Cookie Policy
Bristart Privacy Policy and Cookies Notice
Why this notice?
This page describes the website's management procedures with regard to the processing of personal data of users who visit it.
This notice is provided pursuant to Article 13 of Legislative Decree No. 196/2003 and Article 13 of Regulation (EC) No. 679/2016 - Personal Data Protection Code - to those who interact with the Bristart.com web services for the protection of personal data, accessible electronically from the address: bristart.com.
This notice applies only to the Bristart.com website and not to other websites that may be accessed by the user via links.
Purpose and location of data processing
The processing operations related to the web services offered by this site are carried out at the headquarters of the data controller and are handled solely by Bristart.com.
The personal data provided by users accessing the service are processed, also pursuant to Article 6, paragraph 1, letter f), to:
· fulfill legal obligations;
· perform accounting and administrative activities
· perform the promotion and sale of Bristart.com products.
The data controller declares that the data collected is NOT transferred to other countries, but is disclosed to third parties:
· to manage newsletters
· to process payments (e.g., credit card banking sites, PayPal sites)
or
· when there is a need to protect human rights, as well as to fulfill obligations established by law or regulations and/or upon request from the competent authorities.
Data subjects' rights are outlined at the end of this document.
The data will be retained for a limited period, specifically for the entire duration of the contract. Upon expiration of this period, the company will archive all data for ten years, as required by applicable law, and will then permanently delete the processed data from all archives. Data archived for more than ten years will be deleted in June and December of each calendar year following the expiration date.
Bristart.com declares that the site manages certain processes relating to natural persons automatically. Indeed, user registration activities such as entering personal data, passwords, placing orders, checking quantities ordered in relation to product availability, and the successful placement of orders and related payments are all managed automatically by the various software programs that govern the site.
Bristart.com declares that it does NOT perform any type of profiling.
Browsing data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols (technical cookies).
This information is not collected to be associated with identified data subjects, but by its very nature, it could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.), and other parameters relating to the user's operating system and IT environment.
This data is used solely to obtain anonymous statistical information on site usage and to verify its proper functioning, and is deleted immediately after processing.
The data in question may, however, be used to ascertain liability in the event of any cybercrime committed against our site.
Data provided voluntarily by the user
The optional, explicit, and voluntary sending of emails to the addresses indicated on this site entails the subsequent acquisition of the sender's address, which is necessary to respond to requests, as well as any other personal data included in the message.
Specific summary information will be progressively reported or displayed on the site pages dedicated to particular services upon request.
We encourage our users, when requesting services or making inquiries, not to send the names or other personal data of third parties unless strictly necessary.
Cookies
No personal user data is acquired by the site.
Cookies are not used to transmit personal information, nor are so-called persistent cookies of any kind, or user tracking systems, used.
The use of session cookies (which are not stored permanently on the user's computer and disappear when the browser is closed) is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to enable safe and efficient browsing of the site.
The session cookies used on this site avoid the use of other IT techniques that could potentially compromise the privacy of users' browsing and do not allow the acquisition of personal data that could identify the user.
Optional Data Provision
Except as specified above regarding browsing data, the user is free to provide the personal data requested by the Bristart.com forms required for site registration; The following navigation/browsing options are available:
Free navigation/browsing: Anyone can access and navigate the Bristart.com website and create their own shopping cart.
Purchase: Purchases can be made using the following methods:
Purchase with registration: The user registers on the Bristart.com website by entering the data requested on the Bristart.com forms. In this case, the data entered by users will be processed according to the procedures set out in this document.
Purchase without registration: The user proceeds with the purchase as a GUEST. In this case, the user enters only the data necessary for shipping the purchased goods, and such data will be deleted within 48 hours of notification of delivery by the courier.
Failure to provide the minimum required data will make it impossible to provide the services requested from Bristart.com (for example, information, product purchases, etc.). In the case of registration, as provided for by art. Pursuant to Article 8, paragraph 1 of Regulation 679/2016, the user will be asked to declare whether he or she is over 16 years of age.
Processing Methods
The data entered (both personal and otherwise) is processed using automated tools from the moment of registration until the goods purchased are shipped. For purchases made through registration, specific security measures are implemented to prevent data loss, illicit or incorrect use, and unauthorized access.
Rights of Data Subjects
The subjects to whom the personal data refers have the right at any time to obtain confirmation of the existence or otherwise of such data and to know its content and origin, verify its accuracy, or request its integration, updating, or rectification. Data subjects also have the right to request the deletion, anonymization, or blocking of data processed in violation of the law, as well as to object, for legitimate reasons, to its processing.
Requests should be sent to Bristart.com at info@bristart.com
Please note that, to provide a comprehensive service, our portal contains links to other websites not managed by Bristart.com. These sites may vary in nature depending on their needs, and therefore data may be transferred to third parties. We are not responsible for errors, content, cookies, publication of immoral or illegal content, advertising, banners, or files that do not comply with applicable laws, nor for the compliance with privacy laws on linked sites not managed by us. To improve the service we offer, we appreciate your prompt reporting of malfunctions, abuse, or suggestions.
DATA SUBJECT RIGHTS
In order to fulfill the obligations set forth in EU Regulation 679/2016 (Articles 15 to 22) and pursuant to Article 7 of Legislative Decree 196/2003, Bristart.com reminds you of the rights of data subjects:
· Request confirmation of the existence or otherwise of your personal data;
· Obtain information regarding the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be disclosed, and, where possible, the retention period;
· Obtain rectification and erasure of data;
· Obtain restriction of processing;
· Obtain data portability, i.e., receive data from a data controller in a structured, commonly used, and machine-readable format, and transmit it to another data controller without hindrance;
· Object to processing at any time, including for direct marketing purposes;
· Object to a decision-making process automated processing of personal data concerning individuals, including profiling; · withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal; · lodge a complaint with a supervisory authority.