This document describes the management methods of the Berista.com site (Site) with reference to the processing of personal data of the users who consult it.
It is an information notice pursuant to art. 13 of EU Reg. 679/2016, so-called Code regarding the protection of personal data ("GDPR"), to all those who interact with the web services offered by the Company Berista BV, accessible electronically starting from the home page of the site available at the following address: https://berista.com/
The information is provided only for the website and not for other websites that may be consulted by the user via links.

1. The owner of the data processing
The owner of the aforementioned treatment is Berista B.V. Baak van Petten 42, Amersfoort (Netherlands), e-mail address martinaghisalberti@berista.com ("Owner").

2. The manager
The Data Controller has been designated as the data processor pursuant to Article 29 of the Privacy Code, as he is in charge of the management of this site in the part relating to relations with users.

3. Type of data collected
The Personal Data collected, independently and through third parties, are: email, cookies, usage data, name, surname and city.
Any other Personal Data collected may be indicated in other sections of this privacy policy or through information texts displayed at the same time as the data is collected.
Personal Data can be entered voluntarily by the User, or collected automatically while browsing the Site.
Any use of Cookies - or other tracking tools - by this Site or by the owners of third party services used by this Site, unless otherwise specified, has the purpose of identifying the User and recording their preferences for strictly limited purposes. related to the provision of the service requested by the User.
Failure by the User to provide certain Personal Data may prevent this Site from providing its services.
The User assumes responsibility for the Personal Data of third parties published or shared through this Site and guarantees to have the right to communicate or disseminate them, freeing the Owner from any liability to third parties.

3.1. Navigation data
The computer systems and software procedures used to operate this Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site: except for this possibility, the data on web contacts do not currently persist for more than seven days.

3.2 Cookies
Cookies are small text files that the Site sends to the user's terminal (usually the browser), where they are stored to make navigation easier or to be retransmitted to the Site during the next visit by the same user. On the Site, the Owner makes use of so-called technical session cookies (which are not stored permanently on the user's computer and disappear when the browser is closed) which are strictly limited to the transmission of these session identifiers (consisting of random numbers generated by the server) necessary to allow safe and efficient exploration of the Site. The so-called session cookies used on the Site avoid the use of other IT techniques that are potentially prejudicial to the confidentiality of users' browsing and do not allow the acquisition of personal data user identifiers. The Data Controller does not use cookies to transmit information of a personal nature, nor does it use the so-called c.d. persistent cookies of any kind, or systems for tracking users. On the Site there may be third-party cookies used from companies that provide advertisements, which the Owner does not control in any way. The treatment through cookies, other than the technical ones for which the current legislation requires to make this information but does not require the acquisition of prior consent, can be accepted or refused. Most browsers accept cookies automatically. To learn more about cookies, including how to reject and / or limit them, please refer to the links below:
• For Microsoft Internet Explorer: http://www.microsoft.com/info/cookies.html
• For Mozilla Firefox: http://support.mozilla.com/en-US/kb/Options+window++Privacy+panel
• http://www.allaboutcookies.org/cookies/

3.3 Data provided voluntarily by the user
In addition to such data, the Data Controller will process the information provided voluntarily by users from the contact form only to fulfill the user's request. The data subject to optional processing consist of the user's identification data (also understood as those of the legal representative or of the person with suitable powers to represent companies and / or entities in this initiative), in his e-mail address.

4. Method and place of processing of the collected data
The Data Controller adopts the appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data. Personal data are processed with manual computerized and automated systems for the time necessary to achieve the purposes for which they are collected.
In addition to the Data Controller, in some cases, categories of employees involved in the organization of the site (administrative, commercial, marketing, legal, system administrators) or external subjects (such as suppliers of technical services, postal couriers, hosting) may have access to the data. providers, IT companies, communication agencies) also appointed, if necessary, as Data Processors by the Data Controller.
The updated list of Managers can always be requested from the Data Controller. The Data Controller adopts specific security measures in order to guarantee the processing of data in compliance with the Privacy Code, with particular regard to preventing the loss of such data, illicit or incorrect use or unauthorized access to databases.

4.1. Legal basis of the processing
The Data Controller processes Personal Data relating to the User in the event that one of the following conditions arises:
• The User has given consent for one or more specific purposes. In some cases the Data Controller receives authorization to process Personal Data without a request for prior consent from the User or another of the legal bases specified below, as long as the User does not object ("opt -out ") to this treatment. However, this is not applicable if the processing of Personal Data is governed by European legislation on the protection of Personal Data;
• Processing is necessary:
⁃ The execution of a contract with the User and / or the execution of pre-contractual measures;
⁃ To fulfill a legal obligation to which the Data Controller is subject;
⁃ For the performance of a task of public interest or for the exercise of public authority vested in the Owner;
⁃ For the pursuit of the legitimate interest of the Data Controller or third parties.
It is always possible to ask the Data Controller to clarify the concrete legal basis relating to each treatment by specifying whether the treatment is based on the law and / or provided for by a contract.

4.2. Place
The Data are mainly processed in the operational headquarters of the Data Controller and in any other place where the parties involved in the processing are located. More information can be requested from the owner himself.
Furthermore, the User Data may be transferred to a country other than that in which the User is located; more information on the place of processing, the User can refer to the section on the details on the processing of Personal Data.

It is the User's right to obtain information on the legal basis of the transfer of Data outside the European Union or to an international organization of public international law or constituted by two or more countries, such as the UN, as well as in about the security measures adopted by the Data Controller to protect the Data.

The User can check whether one of the transfers described above takes place by analyzing the part of this document where the details on the processing of Personal Data are described or request information from the Data Controller.

4.3. Retention period
The data is stored for the time required by the purposes for which it was collected.

It should be noted that the Personal Data collected for:
• Purposes related to the execution of a contract between the Owner and the User will be kept until the moment in which the execution of this contract is completed;
• Purposes attributable to the legitimate interest of the Data Controller will be retained until this interest is satisfied. The User can obtain further information regarding the legitimate interest pursued by the Owner in the relevant sections of this document or by contacting the Owner.

For processing based on the User's consent, the Data Controller may keep the Personal Data longer until such consent is revoked. In the case of legislative constraints or by order of an authority, the Data Controller will be authorized to keep Personal Data for a longer period.

Personal Data will be deleted at the end of the retention period consequently, after this term, the right of access, cancellation, rectification and the right to data portability can no longer be exercised.

6. Purpose of the processing of the collected data
User data is collected to allow the Owner to provide its services for the following purposes:
• Provide the Service;
• Fulfill legal obligations;
• Respond to requests or enforcement actions;
• Protect one's rights and interests (or those of Users or third parties);
• Identify any malicious or fraudulent activities;
• Contact the user;
• View content from external platforms;
• SPAM protection.

Detailed information on the purposes of the processing and on the Personal Data processed for each purpose, please refer to the following section.

6.1. Details on the processing of collected data
Personal Data is collected for the following purposes and using the following services:
Contact the user:
Mailing List or Newsletter: by registering with the mailing list or newsletter, the User's email address is automatically added to a list of contacts to which email messages containing information, including commercial and promotional information, relating to the to this to this application. The User's email address could also be added to this list as a result of registering with this application or after making a purchase. Personal data collected: name, surname, email and city.
Contact form: the User, by filling in the contact form with his own data, consents to their use to respond to requests for information, quotes, or any other nature indicated by the form header. Personal data collected: surname, name, email.
Management of support and contact requests: this type of service allows this application to manage support and contact requests received via email or through other tools, such as the contact form. The personal data processed depend on the information provided by the User within the messages and the tool used for communication.
Address management and sending of email messages: this type of service allows you to manage a database of email contacts, telephone contacts or contacts of any other type, used to communicate with the User. These services may also allow the collection of data relating to the date and time the messages are displayed by the User, as well as the User's interaction with them, such as information on clicks on links inserted in messages.
Interactions with social networks and external platforms: this type of services allow you to make interactions with social networks, or other external platforms, directly from the pages of this application. The interactions and information acquired by this application are in any case subject to the user's privacy settings relating to each social network. In the event that an interaction service with social networks is installed, it is possible that, even if users do not use the service, it collects traffic data relating to the pages in which it is installed:
• Like button and Facebook social widgets (Facebook Inc.): interaction service with Facebook social networks, provided by Facebook Inc. Personal data collected: cookies and usage data. Place of processing: USA - Privacy Policy;
• Tweet button and Twitter social widgets (Twitter): interaction service with the Twitter social network, provided by Twitter Inc. Personal data collected: cookies and usage data. Place of processing: USA - Privacy Policy;
• “Pin it” button and Pinterest social widgets (Pinterest): interaction service with the Pinterest platform, provided by Pinterest Inc. Personal data collected: cookies and usage data. Place of processing: USA - Privacy Policy.
- Traffic optimization and distribution;
SPAM protection: this type of service analyzes the traffic of this Website, potentially containing Users' Personal Data, in order to filter it from parts of traffic, messages i and content recognized as SPAM:
⁃ Google reCAPTCHA: SPAM protection service provided by Google Inc. Use of the reCAPTCHA system is subject to Google's privacy policy and terms of use. Personal Data processed: Cookies; Usage data. Place of processing: United States - Privacy Policy; Ireland - Privacy Policy.
Backup saving and management: this type of service allows the saving and management of backups of this application on eternal servers managed by the service provider itself. These backups may include both the source code and its contents and the data provided to this application by the user;
Statistics: The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to keep track of User behavior:
⁃ Google Analytics: web analysis service provided by Google Inc. ("Google"). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports and sharing them with other services developed by Google. Google may use the Personal Data to contextualize and personalize the advertisements of its own advertising network. Personal Data processed: Cookies; Usage data. Place of processing: United States - Privacy Policy - Opt Out; Ireland - Privacy Policy.
Viewing content from external platforms: this type of service allows you to view content hosted on external platforms directly from the pages of this application and interact with them. In the event that a service of this type is installed, it is possible that, even if users do not use the service, it collects traffic data relating to the pages in which it is installed.
⁃ Youtube (Google INC): Youtube is a video content viewing service managed by Google, INC that allows this application to integrate such content within its pages. Personal data collected: Cookies and Usage data. Place of processing: USA - Privacy Policy;
⁃ Google Maps Widget: Google Maps is a map viewing service managed by Google Inc. that allows this Website to
⁃ integrate such contents within their pages. Personal Data processed: Cookies; Usage data. Place of processing: United States - Privacy Policy; Ireland - Privacy Policy.

6.2. Cookie Policy
This application uses cookies: To learn more and for detailed information, you can consult the Cookie Policy.

7. Rights of the interested party
The user has the right at any time to obtain confirmation of the existence or not of personal data concerning him, even if not yet registered, and to receive their communication in an intelligible form.
In particular, the user has the right to:
• Withdraw consent at any time. The User can revoke the consent to the processing of their Personal Data previously expressed;
• Oppose the processing of their data. The user can oppose the processing of their data when it occurs on a legal basis other than consent. Further details on the right to object are indicated in the section below;
• Access their data. The User has the right to obtain information on the Data processed by the Data Controller, on certain aspects of the processing and to receive a copy of the Data processed;
• Verify and ask for rectification. The User can verify the correctness of their Data and request its updating or correction;
• Obtain the limitation of the processing. When certain conditions are met, the User may request the limitation of the processing of their Data. In this case, the Data Controller will not process the Data for any other purpose than their conservation;
• Obtain the cancellation or removal of their Personal Data. When certain conditions are met, the User can request the cancellation of their Data by the Owner;
• Receive your data or have it transferred to another owner. The User has the right to receive his / her Data in a structured format, commonly used and readable by an automatic device and, where technically feasible, to obtain its unhindered transfer to another owner. This provision is applicable when the Data is processed with automated tools and the processing is based on the User's consent, on a contract to which the User is a party or on contractual measures connected to it;
• Submit a complaint. The User can lodge a complaint with the competent personal data protection supervisory authority or take legal action.

 

7.1. Details on the right to object
In the case of processing Personal Data relating to the public interest, in the exercise of public authority vested in the Owner or to pursue a legitimate interest of the Owner, Users have no right to oppose the processing for reasons connected to their particular situation.
For those data that are processed for direct marketing purposes, the User can oppose the processing without providing any reasons. Information on this section can be found in this document.
The user has the right to object, in whole or in part, for legitimate reasons, to the processing of personal data concerning him, even if pertinent to the purpose of the collection.

7.2. How to exercise your rights
To exercise the User's rights, Users can direct a request to the contact details of the Owner indicated in this document. Requests are filed free of charge and processed by the Data Controller as soon as possible, in any case within one month.

8. Communication of data
The personal data collected on the Site will not be disclosed, sold or transferred to third parties, except in the cases provided for by law. In any case, the communication of data to companies expressly appointed to perform certain services in the context of the activity carried out by the Data Controller and / or, in general, in his favor, which will operate as independent owners and / or managers, is reserved. , as well as the communication and / or dissemination of data requested, in accordance with the law, by police forces, judicial authorities, information and security organizations or other public entities for defense or state security or prevention purposes , detection or repression of crimes.

9. Further information on the treatment

9.1. Defense in court
The User's Personal Data may be used for defense by the Owner in court or in the stages leading to its eventual establishment, from abuses in the use of the same or related services by the user. The User declares to be aware that the Data Controller may be required to disclose the Data at the request of the public authorities.

9.2. Specific information
At the request of the User, in addition to the information contained in this privacy policy, this application may provide the User with additional and contextual information regarding specific services, or the collection and processing of Personal Data.

9.3. System log and maintenance
For needs related to operation and maintenance, this Application and any third party services used by it may collect system logs, which are files that record the interactions and which may also contain Personal Data, such as the User IP address.

9.4. Information not contained in this policy
More information in relation to the processing of Personal Data may be requested from the Data Controller at any time using the contact information.

9.5. Response to "Do Not Track" requests
This Website does not support "Do Not Track" requests. To find out if any third-party services used support them, the User is invited to consult the respective privacy policies.

9.6. Changes
This document constitutes the privacy policy of the Site which will be subject over time to possible changes and / or updates that will be notified to the User on this page, if technically and legally feasible, by sending a notice to Users through one of the contact details of which it is in possession of. Please consult this page frequently, referring to the date of the last modification indicated at the bottom.

This privacy policy comes into force on April 12, 2021.