WHY THIS NOTICE
This page describes the management methods of the website with reference to the processing of personal data of users who consult it.
This information is provided pursuant to EU General Regulation 2016/679 (hereinafter “GDPR”) on the protection of personal data to those who interact with the web services of The Bed, accessible electronically at the address https://thebed.it/ (hereinafter “website”).
This notice applies only to the website https://thebed.it/ of The Bed and not to other websites that may be consulted by the user through links.
DATA CONTROLLER
The Data Controller is Luciano Baldacci and can be contacted at: info@thebed.it
LOCATION OF DATA PROCESSING
The processing connected to the web services of this site takes place at the legal headquarters of the Controller and is handled only by technical personnel in charge of processing, or by persons in charge of occasional maintenance operations.
The hosting/housing/cloud servers are located at Aruba, which is within the European Economic Area and operates in compliance with European regulations (Privacy Policy).
No data derived from the web service is communicated or disclosed.
TYPES OF DATA PROCESSED
Among the Personal Data collected on the Controller’s Site, independently or through third parties, are: cookies; usage data; name; surname; address; email; city; and data communicated during the use of the service. Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically during browsing and the use of the services offered on the Site.
Browsing Data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected to be associated with identified users but, by its very nature, could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes IP addresses or domain names of the computers used by users connecting to the site, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server response (success, error, etc.), and other parameters relating to the user’s operating system and computer environment.
These data are used solely to obtain anonymous statistical information on site usage and to check its proper functioning, and are deleted immediately after processing. The data could be used to ascertain responsibility in case of possible computer crimes against the site; except for this eventuality, web contact data do not persist beyond the time necessary for navigation.
Data Provided Voluntarily by the User
To use the services provided by The Bed, users may be required to fill out contact request and/or registration forms containing fields for mandatory and optional personal data. Providing mandatory data is necessary to complete the contact or registration procedure; failure or partial provision of such data makes it impossible to register for or use the services. Providing optional data is voluntary and does not affect registration or service use.
The personal data requested by The Bed for service registration may vary depending on the registration forms used.
The voluntary and explicit sending of emails to the addresses indicated in the various access channels of this site does not require consent and entails the acquisition of the sender’s address and data, necessary to respond to requests, as well as any other personal data included in the message. Such data are considered voluntarily provided by the user when requesting the service.
COOKIES
As better explained in the “Cookie Policy”, the website uses “cookies”, understood as small text fragments (letters and/or numbers) that allow the web server to store information on the client (browser) to reuse during the same visit (session cookies) or for future visits to the website (persistent cookies).
For further information, please visit the Cookie Policy page, where you can set the types of cookies to be used.
PURPOSES AND LEGAL BASIS OF DATA PROCESSING
The user’s Personal Data provided through the Site will be processed for the following purposes:
-
to provide information about services available through the Site (e.g., contact requests via forms, account registration, service provision, etc.);
-
for research/statistical analysis purposes on aggregated or anonymous data, to measure site performance and functionality, including technical troubleshooting;
-
to prevent or stop fraudulent or improper activities that could damage the site or compromise operational security;
-
to comply with a legal obligation to which we are subject;
-
to establish, exercise, or defend legal claims whenever judicial authorities exercise their jurisdiction;
-
to send advertising, informational, promotional materials, and periodic updates on The Bed’s initiatives, services, products, and events (“marketing”).
Processing of personal data for purposes (a) through (e) above does not require your express consent (Art. 24, letters a) and b) of the Code and Art. 6, letters b) and e) of the GDPR), as these are part of a service contract, and the legal basis is the legitimate interest of the Controller to fulfill contractual obligations.
Processing for purpose (f) above does require your explicit consent (Art. 23 of the Code and Art. 7 of the GDPR). This consent applies to both automated and traditional communication methods.
You will always have the right to object easily and free of charge, in whole or in part, to data processing for these purposes, for instance, excluding automated contact methods and opting to receive only traditional promotional communications.
The legal basis for this processing is the user’s consent.
DETAILS ON PERSONAL DATA PROCESSING
Direct Contact
Contact Form
By filling in the contact form with their Data, the User consents to its use to send and receive information requests of any kind indicated by the form header.
Personal Data collected: email, name, surname, phone.
Phone Contact
Users who have provided their phone number may be contacted for informational or promotional purposes by The Bed, as well as to satisfy support requests.
Personal Data collected: phone number.
Interaction with Social Networks and External Platforms
These services allow interactions with social networks or other external platforms directly from the website pages.
Interactions and information acquired through the website are subject to the User’s privacy settings for each social network. If such a service is installed, it may collect traffic data related to the pages on which it is installed, even if Users do not use it.
-
Facebook Like Button and Social Widgets (Facebook, Inc.)
Personal Data collected: Cookies and Usage Data.
Location: USA – Privacy Policy. -
YouTube Embedded Videos (Google Inc.)
Embedded YouTube videos are services allowing interaction with YouTube, provided by Google Inc.
Personal Data collected: Cookies and Usage Data.
Location: USA – Privacy Policy – Terms of Use. -
Google Maps (Google Inc.)
Google Maps services embedded in the site allow interaction with the Google Maps system, provided by Google Inc.
Personal Data collected: Cookies and Usage Data.
Location: USA – Privacy Policy – Terms of Use.
Platform Monitoring
These services allow the website to monitor usage and user behavior to improve performance and functionality, as well as for maintenance and troubleshooting.
Statistics
These services enable the Data Controller to monitor and analyze web traffic and track User behavior.
Google Analytics (Google Inc.)
Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google uses the Personal Data collected to track and examine website usage, compile reports, and share them with other Google services.
Google may use the Personal Data to contextualize and personalize ads in its advertising network. IP Anonymization is active on this website.
Personal Data collected: Cookies and Usage Data.
Location: USA – Privacy Policy – Opt Out.
Directly Collected Statistics
The website may use an internal statistical system not involving third parties.
Personal Data collected: Cookies and Usage Data.
PROVISION OF DATA
Apart from what is specified for browsing data, the user is free to provide personal data indicated in request forms or otherwise provided in communications. Refusal, even partial, to provide such data may make it impossible to establish or manage the relationship or provide the requested service.
METHODS OF PROCESSING
The Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data.
Processing takes place using both paper-based and electronic tools (through our IT system, with data recorded on protected media) for the time strictly necessary to achieve the purposes for which they were collected.
These media, both electronic and paper, will be properly maintained and protected to ensure security and confidentiality, preventing data loss and unlawful or unauthorized use, in compliance with the security measures set out in Art. 32 of GDPR 2016/679.
DURATION AND RETENTION PERIOD OF PERSONAL DATA
Data collected are processed for as long as necessary for the purposes for which they were collected and, in any case, no longer than prescribed by law.
Data required for tax purposes are stored for at least 10 years or longer if not yet time-barred for tax verification. After that, data are deleted or anonymized unless further retention is required (e.g., warranty, legal obligations).
Personal data no longer necessary or without a legal basis for retention will be irreversibly anonymized or securely destroyed.
SOCIAL NETWORK PLUGINS
This site may incorporate plugins and/or buttons for social networks to allow easy sharing of content. Such plugins are programmed so that no cookies are set upon page access to protect user privacy. Cookies are only set if the user voluntarily interacts with the plugin. If the user is logged into the social network, they have already consented to the use of cookies transmitted via this site when registering on that social network.
The collection and use of information obtained via the plugin are governed by the respective social networks’ privacy policies.
-
Facebook – (Link to cookie policy)
-
YouTube – (Link to cookie policy)
-
Google Maps – (Link to cookie policy)
-
Google My Business – (Link to cookie policy)
RIGHTS OF THE DATA SUBJECT
Under Articles 15–23 of GDPR 2016/679, you, as the data subject, have the following rights, which you may exercise by submitting a request to the Controller and/or Data Processor, in addition to the right to lodge a complaint with a supervisory authority:
-
Art. 15 – Right of Access
-
Art. 16 – Right to Rectification
-
Art. 17 – Right to Erasure (“Right to be Forgotten”)
-
Art. 18 – Right to Restriction of Processing
-
Art. 20 – Right to Data Portability
-
Art. 21 – Right to Object
-
Art. 22 – Right not to be subject to Automated Decision-Making, including Profiling
DISCLOSURE AND DISSEMINATION
Your data will not be “disseminated” (i.e., made known to unspecified parties in any form without your explicit consent).
Your data may, however, be “disclosed” (i.e., made known to specific parties) in the following cases:
-
to persons within The Bed assigned to data processing, particularly administrative staff;
-
to parties entitled by law, regulation, or EU legislation, within the limits of such rules;
-
to parties who need access to your data for purposes auxiliary to the relationship between you and us, limited to what is strictly necessary;
-
to our consultants, within the scope of their duties for The Bed, or as external Data Processors under confidentiality and security agreements.
METHODS FOR EXERCISING RIGHTS
You may exercise your rights or revoke consent at any time by sending a communication to the addresses and using the methods indicated below.
CONTACT DETAILS
Any request should be addressed to: info@thebed.it
