INFORMATION ON THE PROCESSING OF PERSONAL DATA

pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016

The methods for managing the website www.begnigroup.it (hereinafter the website) are described here with reference to the

processing of the personal data of the users who consult it. This is a document of a general nature that informs about the

criteria for the correct processing of personal data carried out on or through the site, criteria that the user can find illustrated

in detail also within the individual information published in the various sections of the site. to specify the methods and

purposes of the processing related to the provision of information of various kinds. This information is also provided pursuant

to Article 13 of the General Data Protection Regulation (European Union Regulation 2016/679 of the European Parliament and

of the Council of 27 April 2016 concerning the protection of individuals with regard to the processing of personal data , as well

as the free circulation of such data, hereinafter Regulation) to those who interact with the web services of the site and does not

include the treatments carried out on other sites that may be consulted by the user through links on the site itself. The

information is also inspired by Recommendation no. 2/2001 that the European authorities for the protection of personal data,

gathered in the Group established by Article 29 of Directive no. 95/46 / EC, adopted on 17 May 2001 to identify some

minimum requirements for the collection of personal data online, and in particular, the methods, timing and nature of the

information that the data controllers must provide to users. when they connect to web pages, regardless of the purpose of the

link. Users must carefully read this information before forwarding any type of personal information.

The owner of the processing of personal data

Following consultation of this site, data relating to identified or identifiable persons may be processed. The owner of the

processing of personal data is Begni Group S.p.A. (hereinafter the owner). As of today, all information concerning the owner,

together with the updated list of managers and system administrators possibly designated, is available at the headquarters of

Begni Group S.p.A. in Via Brescia, 145 – 25039 Travagliato (BS).

Place of processing of personal data

The treatments connected to the web services of this site take place:

  • At the headquarters of the owner
  • At the headquarters of T. Immagine S.r.l. in charge of the creation and maintenance of the site
  • At the Data Center Caldera headquarters in via Caldera in Milan. owner of the infrastructure (server) on

which the site is installed.

The treatments connected to the web services of this site are also handled by the technical staff in charge of the treatment, or

by any persons in charge of occasional maintenance operations.

Purpose of the processing of personal data

The personal data provided by users who access the site by sending an e-mail message (e-mail) to the data controller (also

using the form provided in the specific section of the site), will be used for the sole purpose of performing the requested

service. The optional, explicit and voluntary sending of e-mails to the addresses indicated on the site, by its very nature,

entails the subsequent acquisition of the sender’s e-mail address, necessary to respond to requests, as well as any other

personal data included in the message. . The owner carries out the processing of personal data within the limits of what is

strictly necessary for the performance of the functions for which the service is requested, excluding the processing when the

purposes pursued can be achieved through anonymous data or methods that allow the user to be identified. only in case of

necessity. We invite our users, in requests for information via e-mail or other sections of the site not to send names or other

personal data of third parties that are not strictly necessary nor data belonging to particular and judicial categories pursuant

to articles 9 and 10 of the Regulation. If the user sends personal and contact data of any third party in the information

requests, he acknowledges that this operation represents a processing of personal data in respect of which the user acts as an

independent owner, assuming all the obligations and responsibilities provided for. from the Regulations. In this sense, the user

guarantees the owner that any third party data has been acquired by the user himself in full compliance with the Regulations

(documented consent also in writing and issued by the third party). The user grants the widest indemnity on this point with

respect to any dispute, claim, request for compensation for damage from processing that should reach the owner from any

third party, due to the provision of the data indicated by the user in violation of the rules on protection of personal data. The

lawfulness of the processing of personal data is based on the legitimate interest of the owner to respond to what is

spontaneously requested by the user and ascertain responsibility in the event of any computer crimes against the site, and on

the legitimate interest in responding to user requests.

Types of personal data processed

The computer systems and software procedures used to operate this site acquire, during their normal operation, some

personal data whose transmission is implicit in the use of Internet communication protocols (navigation data). This is

information that is not collected to be associated with identified users, but which by their very nature could, through

processing and association with data held by third parties, allow users to be identified. This category of data includes the IP

addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier)

addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size

of the file obtained in response, the numerical code indicating the status of the response given by the server (successful,

error, etc.) and other parameters relating to the operating system and the users’ IT environment. These data are used for the

sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning. The

data in question could be used to ascertain responsibility in the event of any computer crimes against the site in question.

Cookie

The specific information describing the use of cookies made by the site is available and can be consulted in the “Cookie policy”

document.

Methods of processing personal data

Personal data are processed with automated tools. Specific security measures are observed to prevent the loss, illicit and / or

incorrect use, unauthorized access of data. The processing of personal data is carried out within the limits of what is strictly

necessary for the performance of the functions for which the service is requested, excluding the processing when the purposes

pursued can be achieved through anonymous data or methods that allow the user to be identified only. in case of necessity.

We do not collect or disclose your personal information that reveals racial and ethnic origin, religious, philosophical or other

beliefs, political opinions, membership of parties, trade unions, associations or organizations of a religious, philosophical

nature, political or trade union, as well as personal data suitable for revealing the state of health and sexual life.

Communication and dissemination of personal data

If necessary, personal data can be communicated (with this term meaning to give knowledge to one or more specific subjects)

to subjects whose right of access to data is recognized by national and European Union law provisions and to third parties. to

satisfy the requests made by the user through the site. Personal data are in no case disclosed, with this term meaning giving

them knowledge in any way to a plurality of undetermined subjects.

Optional supply of personal data

Apart from what is specified for navigation data and cookies, the user is always free to provide personal data for the purposes

for which he connects to the site. Failure to provide them will make it impossible to obtain what is requested.

Criteria used to determine the retention period of personal data

Navigation data

The user’s personal browsing data are kept for the period necessary to comply with the retention terms established by law on

electronic communications.

Changes to the information

The data controller reserves the right to make changes to this information at any time by notifying the user on this page.

Therefore, please consult this page often to be constantly updated.

Rights of the interested party (user)

We inform you that, at any time, the user can exercise the following rights:

  • Right to withdraw consent to the processing of their personal data at any time without prejudice to the lawfulness of

the processing based on the consent given prior to the withdrawal;

  • The right to receive in a structured format, commonly used and readable by an automatic device, the personal data

concerning him provided to a data controller and has the right to transmit such data to another data controller

without impediments by the data controller treatment to which he provided them;

  • The right to obtain access to their personal data;
  • Right to obtain the rectification of their personal data if it does not conflict with the current legislation on data

retention;

  • Right to obtain the cancellation of their personal data if it does not conflict with the current legislation on data

retention;

  • Right to obtain the limitation of the processing of their personal data;
  • The right to object at any time for reasons related to their particular situation, to the processing of their personal

data pursuant to Article 6, paragraph 1, letters e) or f), including profiling on the basis of these provisions;

  • Right to object at any time to the processing of their personal data for direct marketing purposes including profiling

to the extent that it is connected to such direct marketing;

  • Right not to be subjected to a decision based solely on automated processing including profiling, which produces

legal effects concerning you or which significantly affects your person in a similar way.

The interested party may exercise the aforementioned rights by sending an informal request to the data controller by hand, by

post, by registered letter, by fax or by e-mail (info@begnigroup.it).

To facilitate the exercise of these rights, the Italian Data Protection Authority has prepared a specific form that can be

downloaded from the website www.garanteprivacy.it

Right to lodge a complaint

The user is informed that he has the right to lodge a complaint with a supervisory authority (in particular the Italian Data

Protection Authority).

BEGNI GROUP S.p.A.

Via Brescia, 145

25039 Travagliato (BS) Italia

www.begnigroup.it

www.cobrashop.it

Tel.+39-030-68.65.044

Fax. +39-030-68.63.208

info@begnigroup.it

C.F./P.IVA 03428660173

Capitale sociale €100.000 i.v.

Iscrizione REA BS 396043