administrative, commercial, marketing, legal, system administrators) or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may have access to the data.

User rights
Pursuant to European Regulation 679/2016 (GDPR) and Article 7 of Legislative Decree No. 196 of 30 June 2003, http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1311248, the User may, in accordance with the procedures and within the limits established by current legislation, exercise the following rights:
- to object, in whole or in part, on legitimate grounds, to the processing of personal data concerning him/her for the purposes of sending advertising or direct sales material or for carrying out market research or commercial communication;
- to request confirmation of the existence of personal data concerning him/her (right of access);
- to know its origin;
- to receive intelligible communication;
- to obtain information about the logic, methods and purposes of the processing;
- request the updating, correction, integration, deletion, transformation into anonymous form, or blocking of data processed in violation of the law, including data no longer necessary for the purposes for which it was collected;
- in cases of processing based on consent, receive, at the sole cost of any support, your data provided to the data controller, in a structured and readable form by a data processor and in a format commonly used by an electronic device;
- the right to lodge a complaint with the Supervisory Authority (Privacy Guarantor - link to the Guarantor's page);
- as well as, more generally, to exercise all the rights recognised by current legal provisions.
In the event that the data is processed on the basis of legitimate interests, the rights of the data subjects are still guaranteed (except for the right to portability, which is not provided for by the regulations), in particular the right to object to the processing, which can be exercised by sending a request to the data controller.
Requests should be addressed to the Data Controller.
Data Controller
The Data Controller pursuant to current legislation is the administrator of B&B Corte Kampánes - VAT number 04881080750, who can be contacted via the CONTACTS section or the contact details provided at the bottom of the website pages.Updates
 

This privacy policy was updated on 9 January 2019.