Information on the processing of personal data and cookies on the website
1. Introduction
In compliance with the obligations arising from Regulation (EU) no. 2016/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter, the “Regulation” or “GDPR”) and current national legislation, including Legislative Decree 196/2003 (Privacy Code, as amended by Legislative Decree 101/2018), LES BAS SRL respects and protects the personal data of visitors and users (hereinafter, the “Data Subjects”) of the website www.pbfservizi.it/ (hereinafter, the “Website”).
This document provides information on the processing of personal data collected by LES BAS SRL through the Website and, therefore, constitutes information to the Interested Parties pursuant to the aforementioned regulations and does not apply to personal data collected by LES BAS SRL through channels other than the Website.
In accordance with the provisions of the Regulation, the processing of the personal data of the interested parties is carried out in compliance with the principles of correctness, lawfulness, transparency and protection of confidentiality.
The Website contains links to other websites: this information does not concern such other websites, which may be consulted by the Interested Parties via specific links.
These websites may contain information on the processing of personal data that differs, in whole or in part, from this information.
LES BAS SRL therefore invites interested parties to carefully read the privacy policies of each other site to which they connect, especially before entering any personal information.
2. Identity and contact details of the data controller
The data controller is LES BAS SRL (hereinafter, “LES BAS SRL” or the “Data Controller”), VAT number 01452090069, with registered office in VIA TRATTATO DI MAASTRICH 12 15067 – Novi Ligure (AL) (tel: +39 3484121426; email lesbas@pec.lesbas.com).
3. Types of data processed via the Website
The Data Controller, through the Website, may process the following data:
Data collected automatically – traffic and navigation data The computer systems and software procedures used to operate the Website acquire, during their normal operation, some personal data whose transmission is implicit in the use of internet communication protocols.
This category of data includes the IP addresses or domain names of the computers and terminals used by users, the type of browser, the name of the Internet Service Provider, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the date and time of visit to the Internet Site, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), the web page from which the user originated and the exit page and other parameters relating to the operating system and the user’s IT environment.
The Website does not intentionally collect data belonging to particular categories (e.g. health data, religious, political, trade union beliefs), unless specific informed consent is given.
4. Data communicated by the interested parties
The optional, explicit and voluntary sending of messages to the contact addresses of the Data Controller, as well as the compilation and forwarding of the contact forms on the Website, entail the acquisition of the sender’s contact data, necessary to respond, as well as all personal data included in the communications (such as, by way of example, name, surname, email address).
In any case, interested parties are required to provide truthful and precise data and to promptly inform the Data Controller of any subsequent changes.
5. Cookies and other tracking systems
The Website uses cookies and similar technologies. For information on the use of cookies, please refer to our Cookie Policy.
6. Purpose and legal basis of the processing
The Data Controller processes traffic and navigation data for the following purposes:
(a) manage, administer and improve the Website; check the correct functioning of the services offered;
(b) fulfill obligations established by law and/or regulations and/or orders of the Judicial Authority;
(c) prevent and/or detect fraudulent and/or harmful activities for the Website;
(d) carry out analyses for technical and/or commercial purposes; obtain statistical information on the use of the services (most visited pages, number of visitors per time slot or day, geographical areas of origin, etc.).
The processing of such data is necessary to be able to browse the Website.
The Data Controller processes the data communicated by the Interested Parties for the following purposes:
(e) respond to requests for assistance and, in general, to any questions and/or requests made by users;
(f) send users administrative and/or technical support emails (for example, technical notes, reminders, updates, etc.);
(g) send by post and/or email newsletters, commercial communications and/or advertising material on products and/or services offered by the Data Controller.
The processing of data communicated by the interested parties for the purposes indicated above requires the consent of the interested parties.
This consent is always optional but, failing this, LES BAS SRL will not be able to process the data collected for the aforementioned purposes.
7. Communication of data
The personal data collected may be communicated to supervisory bodies, judicial authorities as well as to all subjects to whom communication is mandatory by law and/or necessary for the fulfillment of the purposes described above.
8. Methods of processing of personal data collected and retention period
The data collected may be subjected to both paper and electronic and/or automated processing. In any case, the Data Controller will process the personal data collected for the time necessary to fulfill the purposes set out in this information and, in any case, for a period not exceeding that required by current legislation (including the legislation on tax).
The data will be stored for the time strictly necessary for the purposes for which they were collected, in compliance with the following terms:
- Browsing data: maximum 12 months;
- Data provided voluntarily: up to 10 years for legal or administrative obligations;
- Data for marketing purposes: until consent is revoked, and in any case no later than 24 months.
9. Possible transfer of personal data
The management and storage of data will take place on servers located within the European Union of the Data Controller and/or third-party companies appointed and duly nominated as Data Processors.
Currently the servers are located in Italy.
In any case, it is understood that the Data Controller, if necessary, will have the right to move the location of the servers to Italy and/or the European Union and/or non-EU countries. In this case, the Data Controller hereby ensures that the transfer of data outside the EU will take place in compliance with the applicable legal provisions by stipulating, if necessary, agreements that guarantee an adequate level of protection and/or by adopting the standard contractual clauses provided by the European Commission.
10. Security measures
The Data Controller processes the data of the interested parties in a lawful and correct manner, adopting appropriate security measures aimed at preventing unauthorized access, disclosure, modification or unauthorized destruction of the data, as well as illicit uses of the data.
The processing is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the purposes indicated, and the data is stored and stored in secure structures with limitations on access and personnel verification.
Access to information is strictly limited to authorized personnel. The Website is constantly monitored for any security breaches. In addition to the Data Controller, in some cases, categories of persons involved in the organization of the Website (administrative, commercial, marketing, legal, system administrators) or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communications agencies) may have access to the data, who will act on the basis of specific instructions provided by the Data Controller. In any case, the Data Controller invites the Interested Parties to adopt suitable protections and/or precautions against unauthorized access to their reserved area and/or to their computer.
11. Rights of interested parties
In compliance with the provisions of Chapter III of the GDPR, the interested parties may exercise the rights provided therein at any time and in particular:
Right of access: obtain from the Data Controller confirmation as to whether or not Personal Data concerning them is being processed and, where that is the case, receive information on the purposes of the processing, the categories of Data involved, the recipients or categories of recipients to whom the Personal Data are or will be disclosed, the period for which the Personal Data will be stored or the criteria for determining that period (art. 15, GDPR);
Right to rectification: obtain from the Data Controller, without undue delay, the rectification of inaccurate Personal Data and the integration of incomplete Personal Data, also by providing an additional declaration (art. 16, GDPR);
Right to erasure: obtain from the Data Controller, without undue delay, the erasure of Personal Data, in the cases provided for by the GDPR (so-called “right to be forgotten” – art. 17, GDPR);
Right to limitation: obtain from the Data Controller the limitation of processing, in the cases provided for by the GDPR (art. 18, GDPR);
Right to portability: to receive from the Data Controller in a structured, commonly used and machine-readable format, the Personal Data concerning them provided to the data controller and to request to transmit them directly, or through the data controller if technically feasible, to another data controller (so-called “right to data portability” – art. 20 GDPR);
Right to object: to object, in the event of particular situations that concern them, to the processing of Data and% as well as to the processing of Personal Data for direct marketing purposes (art. 21 GDPR);
Right not to be subjected to decisions based solely on automated processing (art.22 GDPR).
The specific request can be submitted by contacting LES BAS SRL at any time by post to the address: LES BAS SRL VIA TRATTATO DI MAASTRICH 12 15067 – Novi Ligure (AL)); by email to the address lesbas@pec.lesbas.com.
With the same methods, the consents expressed in reference to this information can be revoked at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation.
Any communications and actions undertaken by LES BAS SRL in response to the exercise of the rights listed below will be carried out free of charge, except for the cases provided for by art. 12, paragraph 5, of the GDPR. Interested parties can also contact LES BAS SRL on the telephone number +39 3484121426 if they need information and/or clarifications regarding the processing of personal data carried out via the Website.
12. Right to complain
Interested parties who believe that the processing of their personal data carried out through the Website is in violation of the provisions of the Regulation have the right to lodge a complaint with the Guarantor, as provided for by art. 77 of the Regulation itself, or to take action in the appropriate judicial offices (art. 79 of the Regulation).
13. Protection of minors
The Data Controller does not allow minors under the age of 16 to use its services and, therefore, does not intentionally collect information relating to them.
Should it realize that it has collected data relating to people under the age of 16, in the absence of demonstrable parental consent, it will delete such data as quickly as possible.
14. Periodic updates to this privacy policy
This privacy policy is valid and effective from 25 May 2018 and may be subject to changes over time, also as a result of amendments or additions to current legislation.
Should the Data Controller make any significant changes to this document, he will inform the Interested Parties through the means he deems most suitable for the purpose (such as, by way of example and not limited to, publication on the home page of the Website and/or sending a newsletter to the email address provided by the Interested Parties).
This information was updated on May 25, 2018.
15. Content generated by artificial intelligence
Some content on the Website (including texts, images, graphic or multimedia elements) may be created, even partially, with the aid of generative artificial intelligence tools.
The use of these technologies occurs in compliance with the principles of correctness, transparency and reliability, with the aim of offering updated, coherent and interesting content for users.
Content created with artificial intelligence does not use personal information (such as name, email, preferences or browsing behavior) of people who visit the site.
Artificial intelligence does not analyze or study user behavior to create profiles, personalized advertising, or targeted content.
This policy was updated on May 6, 2025.