Privacy Policy

Website Privacy Policy

Pursuant to Regulation (EU) 2016/679 (hereinafter, the “Regulation”), this page describes the methods for processing the personal data of users who browse the website, accessible electronically.

This information does not apply to other websites, pages or online services that may be reached via hyperlinks published on this website but referring to resources external to the data controller’s domain.

DATA CONTROLLER

– Identity and contact details of the data controller: “Baby In” s.r.l., Via Cariglia n. 40, Foggia; PEC: babyinfoggia@pec.it – Contact details of the Data Protection Officer (D.P.O.): the data controller has appointed Attorney Marco Pagliara as Data Protection Officer, who can be contacted by email, PEC: avv.pagliara@pec.it; e-mail: avv.m.pagliara@gmail.com

PURPOSES AND LEGAL BASIS OF THE PROCESSING

The personal data indicated on this page are processed for the following purposes: a) dissemination of the activities and services of the data controller and its operators; b) direct marketing.

The legal basis consists of legitimate interest (point a) and consent (point b).

TYPES OF DATA PROCESSED

Browsing data The IT systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.

This category of data includes the IP addresses of hosting servers, the URI/URL (Uniform Resource Identifier/Locator) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, and the numerical code indicating the status of the response provided by the server (successful, error, etc.).

These data, necessary for using the web services, are also processed in order to:

obtain aggregated statistical information on the use of the services (most visited pages, number of visitors by time slot or daily basis, time spent on the website, etc.);
monitor the proper functioning of the services offered.

Identification and contact data of users and potential customers are also processed, collected via forms or email.

DATA RETENTION PERIOD

Browsing data are not retained for more than 2 years for statistical investigation purposes; technical cookies are retained for the duration of the session (except in the event of any need to ascertain offences by the Judicial Authority).

Data collected for pre-contractual purposes will be retained for a maximum period of 2 years, while data processed for contractual purposes will be retained for 10 years, in compliance with the ordinary limitation period applicable to obligations-related rights. For any marketing purposes, data will be retained for 10 years, as indicated in the general privacy policy.

Data provided by the user
The optional, explicit and voluntary sending of messages to the contact addresses, private messages sent by users to institutional profiles/pages on social media, as well as the completion and submission of forms on the website, entail the acquisition of the sender’s contact details, necessary in order to respond, as well as all personal data included in the communications.

Specific information notices will be published on the website pages set up for the provision of certain services.

Cookies and other tracking systems
No cookies are used for user profiling. The only processing carried out concerns the production of statistics, using pseudonymised data, on website browsing. The adopted configuration, designed to exclude the processing of identifying data, collects the following information:

The IP address, which is minimised
The type of browser (macro data)
The type of device (PC, smartphone, tablet)

Technical session cookies (persisting within the same session) are used, strictly limited to what is necessary for safe and efficient website browsing.

Information on the processing of personal data carried out through the social media platforms used by the website owner.

With regard to the processing of personal data carried out by the operators of the social media platforms used by the website owner, please refer to the information provided by such operators through their respective privacy policies. The website owner processes personal data provided by users through the dedicated social media pages within the scope of its declared purposes and in compliance with applicable regulations.

DATA RECIPIENTS

Recipients of the data collected following consultation of certain services include the parties designated, pursuant to Article 28 of the Regulation, as data processors.

Service providers for website development and delivery, as well as those responsible for the operational management of the website’s technological platforms.

DATA SUBJECTS’ RIGHTS

Data subjects have the right to obtain, in the cases provided for, access to their personal data and to request rectification or erasure thereof, or restriction of processing concerning them, or to object to processing (Articles 15 et seq. of the Regulation).

The relevant request shall be submitted by contacting the Data Protection Officer.

RIGHT TO LODGE A COMPLAINT

Data subjects who believe that the processing of personal data relating to them carried out through this website is in breach of the provisions of the Regulation have the right to lodge a complaint with the Supervisory Authority, as provided for by Article 77 of the Regulation, or to bring the matter before the competent judicial authorities (Article 79 of the Regulation).