Dear Data Subject, we wish to inform you that "European Regulation 2016/679 concerning the protection of individuals with regard to the processing of personal data, as well as the free circulation of such data" (hereafter "GDPR") provides for the protection of individuals with regard to the processing of personal data as a fundamental right. We inform you that:

A. CATEGORIES OF DATA that are processed:

a. Data collected automatically. During their normal operation, the computer systems and applications used to operate this website acquire some data (whose transmission is implicit in the use of Internet communication protocols) that can potentially be associated with identifiable users. The data collected include IP addresses and domain names of the computers used by users connecting to the website, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the operating system, the browser and the user's computer environment. These data are processed strictly for the time necessary and used for the sole purpose of obtaining statistical information on the use of the website, and to monitor its correct operation. The provision of such data is mandatory, being directly connected to the web browsing experience.

b. Data provided voluntarily by the user. The voluntary and explicit sending of an email to the addresses specified in the different access channels of this website does not imply a request for consent, and completing any of the provided contact forms entails the subsequent acquisition of the sender/user's address and data, which are necessary to respond to the submitted requests and/or to provide the requested service. Your voluntary submission of emails to our email addresses does not require any other notices or requests for consent. To the contrary, specific summary notices will be included or displayed on the pages of the website prepared for particular services on request (forms). The user must therefore explicitly consent to the use of the data entered in these forms in order to send the request.

c. Cookies. This website does not use technical cookies or first- or third-party profiling cookies that might collect user browsing data, the provision of which is optional and takes place through the expression of free and informed consent. Cookies allow an analysis of the effectiveness of the website and make it easier and more intuitive over time.

For more information, a specific cookie policy is available.

B. SOURCE OF PERSONAL DATA: The personal data in the possession of BCM Illuminazione S.r.l. are collected directly from the data subject.

C. DATA CONTROLLER: BCM ILLUMINAZIONE S.R.L.

D. DATA PROCESSING PURPOSES AND LEGAL BASIS: The legal basis for the processing of your data is your consent, and the processing is carried out for the following purposes:
1. Improve the web browsing experience.
2. Use of the data included in emails sent and in the contact forms to provide a response to queries.

G. DATA RECIPIENTS: Within the limits established by the purposes specified for processing, your data may be disclosed to consulting companies and private companies that have been appointed as Data Processors by the Data Controller. Your data will not be disseminated in any way. The Data Processors and Appointed Processors are clearly identified in the Privacy Guidelines document, which is updated on a regular basis.

H. TRANSFER OF DATA ABROAD: The data collected are not transferred abroad.

I. STORAGE PERIOD: The data collected will be kept for a period of time not exceeding what is necessary for the fulfilment of the purposes for which they are processed ("storage limitation principle", art. 5, GDPR) or according to the expiries established by law. The verification of the obsolescence of the data stored in relation to the purposes for which they were collected is carried out periodically.

RIGHTS OF THE DATA SUBJECT: The data subject is always entitled to request access to his/her data, to correct or erase them, restrict their processing or the possibility of objecting to their processing, requesting data portability, withdrawing consent to the processing of the data, claiming these and other rights provided by the GDPR through a simple communication to the Data Controller. The data subject can also lodge a complaint with a supervisory authority.

M. MANDATORY NATURE OF CONSENT OR OTHERWISE: The provision of your data is mandatory during the navigation of our website with regard to points D.1 and D.2 of the aforementioned purposes, to allow correct provision of the service.

N. METHOD OF DATA PROCESSING: The personal data you provide will be processed in compliance with the aforementioned regulations and the confidentiality obligations adopted by the Data Controller. The data will be processed both with computer tools and on paper and using any other type of suitable support in compliance with security measures pursuant to art. 5 para. 1, lett. F of the GDPR.