Website www.bec-natura.com

• Our website collects some personal data from users

 

• Owner of the processing of personal data

The data controller of personal data is BeC Srl (“Company”), with headquarters in Forlì, Via Monteverdi 47-51, VAT number 01010370409 in the person of the legal representative Dr. Anna Muscoso, who can be contacted at the e-mail address anna .muscoso@bec-natura.com, or at the following telephone number 0543 473185.

 

• Data processed

The Data Controller collects personal data directly or through third parties.

The data collected concerns:

- the user's identification data (name, surname, telephone and electronic numbers, addresses, including physical ones, residence, age)

- site usage data – statistics

- tracking data – cookies, pixels, IP addresses and other technologies

- preference data, profile, purchase type (including abandoned cart)

 

• Methods of collecting, processing and storing data

The data processed is provided by the user or collected automatically following navigation or use of the site.

 

The requested data is generally mandatory and failure to provide mandatory data could prevent the provision of the requested service. If the user fails to provide non-mandatory data, the site's services will still be available and usable.

The user assumes all responsibility for any communication and/or sharing of third party data through this site.

 

Personal data will be processed using both paper and computer archives (including portable devices) and in ways strictly necessary to fulfill the purposes indicated.

The owner adopts adequate security, technical and organizational measures, suitable to guarantee the data from unauthorized or illicit processing, from loss, diffusion and/or destruction, even accidental.

The treatments may be carried out directly by representatives or by third parties. By way of example and not exhaustively, the data may be collected by personnel from the marketing, commercial, legal or administrative offices or by service providers such as couriers, IT technicians, marketing and communication agencies, IT service providers, including in the cloud, as well as from the Shopify platform to which reference is made for its privacy policy and to the 4DEM service, an address management and email message sending service provided by Advision SrlU. The Data Controller will appoint the external representatives and managers with specific appointment documents. For further information in this regard, you can contact the Owner.

 

Personal data will be kept for the time necessary to achieve the purposes indicated and, therefore, for the time necessary for the execution of the contract and for the accounting-tax management of the data controller. For example, we retain transaction history so that you can review the purchases you make (and repeat orders if you wish) and the addresses indicated for shipping the products purchased.

In any case, retention for a further period necessary for the purposes of protection, including judicial, of the Company's rights is reserved.

The data collected for the pursuit of the owner's legitimate interest will be processed in relation to the satisfaction of this interest. More specific information in this regard can be requested from the Data Controller.

At the end of the retention period, the data will be deleted without prior communication to the interested party. Consequently, the rights of the interested parties deriving from the processing cannot be exercised.

 

• Place of treatment

The data is processed at the owner's operational offices and in any other place where the parties involved in the processing, in particular the company that manages the hosting, are located. For further information, please contact the Owner. The User's Personal Data may be transferred to a country other than the one in which the User is located and/or to a third country than the European Union.

 

• Purposes and legal bases

The data is processed in compliance with the conditions of lawfulness and indicated in correspondence with the specified purposes to provide the best browsing experience and satisfy the services requested by the user. The data is also collected to fulfill legal obligations and for the correct carrying out of business activities, to prevent the commission of offenses through the site. In particular, the purposes of collection and processing are the following:

Data categories	Purpose	Legal bases
Identification data , provided by completing the contact form for information, purchase or other requests, payment data	a) Establishment, management, termination of the commercial relationship; b) tax and accounting obligations, obligations deriving from other laws c) protection of Owner rights d) prevention of fraud and credit-related risks	a) art. 6, c. 2, letter. b) GDPR – contract execution or pre-contractual measures
		b) art. 6, c. 2, letter. c) GDPR – fulfillment of legal obligation to which the owner is subject
		c) art. 6, c. 2, letter. f) GDPR – legitimate interest
Email and other contact details	Commercial contacts with the customer – Direct marketing	art. 6, c. 2, letter a) GDPR – consent
	Newsletter - sending promotional, standardized and/or personalized communications based on information retrieved through the activation of profiling cookies and browsing experiences (abandoned cart, abandoned checkout, wishlist, sending of discounts after purchase, restock alert, welcome discount )
Site usage data – Tracking tool	Profiling for retargeting advertising - pixel installation of - FB or Google Tag Manager tracking - visual advertising (banners) on social platforms (Facebook + Instagram + YouTube Pinterest + linkedin + Tik Tok + whatsapp business) and/or within the sites of the Google Display Network
	Google Analytics (Google LCC) uses personal data for the purpose of examining the use of the application, to compile other data and to share it with other service providers. Furthermore, Google may use the data collected to personalize the ads of its advertising network
Other cookies	Browsing data in case of failed purchase - suggestions and customization to identify preferences and personalize the shopping experience on the BeC site	art. 6, c. 2, letter a) GDPR - consent -

 

The user can contact the Data Controller to obtain further information or clarifications regarding the processing carried out, the purposes and legal bases thereof.

 

• Data communication - subjects authorized to process

Your personal data may be communicated to:

• bodies, judicial or administrative authorities and other subjects for the fulfillment of legal obligations and for the execution of the contract, in particular the data will be transmitted to the Company's accountant for accounting processing
• employees and collaborators of the Data Controller, in their capacity as authorized data processing workers, so-called "data processors"
• third parties who carry out outsourced activities on behalf of the Data Controller, in their capacity as data controllers.

 

• Data dissemination and profiling

Your personal data may be processed using automated methods, including profiling, in order to perfect and personalize the commercial offer based on your personal tastes and needs, for sending advertising communications and for marketing activities. This is exclusively in the event that you have provided explicit consent, which can be freely revoked at any time.

Your data may be processed by companies that carry out product shipping/delivery services, sending newsletters, and companies that carry out maintenance services for IT services.

 

• Rights of the interested party

The Regulation recognizes the rights referred to in sections 2, 3 and 4 of chapter III of the Regulation itself, in particular, as an interested party you have the following rights:

• 7 Reg. – Revoke consent: the interested party has the right to revoke consent when it constitutes the legal basis of the processing
• 15 Reg. – right of access: obtain confirmation as to whether or not your personal data is being processed;
• Art . 16 Reg. – right of rectification, integration: request the rectification or integration of your personal data;
• 17 Reg. – right of cancellation: request the cancellation of your data in the cases provided for by the Regulation;
• 18 Reg. – right of limitation: obtain the limitation of the processing of your personal data;
• 20 Reg. - right to data portability : obtain that your personal data are transmitted to another data controller;
• 21 Reg. – right to object: object to the processing of your personal data; in particular when the legal basis of the processing is the legitimate interest of the owner, or the processing is carried out for direct marketing purposes
• 22 Reg. – right to oppose automated processing: obtain not to be subjected to a decision based solely on automated processing, including profiling, in the cases provided for by the Regulation;
• 77 Reg. – right to lodge a complaint : lodge a complaint with a supervisory authority (Authority for the protection of personal data – www.garanteprivacy.it)

In particular, if you do not want to receive emails or other communications from us, you can review your preferences and unsubscribe, equally if you do not want to see interest-based advertising. You can also give or revoke your consent relating to third-party advertising cookies and you can decide that automated emails prepared based on your browsing activity are not sent to you, by writing to the data controller

• Exercise of rights by the interested party

For the purposes of exercising the rights recognized to the interested party, it is possible to contact the Data Controller indicated in this policy.

 

• Miscellaneous: any further information in relation to the processing of personal data may be requested at any time from the Data Controller using the contact details.

 

Terms and Definitions

For the purposes of this privacy policy the terms used assume the definitions specified below

Personal data: any information that makes a natural person identifiable either directly or indirectly.

Usage data: any information collected by the Owner through the use or navigation of the site or through third-party applications integrated with it. By way of example, the following may be collected: IP addresses, domain names of user devices, URI addresses, times of requests, methods of forwarding requests to the server, size of response files, response code from the server ( successful, error, etc.) the country of origin, the characteristics of the browser and operating system used by the user, the temporal connotations of the visit (for example the time spent on each page, the cart) and the details relating to the itinerary followed within the site, with particular reference to the sequence of pages consulted, the parameters relating to the operating system and the User's IT environment.

USER: the natural person who browses and uses the site. Usually coincides with the person of the interested party.

INTERESTED PARTY: the natural person to whom the personal data processed by the Data Controller refers.

DATA PROCESSOR: The natural or legal person who processes the data on behalf of the owner in compliance with this privacy policy.

DATA CONTROLLER: The natural or legal person who establishes the means and purposes of the processing. Usually the owner of the site coincides with the data controller.

COOKIES: Processing tools consisting of portions of text stored by the user's browser

TREATMENT TOOL: Tools that track users by collecting or saving information on users' devices.