Legal

1.Who is the data controller?

The data controller, under Article 4(1)(7) of Regulation (EU) 2016/679 (“GDPR”), is ABBS S.r.l., with registered office in Cremona (CR), Via dell’Innovazione Digitale, 3, tax code and VAT number 01837680196, also referred to as “ABBS” or the “Controller”.

For any information about the processing of personal data or to exercise the rights provided by the GDPR, you can contact ABBS at info@abbs.one.

This notice describes how ABBS processes the personal data of users who browse and use the website www.abbs.one and its pages.

2.Who does this notice apply to?

This notice is addressed to natural persons who access and browse www.abbs.one or who use the features available on the site, including those who send a contact request or book a call with ABBS. These persons are referred to below as “Users” or “Visitors”.

3.What personal data is processed and for what purposes?

3.1.Browsing data

During normal operation of the site, the computer systems and software procedures used may automatically acquire some information whose transmission is implicit in the use of Internet communication protocols.

• IP address;
• domain names;
• browser type;
• operating system;
• device characteristics;
• date and time of the request;
• referring page and exit page;
• technical information relating to browsing.

This data may be processed to enable the site to function correctly, obtain technical information on its use, ensure system security and prevent fraudulent, abusive or harmful activity.

The legal basis for the processing is the Controller’s legitimate interest, under Article 6(1)(f) GDPR, consisting in ensuring the operation and security of the site and of its IT systems.

3.2.Data provided through contact forms

The site allows the User to contact ABBS and request information or a call through dedicated forms. When the User uses these features, ABBS may collect the data entered voluntarily in the form, such as, depending on the fields present:

• first and last name;
• email address;
• phone number;
• company or organisation;
• any information entered voluntarily by the User.

The data is used to:

• respond to the User’s request;
• contact the User and arrange a call, a demo or a meeting;
• provide information on the ABBS services requested by the User;
• handle any pre-contractual activities requested by the User.

The legal basis is the performance of pre-contractual measures taken at the data subject’s request, under Article 6(1)(b) GDPR.

Providing the data marked as required in the form is necessary for ABBS to handle the request. Without that data it may not be possible to contact the User or follow up on the request.

4.Cookies and similar technologies

The site may use cookies and other technical technologies necessary for the proper operation of the pages and of the services offered.

Any use of cookies or tools that are not strictly necessary, for example for statistical, analytics or marketing purposes, takes place in accordance with applicable law and, where required, with the User’s prior consent.

Detailed information on the cookie categories actually used, their purposes, retention periods and how to change or withdraw preferences is available in the Cookie Policy and through the preference-management system on the site, where applicable.

5.How data is processed and protected

Personal data is processed by electronic, IT and telematic means and, where necessary, by manual means. ABBS adopts appropriate technical and organisational measures to ensure a level of security appropriate to the risks of the processing, in accordance with applicable data-protection law.

Data is processed according to the principles of lawfulness, fairness, transparency, minimisation, accuracy, integrity and confidentiality.

6.How long is data kept?

Personal data is kept only for as long as necessary to pursue the purposes for which it was collected, without prejudice to any retention obligations provided by law.

• data relating to contact requests is kept for as long as needed to handle the request and any resulting pre-contractual or contractual relationship;
• technical and security data is kept for the period needed to ensure the security and proper operation of the systems, in line with the principles of necessity and proportionality;
• any data subject to administrative, tax, accounting or legal obligations is kept for the periods required by applicable law.

ABBS adopts procedures aimed at avoiding the retention of personal data for longer than necessary.

7.Who can process the data?

Personal data may be processed by ABBS staff and contractors who are duly authorised and instructed in relation to the processing activities carried out.

Data may also be processed, where necessary, by external parties that provide services functional to ABBS’s activity, including, by way of example:

• hosting and IT infrastructure providers;
• cloud service providers;
• IT maintenance and support providers;
• providers of tools for managing contact requests and communications;
• consultants and professionals;
• analytics providers or other digital services that may be used on the site.

Where required by law, these parties are appointed as processors under Article 28 GDPR. An updated list of processors can be requested from the Controller.

Data may also be disclosed to competent authorities when required by law or by a lawful order. Personal data will not be disseminated.

8.Transfer of data outside the European Economic Area

Some service providers used by ABBS may involve the processing or transfer of personal data to countries outside the European Economic Area.

In such cases, the transfer will take place in accordance with Articles 44 et seq. of the GDPR and on the basis of one of the instruments provided by applicable law, such as:

• an adequacy decision of the European Commission;
• the Standard Contractual Clauses approved by the European Commission;
• other instruments or safeguards provided by the GDPR.

For transfers to US organisations that adhere to the EU-U.S. Data Privacy Framework, the transfer may take place on the basis of the related adequacy decision of the European Commission, within the limits and conditions provided by applicable law.

Further information on any international transfers can be requested from the Controller.

9.What are the data subject’s rights?

Where provided by the GDPR, the User may exercise the following rights:

• access to their personal data under Article 15 GDPR;
• rectification of inaccurate data or completion of incomplete data under Article 16 GDPR;
• erasure of personal data in the cases provided by Article 17 GDPR;
• restriction of processing under Article 18 GDPR;
• data portability in the cases provided by Article 20 GDPR;
• objection to processing in the cases provided by Article 21 GDPR;
• withdrawal of consent, where processing is based on consent, under Article 7(3) GDPR.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise these rights or request information about the processing of personal data, write to info@abbs.one.

ABBS will respond to requests without undue delay and, as a rule, within one month of receipt. Where provided by the GDPR, this period may be extended by a further two months having regard to the complexity and number of the requests.

10.Right to lodge a complaint

A User who considers that the processing of their personal data infringes the GDPR has the right to lodge a complaint with the competent supervisory authority. In Italy, the competent authority is the Garante per la protezione dei dati personali. This is without prejudice to the possibility of using any other remedy provided by applicable law.

11.Changes to this notice

ABBS may update this notice from time to time, including as a result of legal, technical or service changes. The updated version will be published on www.abbs.one with an indication of the update date.