Privacy Policy

This document does not have the form and characteristics of a contract, but represents a primary information page.

Serbosco SRL, represented by its Chief Executive Officer and legal representative, with registered office in Fonzaso (BL) at Via Luigi De Zorzi, 1, as Data Controller (hereinafter, the “Controller”), guarantees compliance with the regulations regarding the protection of personal data of natural persons, providing, pursuant to Articles 13 and 14 of EU Regulation No. 2016/679 (hereinafter, the “GDPR”), the following information regarding the processing of data communicated or otherwise collected during navigation on the site or during commercial contacts with the Controller.

Subject of Processing

For data collected during navigation and consultation of this website, the Data Controller declares that it does not perform or arrange for the profiling of natural persons, and that any data collected through informed user interactions (e.g., the contact form) is processed in accordance with this policy or the specific policy for contacts; for other matters, please refer to the “browsing data” and “cookie policy” instructions below.
The Data Controller also processes the personal data of natural persons of an identifying, biographical, or commercial nature (e.g., first name, last name, company name, address, telephone number, email address, bank and payment details), communicated when entering into contracts with the Data Controller.
Purpose of processing and legal basis for processing
The personal data of natural persons are processed:
A) without the express consent of the data subject (Article 6(b), (c), and (e) GDPR), for the following purposes:
conclude contracts with the Data Controller;
Fulfill pre-contractual, contractual, and tax obligations arising from existing relationships;
Fulfill obligations established by law, regulation, EU legislation, or an order from an Authority (such as, for example, anti-money laundering);
Exercise the Data Controller’s rights, such as the right to defense in court.
B) Only with the specific consent of the interested party (Article 7 GDPR, Article 130 of Legislative Decree 196/2003), which may be expressly requested, for the following Marketing Purposes:
Send newsletters, commercial communications, and/or advertising material about products or services offered by the Data Controller via email, post, text message, and/or telephone, and/or conduct customer satisfaction surveys regarding the quality of services;
Send commercial and/or promotional communications from third parties via email, post, text message, and/or telephone.
The data collected will be processed in accordance with the principles of fairness, lawfulness, transparency, and the protection of privacy and rights. They may be processed using both paper and electronic archives (including portable devices) and in ways strictly necessary to fulfill the purposes indicated above. Data subjects may revoke or limit their consent at any time.
Browsing data
The computer systems and software procedures used to operate this website acquire, during their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature, it could allow users to be identified through processing and association with data held by third parties. This category of data includes the IP addresses or domain names of computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server response (successful, error, etc.), and other parameters relating to the user’s operating system and IT environment. This data is used solely to obtain anonymous statistical information on site usage and to verify its proper functioning. This data is not disclosed to third parties and is not disseminated.

Data processing and storage methods

The data provided, subject to processing for the purposes indicated above, will be retained in our archives for administrative, accounting, and contractual purposes, as well as for the management of any disputes. The Data Controller will process the personal data of natural persons for the entire duration of the contractual relationship, for the time necessary to fulfill the aforementioned purposes, and in any case for no longer than 10 years from the termination of such relationship and for no longer than 2 years from the date the data was collected for Marketing Purposes. This is without prejudice to any provisions or requirements imposed by law and/or binding provisions for the Data Controller.

Communication and Access to Data

Without prejudice to disclosures made in compliance with legal and contractual obligations, all collected data may be made accessible and/or disclosed to third parties for the purposes referred to in Articles 2.A) and 2.B):
to employees and collaborators of the Data Controller, in their capacity as data processors and/or data controllers and/or specifically appointed system administrators;
to third-party companies or other entities (for example, credit institutions, professional firms, consultants, insurance companies for the provision of insurance services, judicial authorities, as well as those to whom disclosure is required by law for the fulfillment of the aforementioned purposes, etc.) that perform outsourced activities on behalf of the Data Controller, in their capacity as external data processors.

Profiling and Dissemination of Data
The personal data of natural persons are not subject to dissemination, profiling, or any decision-making process that is wholly or partially automated.

Cookie Policy

What is a cookie? Cookies are pieces of information that a website stores on your device when you visit its pages. No personal user data is collected on this site. We do not use profiling cookies to transmit personal information, nor are systems used to track and identify users for the purpose of sending targeted advertising.

Technical Cookies

Technical cookies are necessary for the proper functioning of the entire website (for example, to remember your current language selection or to remember products in your shopping cart) and do not collect personal information. Consent for technical cookies is not required, as they are essential to providing the services described above. These technical cookies are necessary for the proper functioning of this site’s pages and for anonymous statistical purposes, such as recording unique monthly visitors.

Third-party analytics cookies

These are so-called “analytics” cookies, used to collect aggregate and anonymous information on the number of users and how they visit websites. These cookies are used exclusively for statistical purposes for site optimization (and not for profiling or remarketing) and do not allow us to trace the identity of individual visitors in any way.

Third-party cookies: which ones we use and how to enable or disable them
When visiting a website, you may receive cookies from both the site you are visiting (“proprietary cookies”) and from sites managed by other organizations (“third parties”). A notable example is the presence of “social plugins” for Facebook, Twitter, Google+, and LinkedIn. These are parts of the visited page generated directly by these sites and integrated into the host site’s page. The most common use of social plugins is for sharing content on social networks.

The presence of these plugins involves the transmission of cookies to and from all sites managed by third parties. The management of information collected by “third parties” is governed by the relevant policies, to which you are kindly requested to refer. To ensure greater transparency and convenience, the web addresses of the various policies and methods for managing cookies are provided below. Furthermore, the use of these cookies and similar technologies by these companies is governed by their privacy policies and not by this policy, as this site is completely unrelated to the management of these tools and the processing of the data derived from them.

See our extended Cookie Policy.

Rights of the Data Subject

Please note that the legislation on the protection of personal data grants natural persons the ability to exercise specific rights. In particular, each natural person has:

the right of access, expressly provided for by Article 15 of the GDPR, i.e., the right to access all personal information concerning them;

the right to rectification, expressly provided for by Article 16 of the GDPR, i.e., the right to obtain the updating of inaccurate personal data concerning them without undue delay;

The right to be forgotten, expressly provided for in Article 17 of the GDPR, consisting of the right to the erasure of personal data concerning the data subject;
The right to restriction of processing when one of the grounds set forth in Article 18 of the GDPR applies;
The right to data portability, expressly provided for in Article 20 of the GDPR, i.e., the right to obtain one’s data in an interoperable format and/or the right to have one’s personal data transmitted to another data controller.