PERSONAL DATA PROTECTION NOTICE

(Articles 13 and 14 of Regulation (EU) 2016/679)

Dear User,

pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR), we hereby inform you that the personal data provided by you or otherwise acquired will be processed in compliance with applicable legislation and with the principles of lawfulness, fairness, transparency, data minimisation, accuracy, storage limitation and integrity.

WHO WE ARE

The Data Controller is V. Besana S.p.A., with registered office at Via Domenico Scarlatti 30, 20124 Milan (MI), Italy, which, within the scope of its activities, may make use of data processors pursuant to Article 28 of the GDPR or specifically appointed persons authorised to process personal data.

In carrying out its activities, the Company pays the utmost attention to the security and confidentiality of its customers’ personal data. The Company is the Data Controller of the personal data collected through this website.

HOW WE COLLECT YOUR PERSONAL DATA

The Company collects and processes your personal data in the following circumstances:

If you provide personal data on behalf of another person, you must ensure in advance that the relevant data subjects have read this Privacy Notice.

Please help us keep your personal data up to date by informing us of any changes.

FOR WHAT PURPOSES YOUR PERSONAL DATA MAY BE USED

Establishment and performance of contractual relationships and related obligations, including communications concerning services.

  1. Purposes related to the conclusion and performance of the contract, namely purposes strictly connected with and necessary for carrying out pre-contractual activities, managing the contractual relationship (administrative and accounting activities, customer assistance, complaint handling, debt recovery, etc.) and providing the services requested from time to time;
  2. Purposes connected with compliance with legal obligations and requests from public authorities, as well as compliance with applicable legislation concerning the prevention of fraud, money laundering and terrorist financing, where applicable.

LEGAL BASIS FOR PROCESSING AND NATURE OF THE PROVISION OF DATA

The legal basis for the processing of personal data referred to under points a) and b) above is the performance of a contract to which the data subject is a party and/or the implementation of pre-contractual measures taken at the request of the data subject (Article 6(1)(b) of Regulation (EU) 2016/679), as well as the legitimate interest of the Data Controller (Article 6(1)(f) of the GDPR) in protecting the website and its users.

The provision of data is optional; however, failure to provide such data may result in the inability to use certain features.

HOW WE KEEP YOUR PERSONAL DATA SECURE

The processing of personal data for each of the purposes set out above will be carried out using automated and electronic means, according to procedures strictly related to the purposes indicated and, in any event, in such a way as to ensure the security and confidentiality of the data in compliance with Article 32 of the GDPR.

Where applicable, the data subject may also consent to only one of the available contact methods, whether electronic or traditional.

HOW LONG WE RETAIN YOUR INFORMATION

We retain your personal data only for as long as necessary to achieve the purposes for which it was collected or for any other related legitimate purpose.

Therefore, where personal data is processed for two different purposes, we will retain such data until the purpose with the longer retention period has ceased to apply.

Personal data that is no longer necessary, or for which there is no longer a legal basis for retention, will be securely destroyed.

With regard to compliance with contractual obligations, data processed for the purpose of fulfilling any contractual obligation may be retained for the entire duration of the contract and, in any event, for no longer than 10 years thereafter, in order to verify any outstanding matters, including accounting documents such as invoices.

In the event of disputes where it is necessary for us to defend ourselves, take legal action or bring claims against you or third parties, we may retain personal data that we reasonably consider necessary for such purposes until the dispute has been concluded and the relevant judicial decision has become final.

WITH WHOM WE MAY SHARE YOUR PERSONAL DATA

Your personal data may be accessed by:

  1. duly authorised employees;
  2. data processors with whom an agreement has been entered into pursuant to Article 28 of the GDPR.

Your personal data may also be specifically disclosed in all cases required by law.

In any event, your personal data will not be disseminated in any way.

YOUR DATA PROTECTION RIGHTS AND YOUR RIGHT TO LODGE A COMPLAINT WITH THE SUPERVISORY AUTHORITY

You may exercise your rights by sending an email to the following address: privacy@besanagroup.com

or by sending a registered letter to the Company’s registered office.

You have the right to request from the Company:

Furthermore, where the legal basis for processing is consent, you may withdraw your consent at any time.

COMPLAINT

Please note that, pursuant to Article 77 of Regulation (EU) 2016/679, you have the right to lodge a complaint with the competent Data Protection Authority in the event of a breach of the applicable legislation on the protection of personal data.

TRANSFER OF DATA ABROAD

No transfer of personal data to third countries, whether within or outside Europe, is envisaged.

Last updated: 10/09/2026

PRIVACY NOTICE

Click here to download our Privacy Notice.