Privacy policy
How we process the personal data collected through this site, under Regulation (EU) 2016/679.
Published on
Pending legal review. This text is a working draft built around the processing that actually takes place on this site. Before publication it must be reviewed by a privacy adviser and completed with the controller's details, marked below as [TO BE CONFIRMED].
Data controller
The data controller is [TO BE CONFIRMED] BVH Consulting S.r.l., registered office at [TO BE CONFIRMED], VAT number [TO BE CONFIRMED]. For any request concerning the processing of your data, write to [TO BE CONFIRMED].
What data we collect
Data you give us. When you fill in the contact form we collect your name, email address, company and — if you provide them — your role and phone number, together with the content of your message.
Technical browsing data. Our servers log IP address, browser type, requested page and request time. This data is necessary to deliver the site and to protect it against abuse.
Measurement data. Only with your consent, we collect aggregated statistics about which pages are visited. We do not profile visitors and we use no marketing cookies.
Why we process it and on what basis
| Purpose | Legal basis | Retention |
|---|---|---|
| Responding to enquiries sent through the form | Consent and pre-contractual measures (Art. 6.1 a and b) | 24 months from last contact |
| Delivering and protecting the site | Legitimate interest (Art. 6.1 f) | 12 months for technical logs |
| Measuring site use in aggregate | Consent (Art. 6.1 a) | 14 months |
| Meeting legal obligations | Legal obligation (Art. 6.1 c) | As required by law |
Who we share data with
Data is processed by authorised staff and by suppliers acting as processors: the site's hosting provider and the email service that delivers contact form messages. We do not sell or transfer personal data to third parties for marketing purposes.
Where a supplier processes data outside the European Economic Area, the transfer takes place under the standard contractual clauses approved by the European Commission.
Your rights
At any time you may request access to your data, its rectification, erasure, restriction of processing and portability, and object to processing based on legitimate interest. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out beforehand.
Requests should be sent to [TO BE CONFIRMED]. If you believe the processing breaches data protection law, you may lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
Changes
If the processing described here changes, we update this page and record the revision date at the bottom.