Privacy Policy

PRIVACY POLICY FOR THE PROCESSING OF PERSONAL DATA

In accordance with Article 13 of the New European Regulation 2016/279 related to the protection of natural persons concerning the processing of personal data (GENERAL DATA PROTECTION REGULATION – GDPR), as required by the General Data Protection Regulation of the European Union (GDPR 2016/679, Article 13), before proceeding with the processing, the Data Subject is informed that personal data collected through the website is subject to processing by the Company through computer and/or telematic tools, for the purposes indicated in this notice. For this purpose, the Data Subject is provided with the Privacy Notice prepared by Belce Design, the creator and promoter of the activities available on the website www.belce-design.com.

Data Controller
The Data Controller is Belce Design, with its registered office at Via Marco Biagi 4/6, 46019 Viadana (MN), email info@belce-design.com. For further information related to the rights of the Data Subject, please refer to the "Rights of the Data Subjects" section of this notice.

Information on Processing
Personal data subject to processing is collected directly by Belce Design or by third parties expressly authorized by it, or communicated by the Company to such third parties for the purposes described below.

Legal Basis and Purpose of Processing
The personal data provided by the user while navigating the website is processed by the Data Controller in accordance with the applicable laws regarding the protection of personal data.
The legal basis for processing is found in the provision of services by the Company, the management and facilitation of the website, as well as the formation, execution, and possible termination of the online sales contract concluded between the parties and in the obligations connected to and/or directly or indirectly resulting from the same contract.

The processing of personal data by Belce Design is aimed at achieving the following purposes:

• Subscription to the BELCE-DESIGN.COM Newsletter: In the case the user decides to subscribe to the "Belce Design Newsletter," only after providing explicit consent, personal data will be processed by the Data Controller for the sending of commercial or promotional communications, updates related to, for example, new arrivals, exclusive offers, special events, and promotions. To unsubscribe from the newsletter, it is sufficient to click on the unsubscribe link at the bottom of the emails received or write to info@belce-design.com.

• Registration on BELCE-DESIGN.COM: In case the user decides to register on the website belcedesign.it, only after explicit consent, personal data will be processed by the Data Controller for the registration on belcedesign.it. Specifically, by providing their first name, last name, email address, and setting a password, these will be processed to create a personal account, speed up the purchase process, allow the user to view order status, receive updates on purchases made, change personal settings, and update the account.

• Online Shopping Activities: Personal data provided will be used for the establishment, management, execution, and/or conclusion of the online sales contract. The data provided will be processed by the Data Controller for managing the purchase order, including, for example, payment, shipping, handling returns, customer assistance, performing administrative-accounting purposes related to the management of the order, and compliance with legal obligations. In the case of credit card payment, the essential information for transaction execution (credit/debit card number, expiration date, security code) will be processed by Unicredit or, if necessary, by companies authorized for fraud control via encrypted protocol, ensuring no third parties can access it. This information will never be viewed or stored by the seller.

• Profiling of the Natural Person: Only after explicit consent, personal data provided may be processed by the Data Controller for profiling activities, i.e., analyzing preferences to create personalized content and offers.

Nature of Processing
In relation to the purpose described in point 1) of the previous section, the provision of personal data and consent to their processing is optional. Failure to provide consent will prevent Belce Design from allowing subscription to the "Belce Design Newsletter," sending commercial or promotional communications, updates related to, for example, new arrivals, exclusive offers, special events, and promotions. If the user decides to subscribe to the newsletter via the dedicated section of the site, providing personal data and consent to their processing is mandatory.
Failure to provide consent will prevent Belce Design from allowing subscription to the "Belce Design Newsletter" and sending commercial or promotional communications.
For the purpose described in point 2) of the previous section, the provision of personal data and consent to their processing is mandatory. Failure to provide consent will prevent Belce Design from allowing registration on belcedesign.it, creating a personal account, speeding up the purchase process, viewing order status, receiving updates on purchases, and modifying personal settings and updating the account.
For the purpose described in point 3) of the previous section, the provision of personal data and consent to their processing is mandatory. Failure to provide consent will prevent Belce Design from proceeding with the establishment, management, execution, and/or conclusion of the online sales contract, therefore preventing the execution of activities related to payment, shipping, handling returns, customer assistance, executing administrative-accounting tasks related to the order, and compliance with legal obligations.
For the purpose described in point 4) of the previous section, providing personal data and consent to their processing is optional. Failure to provide consent will prevent Belce Design from performing profiling activities, i.e., analyzing preferences to create personalized content and offers.

Personal Data Processed
The personal data subject to processing by the Data Controller are those provided by the user when navigating the website www.belce-design.com, during registration/subscription to the services/programs offered by Belce Design, and/or during the purchase of products provided by Belce Design. These may include, for example: first name, last name, and email address, along with the necessary data for the provision of online sales services, such as those needed for payment processing and shipment/return of purchased products.

Processing Methods and Data Retention
The processing of personal data is carried out by the Data Controller in compliance with the current privacy laws. The Data Controller processes personal data through computer and/or telematic tools and organizational and logical methods strictly related to achieving the purposes set out in this notice. Appropriate security measures are adopted to prevent unauthorized access, disclosure, modification, or destruction of personal data, as well as their loss and improper use. However, the Company cannot guarantee that the security measures adopted for the website and the transmission of data and information on the site will limit or exclude any risk of unauthorized access or data leakage from the user's devices. Therefore, users are encouraged to ensure that their computer is equipped with appropriate software to protect the transmission of data online (e.g., updated antivirus software) and that their Internet provider has adopted appropriate security measures for the transmission of data. The Company also commits to processing the data in accordance with the principles of fairness, lawfulness, and transparency, collecting them only to the extent necessary and accurate for the processing and allowing their use only by authorized personnel for the intended purposes. The management and storage of acquired personal data will take place in archives or servers located within the European Union, owned by the Data Controller and/or third-party companies appointed as External Data Processors, and are currently located in Italy.
In relation to the different purposes for which the data is collected, personal data will be kept for the time strictly necessary to achieve the same and, in any case, in accordance with the applicable legal provisions.
In any case, the Company will ensure that the data is not used indefinitely and will periodically verify the actual continuing interest of the data subject.

Recipients and Data Processors
The collected data will not be disclosed, but will be processed within the limits and for the purposes described by Belce Design employees based on appropriate operational instructions (e.g., administrative, commercial, marketing, legal, IT staff, etc.). Some data processing may also be carried out by third parties, appointed as External Data Processors, whom the Data Controller uses or may use within the scope of managing the contractual relationship, providing the services offered, and for organizational needs of its activity. In particular, data may be communicated to:
a) public and private entities that may access the data under laws, regulations, or community regulations, within the limits provided by such rules;
b) subjects who need access to the data for purposes related to the contractual relationship between the parties, within the limits strictly necessary for performing ancillary tasks (such as banks and credit institutions, technical service providers, hosting providers, IT companies, communication agencies, postal couriers, and shipping companies);
c) consultants, within the limits necessary to perform their professional assignment.
The updated list of External Data Processors and authorized persons for processing is kept at the Data Controller’s headquarters and is available to the Data Subject upon request via email to info@belce-design.com.

Data Transfer Abroad
The management and storage of personal data will take place on servers owned by the Data Controller and/or third-party companies duly appointed as External Data Processors located within the European Union.
Personal data may be transferred abroad, in compliance with the applicable regulations, even to countries outside the European Union. Transfers to non-EU countries, other than in cases covered by the Adequacy Decisions of the Commission, will be made in such a way as to provide appropriate and adequate safeguards in accordance with Articles 46 or 47 or 49 of the Regulation.

Rights of the Data Subject
As a Data Subject, the user may exercise, at any time, the rights provided by Articles 15, 16, 17, 18, 20, and 21 of the GDPR, which particularly confer the right to:
a) obtain confirmation from the Data Controller as to whether or not personal data concerning them are being processed, and, if so, access the data and information such as: (i) the purposes of processing; (ii) the categories of personal data; (iii) the recipients or categories of recipients to whom the personal data have been or will be disclosed, particularly if these are recipients in third countries or international organizations; (iv) where possible, the retention period of personal data, or if not possible, the criteria used to determine such period;
b) obtain rectification of inaccurate personal data concerning them without undue delay;
c) obtain the erasure of personal data concerning them without undue delay;
d) obtain restriction of processing when the conditions set out in the regulation are met;
e) obtain data portability in a structured, commonly used, and machine-readable format;
f) object, in whole or in part, to the processing of personal data concerning them.
To exercise their rights, the user can send their requests to info@belce-design.com.
The Data Subject also has the right to file a complaint with a Supervisory Authority.

Changes to This Notice
The Data Controller reserves the right to make changes to this Privacy Policy at any time, giving notice to users on the website www.belce-design.com. Please consult this page frequently, referring to the date of the last modification indicated at the end of the document. If the Data Subject does not accept the changes made to this Privacy Policy, they may request the Data Controller to delete their personal data. Unless otherwise specified, the previous Privacy Policy will continue to apply to the personal data collected until that moment.

Updated privacy policy as of 25/05/2018.