PRIVACY GDPR DISCLOSURE (Articles 13 and 14 EU Reg. 679/2016 GDPR)

In fulfillment of Articles 13 (for data collected from the data subject) and 14 (for data not collected from the data subject) of Regulation (EU) 2016/679 (GDPR), the following information is made available to the Users of this Website, Data Subjects, which refers exclusively to the processing carried out through this Website and not through other websites that may be visited through links, for which please see the relevant disclosures made by the respective Data Controllers.

Data controller and contact information
The data controller is BEGA S.R.L., C.F./P.IVA 04039300241, located in 36053 Gambellara (VI), Strada Statale 11, Km 331, in the person of the legal representative pro tempore, e-mail info@maanta.it.

Data Protection Officer (DPO) and contact details.
The Holder has not appointed a DPO/DPO, as the legal requirements are not met.

Categories of data processed and sources of origin
The Owner may primarily process general browsing data, as well as cookies for which it invites you to read the specific Cookie Policy linked in the footer.
The Data Controller may also process personal data provided voluntarily by the user, for example through the contact form or by sending e-mail communications, including common personal data (identification, personal data, tax data and the like), special data pursuant to Art. 9 GDPR or criminal data pursuant to Art. 10 GDPR, on an exceptional basis to the extent that this is made necessary by the request itself.
The data could come from automated or voluntary sources, as well as from public sources. For example, it could come from the user's browsing, which could bring with it information about previous browsing of other sites, including in particular cookies and other similar technologies for which we refer again to the specific Cookie Policy linked in the footer. Data could also be voluntarily contributed by the user or related parties. Other data could come from public sources, such as those processed as part of public records searches and from public viewings, certificates, public records, and the like.
The canons of strict confidentiality and professional secrecy of user information that falls under legal and ethical obligations are scrupulously observed in all cases.

Purpose of processing
The personal data of the Users of the Website, as described above, will be processed in the manner and form prescribed by the GDPR, in general for the purpose of carrying out the Website's own functionalities, consultation of its contents and use of its services.
Specifically, the processing of personal data pursues the following purposes:
1.    for visiting the Site, consulting the information published therein, and using the related services;
2.    for the management of navigation data and for functional or technical reasons that allow the same enjoyment of the content, including through technical cookies, for reasons of aggregate statistical survey, including through analytics cookies, for the delivery of personalized content or services, including through profiling cookies, if provided and prior consent; in any case, under the conditions set out in the Cookie Policy linked in the footer, which recalls the Guidelines of the Guarantor Authority of June 10, 2021, published on July 9, 2021;
3.    to acknowledge requests made by the User through the Website and its communication tools (contact forms, information request forms and the like) and for any subsequent, related, connected, consequential and similar communication and processing for the best handling of the request itself;
4.    for possible subscription to the newsletter, where applicable, and the consequent sending of various informative communications concerning the sector in which the Holder operates;
5.    for legal compliance and other mandatory purposes, such as billing or anti-money laundering profiles;
6.    for other purposes ancillary or related or consequential to those above and falling within the activities of the Web Site;
7.    for the processing of the e-mail address, provided by the User in the context of a previous relationship of sale (intended in any meaning, of supply, rendering and similar) of goods or services, also aimed at sending, without further consent, communications for subsequent similar information, pursuant to and within the limits of art. 130 paragraph 4 Privacy Code (Legislative Decree 196/2003); the person concerned may in any case express his refusal and object to such processing, both initially and subsequently, easily and free of charge, by following the instructions given in each of these subsequent communications;
8.    for the possible receipt of Curricula Vitae from candidates wishing to propose themselves at the Holder.

Legal basis for processing
For all personal data, the processing of personal data is based on the following conditions of lawfulness (legal bases):
●    Art. 6 par. 1(a) GDPR = consent: for the handling of profiling cookies as per purpose no. 2 and for other processing subject to consent, including purposes ancillary to the main ones that do not fall under the other legal bases, as per purpose no. 6; for newsletter subscription as per purpose no. 4, if ancillary or additional to other processing;
●    art. 6 par. 1 lett. b) GDPR = contractual or pre-contractual obligation: for the same visit to the Site or for access to services also of an informative nature published in the Site itself and for the processing of related browsing information, as per purpose no. 1; for the management of cookies as per purpose no. 2 other than profiling cookies; for the processing of requests made by the Data Subject and related answers as per purpose no. 3; for subscription to the newsletter when this is the sole or main purpose of the provision of personal data, in particular the e-mail address, as per purpose no. 4; for other processing related, functional and consequential to those just mentioned, as per purpose no. 6; for the management of Curricula Vitae and related requests, as per purpose no. 8;
●    Art. 6 par. 1(c) GDPR = fulfillment of a legal obligation: for the processing of all data necessary to fulfill legal obligations, including the processing of tax data related to billing profiles or other processing required by law, such as those related to anti-money laundering, as per purpose no. 5; for other processing related, functional and consequential to those just mentioned, as per purpose no. 6;
●    art. 6 par. 1 letter f) GDPR = legitimate interest, for all processing included in information society services, as well as for information purposes of the Data Controller. In this regard, the Controller invokes legitimate interest for further communications sent to the e-mail address of the Data Subject pursuant to Art. 130 para. 4 Privacy Code as per purpose No. 7, subject to the Data Subject's free right to object as explained therein.
For special data within the meaning of Art. 9 GDPR that may be voluntarily provided by data subjects through browsing and also through contact forms or the like, the Data Controller indicates the following additional lawfulness conditions within the meaning of Art. 9 GDPR:
●    Art. 9 par. 2(a) GDPR: consent, for processing for which it has been expressly given
●    Art. 9 par. 2(e) GDPR: data made manifestly public by the data subject, for data independently disclosed or disclosed by the data subject
●    Art. 9(2)(f) GDPR: establishment, exercise or defense of a right in a court of law or whenever the jurisdictional authorities exercise their jurisdictional functions, for the exercise of a right by the Controller.
For criminal data referred to in Art. 10 GDPR, processing may take place, exceptionally, within the scope of and in compliance with the conditions dictated by Art. 2-octies of the Privacy Code.

Legitimate interest
The processing of personal data is also based on the legitimate interest of the Data Controller as referred to in Art. 6 para. 1 lit. f) GDPR, such as the exercise of one's information rights in the context of the information society, the performance of the services indicated on the Website or the possible implementation of direct marketing operations in accordance with Recital 47 of the GDPR.
The Controller also invokes the right to make use of the processing of the e-mail address of the Interested Party conferred in the context of a sale of goods and services, to send further communications addressed to the Interested Party and relating to similar goods or services pursuant to Article 130 paragraph 4 of the Privacy Code, subject always to the free right of opposition of the Interested Party, as per purpose No. 7.

Mandatory or optional nature of providing data
The provision of browsing-related data by Users, for the above purposes, depends on the degree of privacy that the User has enabled or disabled through their browser, or has managed through the appropriate Cookie Banner commands regarding cookie management. For technical cookies, disabling them may affect the navigation of the Website.
The provision of certain data is in any case necessary for the very structure of the Web Site and for the provision of some of its services. In particular, by way of example:
●    in order to send messages via contact form or to subscribe to the newsletter, if any, the minimum data requested therein are in any case mandatory, such as possibly the name/surname and/or e-mail address and/or other identifying data of the sender and/or the USERNAME; in any case, the contact form indicates which data are mandatory (with an asterisk "*") and which are not;
●    USERNAME and PASSWORD are in all cases required for registration and access to the restricted area of the Website, if any.
The provision of all other data is optional.

Consequences of failure to confer
Failure to provide mandatory personal data prevents the Controller from sending the requested information or performing the further processing requested by the User or, in some, cases, from being able to provide the services offered by the Website.
Failure to provide optional data does not produce these consequences, but could affect the processing of the request made by the User or the very navigability of the Website.

Recipients of any communications and data transfers
The data may be disclosed to companies, professionals, and other consultants working in connection with the purposes set out in this notice or related purposes, both intra-EU and extra-EU (in the latter case, this will be exclusively to entities for which an adequacy decision is in force or adequate safeguards are in place including Standard Contractual Clauses or consent has been collected or additional exemptions are provided under Article 49 GDPR, in accordance with the dictates of the Schrems II Judgment of the Court of Justice of July 16, 2020).
In any case, the data may be disclosed to data processors and persons authorized to process the data, again for the same purposes as the Website or for purposes related to the services offered by the Website, as well as to any additional Autonomous Controllers within the limits of the related purposes.
Recipients include in particular: the Owner's operators as authorized data subjects, its Data Processors and related persons authorized to process for related purposes, e.g., management or tax purposes, Google Ireland for Google Analytics, Google Ireland Ltd for Google Ads, ....... for the management of this Web Site and related services, ......
No generalized communication of data for further purposes will be carried out, and no dissemination of personal data will be made.
Browsing and similar data (for which reference is made to the above), as well as third-party profiling cookies (for which reference is made to the Cookie Policy linked in the footer), will be disclosed to the respective third parties concerned, where they do not already handle them directly as autonomous Data Controllers, within the limits of the consents given.

Retention period
The data voluntarily provided by the Data Subject will be retained until the consent given by the Data Subject is revoked, or until actions the Data Subject can take on his or her browser, including cleaning cookies.
Browsing data and technical cookies will be retained for the technical time required to fulfill the functions for which they were collected.
For cookie retention times in general, please refer to the appropriate policy accessible from the Cookie Banner.
For any other personal data, the retention period is limited to the period of prescription of the relevant rights or the term of the relevant legal or contractual obligations, including those related to billing and the like.

Rights of the Interested Party
The Data Subject has the right of access, rectification, erasure (forgetting), restriction, receipt of notification in case of rectification, erasure or restriction, portability, objection, and not to be subjected to a decision based solely on automated processing, including profiling, that produces legal effects concerning him or her or that significantly affects him or her in a similar way, pursuant to Articles 15 to 22 of the GDPR.
These rights may be exercised in the forms and terms set forth in Article 12 GDPR, by written notice sent to the Controller by e-mail to the above e-mail address.
The Holder will render an appropriate response as soon as possible and in any case within the period of 1 month from the receipt of the request, except in cases of extension or justified refusal under Article 12 GDPR.

Right to revoke any consent given
Where the processing is based on consent, the Data Subject may revoke it at any time by sending an e-mail to the e-mail address of the Data Controller referred to above, or by using the appropriate controls on the Website in particular for the management of profiling cookies, as well as in any case by express communication at the Data Controller's office.

Right to file a complaint
The Data Subject has the right to lodge a complaint pursuant to Articles 77 et seq. of the GDPR with a supervisory authority, which for the Italian state is identified in the Garante per la protezione dei dati personali.
The forms, methods and time limits for bringing complaints actions are provided for and governed by current national legislation, for Italy by special regulations of the Guarantor.
The complaint is without prejudice to any other administrative or jurisdictional recourse; for jurisdictional actions for damages, in Italy the action is brought before the competent court.

Profiling
Personal data provided through browsing this website may be subject to profiling by third-party providers through third-party profiling cookies, subject to the User's consent expressed through the appropriate Cookie Banner commands.
For more information, the User is encouraged to read the Cookie Policy linked in the footer.