PRIVACY & COOKIES POLICY
INFORMATION ON THE PROCESSING OF PERSONAL DATA OF USERS OF THE WEB SITE ACCORDING TO ART. 13 OF D.LGS. N. 196/2003 AND OF ART. 13 OF EU REGULATION 679/2016
This document was drafted pursuant to art. 13 of Legislative Decree no. 196/2003 (hereinafter, “Privacy Code”) and of EU Regulation 2016/679 (hereafter: “Regulations”) in order to let you know our privacy policy, to understand how Yours Personal information is handled when you use our site ( www.bullski.com , hereinafter “Site”) and, where appropriate, to consent to the processing of your personal data expressed and aware. The information and data provided by you or otherwise acquired in connection with the use and navigation services and access to the reserved area of the Site (hereinafter “Services”), will be processed in compliance with the provisions of the Regulations and obligations of confidentiality that inspire the activity of Igor Bullski srl.
According to the rules of the Privacy Code and the Rules, the treatments carried out by the Igor Bullski srl will be based on the principles of lawfulness, fairness, transparency, limitation of purpose and retention, minimization of data, accuracy, integrity and confidentiality, as well as the principle of accountability pursuant to art. 5 of the Rules.
Data controller
Bullski srl, with registered office in Via Brennero, 353, 51024 Abetone Cutigliano (PT), Italy, (hereinafter “BULLSKI” or “Holder”) is constantly committed to protect the online privacy of its users. We invite you, therefore, before communicating any personal data to the Owner, to read carefully this information because it contains important information on the protection of your personal data.
Personal data object of the treatment
We inform you that the personal data subject to processing may consist of an identifier such as your name and surname, company email, company of belonging and role held within the same, possibly telephone number, VAT number, social security number, a number identification, data related to the address of residence and / or domicile, to an online ID, depending on the type of services requested.
Furthermore, the personal data processed through the Website are as follows:
1. Navigation data
The computer systems and software procedures used to operate the Website automatically acquire, during normal operation, some information concerning web browsing, the transmission of which is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified data subjects but which by their nature could, through associations and processing with data held by third parties, allow users or navigators to be identified. This category includes information on IP addresses, domain names of computers used by users connecting to the site, addresses in URI (Uniform Resource Identifier) notation of the requested resources, time of request, the method used in submitting the request to the web server, the file size obtained in response, numerical code indicating the status of the response given by the web server (success, error, etc.) and other parameters related to the operating system and the user’s computer environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of this Website and to check its correct functioning, to identify anomalies and / or abuses, and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site or third parties.
Specific information is given in the sections of the website set up for particular services, also accessible after registration, where personal data are requested from the site user.
2. The Cookies
What are cookies
Browsing this website involves the receipt of cookies, short strings of text that the websites visited send to the user’s browser (ie the program used to navigate such as, for example, Chrome, Explorer, Mozilla, etc.) where they are stored before being re-transmitted to the same websites during subsequent visits. During navigation on a site, the user can also receive on his computer cookies from websites or web servers other than the one he / she is visiting (so-called “third-party” cookies).
It is possible to distinguish technical cookies, which allow the carrying out of activities closely related to the operation of the site and can be used freely, and profiling cookies, used to make the user view advertisements in line with the preferences expressed by the same in the course navigation and for which it is necessary to acquire the user’s consent.
Through this site the user’s browser can receive technical cookies and third-party profiling cookies.
Technical cookies
In particular, technical navigation cookies are used, in order to store navigation preferences and improve navigation on the site, and analytical cookies (specifically Google Analytics provided by Google Inc. – later “Google”), which collect, in the form anonymous and aggregated, statistical information on the browsing methods of users (for example, number of pages visited and accesses, time spent on the site), useful for understanding in which aspects the website can be improved.
For more information about the processing of data by Google through the Google Analytics service, the user can visit the web page http://www.google.com/analytics/learn/privacy.html , and view the privacy policy of Google on the web pagehttp://www.google.com/intl/it/policies/privacy/
The use of these cookies does not require the acquisition of the user’s consent, who can still decide to disable their use on their browser. In addition, Google Analytics cookies can be specifically rejected using the appropriate tool provided by Google (seehttps://support.google.com/analytics/answer/181881?hl=it&ref_topic=2919631&vid=1-635775549103353382-1182928194 ) .
Third-party profiling cookies
Through some pages of this Website you can also receive in your browser even third-party profiling cookies, for example to allow the display of content hosted on external platforms and interact with them (eg YouTube) or connected to the Google AdWords service (aimed at displaying to the user, in the course of navigation, announcements based on the websites previously visited). For this reason, when accessing these pages is proposed a banner aimed at informing the user and allowing him to give his consent to receive these cookies, closing the banner or clicking on any other element of the page, outside the banner same. BULLSKI does not have access to the information collected from third-party cookies, which are used independently by the operators of the aforementioned services. For more information on how to process the data collected through these cookies users are invited to consult the information notes on privacy provided by the parties who make available the services in question. In particular, the third-party cookies used on the site are as follows:
Facebook: https://www.facebook.com/privacy
The user can disable the cookies affixed by the third parties listed above by clicking on the links indicated. If there are no links, you can refer to the following site www.youronlinechoices.com/it/ which allows you to manage user preferences in terms of cookies.
How to manage cookies in your browser
The user can set his browser in such a way as to be warned of the presence of cookies and decide whether to accept a specific cookie or to automatically refuse all cookies. Here are the references to how to manage the activation / deactivation of cookies for the main browsers:
Google Chrome: https://support.google.com/accounts/answer/61416?hl=en
Apple Safari: https://support.apple.com/kb/PH19214?locale=it_IT
Microsoft Internet Explorer and Microsoft Edge: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
However, if you decide to refuse cookies, it is possible that some interactive features offered by the Site may not be used, in whole or in part.
| Cookie | Duration | Description |
|---|---|---|
| ASP.NET_SessionId | session | Issued by Microsoft’s ASP.NET Application, this cookie stores session data during a user’s website visit. |
| AWSALB | 7 days | AWSALB is a cookie generated by the Application load balancer in the Amazon Web Services. It works slightly different from AWSELB. |
| AWSALBCORS | 7 days | This cookie is managed by Amazon Web Services and is used for load balancing. |
| c | 20 years | This cookie is set by Rubicon Project to control synchronization of user identification and exchange of user data between various ad services. |
| CONSENT | 2 years | YouTube sets this cookie via embedded youtube-videos and registers anonymous statistical data. |
| cookielawinfo-checkbox-advertisement | 1 year | Set by the GDPR Cookie Consent plugin, this cookie is used to record the user consent for the cookies in the “Advertisement” category . |
| cookielawinfo-checkbox-analytics | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category “Analytics”. |
| cookielawinfo-checkbox-functional | 11 months | The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category “Functional”. |
| cookielawinfo-checkbox-necessary | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category “Necessary”. |
| cookielawinfo-checkbox-others | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category “Other. |
| cookielawinfo-checkbox-performance | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category “Performance”. |
| fr | 3 months | Facebook sets this cookie to show relevant advertisements to users by tracking user behaviour across the web, on sites that have Facebook pixel or Facebook social plugin. |
| KHcl0EuY7AKSMgfvHl7J5E7hPtK | 20 years | This cookie is used to run the purchase facilities offered on our site through PayPal. |
| l7_az | 30 minutes | This cookie is necessary for the PayPal login-function on the website. |
| sc_f | 5 years | This cookie is required for the PayPal login function on the website. |
| ts | 3 years | PayPal sets this cookie to enable secure transactions through PayPal. |
| tsrce | 3 days | This cookie is set by the provider PayPal. This cookie is used to enable the PayPal payment service in the website. |
| ts_c | 3 years | This cookie is provided by PayPal when a website is in association with PayPal payment function. This cookie is used to make safe payment through PayPal. |
| viewed_cookie_policy | 11 months | The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data. |
| VISITOR_INFO1_LIVE | 5 months 27 days | A cookie set by YouTube to measure bandwidth that determines whether the user gets the new or old player interface. |
| woocommerce_recently_viewed | session | Woocommerce sets this cookie to display recent product views by the user. |
| x-cdn | session | This cookie is set by PayPal to enable payments on this website. |
| YSC | session | YSC cookie is set by Youtube and is used to track the views of embedded videos on Youtube pages. |
| yt.innertube::nextId | never | This cookie, set by YouTube, registers a unique ID to store data on what videos from YouTube the user has seen. |
| yt.innertube::requests | never | This cookie, set by YouTube, registers a unique ID to store data on what videos from YouTube the user has seen. |
| _fbp | 3 months | This cookie is set by Facebook to display advertisements when either on Facebook or on a digital platform powered by Facebook advertising, after visiting the website. |
| _ga | 2 years | The _ga cookie, installed by Google Analytics, calculates visitor, session and campaign data and also keeps track of site usage for the site’s analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognize unique visitors. |
| _gat_gtag_UA_16182981_8 | 1 minute | Set by Google to distinguish users. |
| _gid | 1 day | Installed by Google Analytics, _gid cookie stores information on how visitors use a website, while also creating an analytics report of the website’s performance. Some of the data that are collected include the number of visitors, their source, and the pages they visit anonymously. |
| _swa_u | 2 years 8 months 26 days | Records data on the behavior of visitors on the website. This information is used for internal analysis and website optimization. |
3. Purposes of the treatment
Your personal data will be processed by the Data Controller for the following purposes:
3.1 allow the navigation of the Site and the provision of services made available by the Owner, including the management of the security of the Site;
3.2 fulfill any obligations under applicable laws, regulations or community legislation, or satisfy requests from authorities;
3.3 for the processing of statistics, without it being possible to trace your identity;
3.4 send newsletters and promotional communications for the purpose of direct marketing through email, sms, mms, push notifications, fax, paper mail, telephone with operator, of products promoted by BULLSKI;
3.5 for the purpose of carrying out profiling activities, by collecting and analyzing information on selections and choices made within the Site, in order to send personalized offers on other products and / or services offered by BULLSKI;
3.6 to communicate / transfer personal data to third-party companies such as partner companies for sending newsletters and promotional communications for marketing purposes via email, sms, mms, push notifications, fax, paper mail, telephone with operator.
Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.
4. Legal basis and mandatory or optional nature of the processing
The legal basis for processing personal data for the purposes set out in section 3.1 is art. 6.1.b) of the Regulations as the processing is necessary for the provision of services or for the response of requests by the interested party. The legal basis for processing personal data for the purposes referred to in section 3.2 is, instead, art. 6.1.c) of the Rules (“the processing is necessary to fulfill a legal obligation to which the data controller is subject”). The provision of personal data for these purposes is optional, but failure to provide it would make it impossible to activate the services requested.
Instead, it is specified that the treatment referred to in section 3.3 is not performed on the basis of personal data and, therefore, can be freely performed by the Data Controller.
The legal basis for processing personal data for the purposes set out in sections 3.4, 3.5 and 3.6 is art. 6.1.a) of the Rules as the treatments are based on consent. The latter is optional and is free to revoke it at any time without any consequence (except for the fact that it will no longer receive marketing communications and / or profiling activities will no longer be carried out). The consent previously granted can be revoked following the instructions provided in Paragraph 8 of this statement.
For processing carried out for the purpose of sending direct advertising material or direct sales or for carrying out market research or commercial communications in relation to products or services of the Data Controller similar to those used by you, BULLSKI may use e-mail addresses pursuant to and within the limits permitted by art. 130, paragraph 4 of the Code and the provision of the Authority for the protection of personal data of June 19, 2008 even in the absence of explicit consent. The legal basis for the processing of your data for this purpose is art. 6, paragraph 1, lett. f) of the Regulations. The possibility of opposing this treatment at any time, initially or during subsequent communications, in an easy and free way, even by writing to the addresses indicated in the “Contact” section of this information, and to obtain an immediate confirmation that confirms the interruption of this treatment (Article 15 of the Rules).
5. Recipients of personal data
Your personal data may be shared, for the purposes set out in section 3 of this statement, with:
5.1. subjects that typically act as data controllers pursuant to arts. 29 of the Code and 28 of the Regulations, that is, subjects that cooperate with the Data Controller for the pursuit of the aforementioned purposes, including those delegated to perform technical maintenance activities (collectively “Recipients”); the list of data processors who process data can be requested from the Data Controller by writing to the addresses indicated in the “Contact” section of this statement;
5.2. subjects, entities or authorities to whom it is mandatory to communicate your personal data in accordance with the provisions of law or orders of the authorities;
5.3. persons authorized by the Owner, pursuant to articles 30 of the Code and 29 of the Regulations, to the processing of personal data necessary to carry out activities strictly related to the provision of services, which are committed to confidentiality or otherwise have an appropriate legal obligation of confidentiality.
The updated list of subjects that may process your personal data, as data controllers is available, by sending a written request to the Data Controller at the addresses indicated in the “Contact” section of this statement.
6. Transfer of personal data
With regards to any transfer of Data to Third Countries, the Data Controller informs that the processing will be carried out according to one of the methods permitted by applicable law, such as the consent of the interested party, the adoption of Standard Clauses approved by the European Commission, the selection of subjects adhering to international programs for the free circulation of data (eg EU-USA Privacy Shield) or operating in countries considered safe by the European Commission. It is possible to have more information, upon request, from the Owner to the above contacts.
7. Data retention
Personal data processed for the purposes set out in section 3.1 will be kept for the time strictly necessary to achieve those same purposes. In any case, since these are treatments carried out for the provision of services, the Data Controller will keep personal data for the period of time envisaged and permitted by Italian law to protect its own interests (Article 2946 of the Italian Civil Code).
Personal data processed for the purposes set out in section 3.2 will be retained until the time required by the specific obligation or applicable law.
Further information about the data retention period and the criteria used to determine this period may be requested by sending a written request to the Data Controller at the addresses indicated in the “Contact” section of this statement.
In any case, the possibility is reserved for the Owner to keep your personal data for the period of time foreseen and allowed by Italian law to protect his own interests (Article 2947 of the Civil Code).
8. Rights of the interested parties
Pursuant to articles 7 of the Code and 15 et seq. of the Rules, you have the right to ask BULLSKI, at any time, access to your personal data, rectification or cancellation of the same or to oppose their treatment, request the limitation of processing in the cases provided for by art. 18 of the Regulations, as well as to obtain, in a structured format, in common use and readable by automatic device, the data concerning it, in the cases provided for by art. 20 of the Rules.
Requests should be sent in writing to the Data Controller at the addresses indicated in the “Contact” section of this statement.
In any case, he is always entitled to propose a complaint to the competent Supervisory Authority (Guarantor for the Protection of Personal Data), pursuant to art. 77 of the Regulations, if you believe that the processing of your personal data is contrary to the law in force.
9. Changes
The Owner reserves the right to modify or simply update its content, in part or completely, also due to changes in the applicable legislation. The Owner therefore invites you to regularly visit this section to take cognizance of the most recent and updated version of this information in order to be always updated on the data collected and on the use that makes it BULLSKI.
10. Contacts
To exercise the above rights or for any other request, please write to the Data Controller using the contact details indicated in the “Contact” section preferably inserting the words “Request exercise of privacy rights” in the communication object.
Document updated to 24 May 2018
