Legal

1.Who is the data controller?

The data controller, under Article 4(1)(7) of Regulation (EU) 2016/679 (“GDPR”), is ABBS S.r.l., with registered office in Cremona (CR), Via dell’Innovazione Digitale, 3, tax code and VAT number 01837680196, also referred to as “ABBS” or the “Controller”.

For any information about the processing of personal data or to exercise the rights provided by the GDPR, you can contact ABBS at info@abbs.one.

This notice describes how ABBS processes the personal data of users who browse and use the website www.abbs.one and its pages.

2.Who does this notice apply to?

This notice is addressed to natural persons who access and browse www.abbs.one or who use the features available on the site, including those who send a contact request or book a call with ABBS. These persons are referred to below as “Users” or “Visitors”.

3.What personal data is processed and for what purposes?

3.1.Browsing data

During normal operation of the site, the computer systems and software procedures used may automatically acquire some information whose transmission is implicit in the use of Internet communication protocols.

• IP address;
• domain names;
• browser type;
• operating system;
• device characteristics;
• date and time of the request;
• referring page and exit page;
• technical information relating to browsing.

This data may be processed to enable the site to function correctly, obtain technical information on its use, ensure system security and prevent fraudulent, abusive or harmful activity.

The legal basis for the processing is the Controller’s legitimate interest, under Article 6(1)(f) GDPR, consisting in ensuring the operation and security of the site and of its IT systems.

3.2.Data provided through contact forms

The site allows the User to contact ABBS and request information or a call through dedicated forms. When the User uses these features, ABBS may collect the data entered voluntarily in the form, such as, depending on the fields present:

• first and last name;
• email address;
• phone number;
• company or organisation;
• any information entered voluntarily by the User.

The data is used to:

• respond to the User’s request;
• contact the User and arrange a call, a demo or a meeting;
• provide information on the ABBS services requested by the User;
• handle any pre-contractual activities requested by the User.

The legal basis is the performance of pre-contractual measures taken at the data subject’s request, under Article 6(1)(b) GDPR.

Providing the data marked as required in the form is necessary for ABBS to handle the request. Without that data it may not be possible to contact the User or follow up on the request.

4.Cookies and similar technologies

The site may use cookies and other technical technologies necessary for the proper operation of the pages and of the services offered.

Any use of cookies or tools that are not strictly necessary, for example for statistical, analytics or marketing purposes, takes place in accordance with applicable law and, where required, with the User’s prior consent.

Detailed information on the cookie categories actually used, their purposes, retention periods and how to change or withdraw preferences is available in the Cookie Policy and through the preference-management system on the site, where applicable.

5.How data is processed and protected

Personal data is processed by electronic, IT and telematic means and, where necessary, by manual means. ABBS adopts appropriate technical and organisational measures to ensure a level of security appropriate to the risks of the processing, in accordance with applicable data-protection law.

Data is processed according to the principles of lawfulness, fairness, transparency, minimisation, accuracy, integrity and confidentiality.

6.How long is data kept?

Personal data is kept only for as long as necessary to pursue the purposes for which it was collected, without prejudice to any retention obligations provided by law.

• data relating to contact requests is kept for as long as needed to handle the request and any resulting pre-contractual or contractual relationship;
• technical and security data is kept for the period needed to ensure the security and proper operation of the systems, in line with the principles of necessity and proportionality;
• any data subject to administrative, tax, accounting or legal obligations is kept for the periods required by applicable law.

ABBS adopts procedures aimed at avoiding the retention of personal data for longer than necessary.

7.Who can process the data?

Personal data may be processed by ABBS staff and contractors who are duly authorised and instructed in relation to the processing activities carried out.

Data may also be processed, where necessary, by external parties that provide services functional to ABBS’s activity, including, by way of example:

• hosting and IT infrastructure providers;
• cloud service providers;
• IT maintenance and support providers;
• providers of tools for managing contact requests and communications;
• consultants and professionals;
• analytics providers or other digital services that may be used on the site.

Where required by law, these parties are appointed as processors under Article 28 GDPR. An updated list of processors can be requested from the Controller.

Data may also be disclosed to competent authorities when required by law or by a lawful order. Personal data will not be disseminated.

8.Transfer of data outside the European Economic Area

Some service providers used by ABBS may involve the processing or transfer of personal data to countries outside the European Economic Area.

In such cases, the transfer will take place in accordance with Articles 44 et seq. of the GDPR and on the basis of one of the instruments provided by applicable law, such as:

• an adequacy decision of the European Commission;
• the Standard Contractual Clauses approved by the European Commission;
• other instruments or safeguards provided by the GDPR.

For transfers to US organisations that adhere to the EU-U.S. Data Privacy Framework, the transfer may take place on the basis of the related adequacy decision of the European Commission, within the limits and conditions provided by applicable law.

Further information on any international transfers can be requested from the Controller.

9.What are the data subject’s rights?

Where provided by the GDPR, the User may exercise the following rights:

• access to their personal data under Article 15 GDPR;
• rectification of inaccurate data or completion of incomplete data under Article 16 GDPR;
• erasure of personal data in the cases provided by Article 17 GDPR;
• restriction of processing under Article 18 GDPR;
• data portability in the cases provided by Article 20 GDPR;
• objection to processing in the cases provided by Article 21 GDPR;
• withdrawal of consent, where processing is based on consent, under Article 7(3) GDPR.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise these rights or request information about the processing of personal data, write to info@abbs.one.

ABBS will respond to requests without undue delay and, as a rule, within one month of receipt. Where provided by the GDPR, this period may be extended by a further two months having regard to the complexity and number of the requests.

10.Right to lodge a complaint

A User who considers that the processing of their personal data infringes the GDPR has the right to lodge a complaint with the competent supervisory authority. In Italy, the competent authority is the Garante per la protezione dei dati personali. This is without prejudice to the possibility of using any other remedy provided by applicable law.

11.Changes to this notice

ABBS may update this notice from time to time, including as a result of legal, technical or service changes. The updated version will be published on www.abbs.one with an indication of the update date.

1.Who is the data controller?

The data controller, under Article 4(1)(7) of Regulation (EU) 2016/679 (“GDPR”), is ABBS S.r.l., with registered office in Cremona (CR), Via dell’Innovazione Digitale, 3, tax code and VAT number 01837680196, also referred to as “ABBS” or the “Controller”.

For information about the processing of personal data or to exercise the rights provided by the GDPR, write to info@abbs.one.

2.Who does this notice apply to?

This notice concerns natural persons who act on behalf of or within ABBS customer companies and organisations that use the application or platform made available by ABBS to manage and deliver their services. These persons are referred to below as the “Affiliated party”.

Managing the relationship with customer companies may involve processing identifying and contact data of the natural persons with whom ABBS interacts. Where the notice cannot be provided directly to all data subjects, the customer is invited to make it available to its relevant staff.

3.What data is processed and for what purposes?

ABBS may process ordinary personal data relating to the Affiliated party, such as:

• first and last name;
• professional contact details, such as email address and phone number;
• company or organisation and professional role;
• credentials and technical information needed to access and use the platform, where applicable;
• information that may be provided voluntarily in the course of the relationship with ABBS.

The data is processed for the following purposes:

• handling commercial, contractual and pre-contractual requests;
• activating, administering and providing the ABBS services purchased by the customer;
• managing accounts and enabling access to platform features;
• providing assistance, technical support, training and service communications;
• complying with administrative, accounting, tax and legal obligations;
• protecting system security, preventing abusive use and handling any disputes;
• sending, where permitted by applicable law, communications relating to services similar to those already purchased (so-called soft spam).

Depending on the purpose, the legal bases for processing are performance of a contract or of pre-contractual measures requested by the data subject (Article 6(1)(b) GDPR), compliance with legal obligations (Article 6(1)(c) GDPR) and the Controller’s legitimate interest (Article 6(1)(f) GDPR), in particular for system security, protection of its rights and, within the limits permitted, soft spam.

4.Is providing the data mandatory or optional?

Providing the data needed to manage the pre-contractual or contractual relationship, activate accounts and deliver the services is necessary. Failure to provide it may prevent ABBS from following up on the request, activating the service or properly fulfilling its obligations.

For processing based on legitimate interest, the data subject retains the right to object in the cases and according to the procedures provided by Article 21 GDPR.

5.How is data processed and stored?

Personal data is processed by electronic, IT and telematic means and, where necessary, by manual means, according to logic strictly related to the stated purposes and adopting appropriate technical and organisational measures to ensure security, integrity and confidentiality.

Data is kept for as long as needed to manage the customer relationship and deliver the services, as well as for any subsequent periods required by applicable law or needed to protect the Controller’s rights. Account data may be kept for the duration of the authorisation and thereafter for the period needed to close and manage the relationship, without prejudice to legal obligations.

6.Who can process the data and to whom may it be disclosed?

Processing is carried out by ABBS staff and contractors who are duly authorised and instructed. Where necessary, data may also be processed by external parties that provide services functional to ABBS’s activity, such as hosting and cloud infrastructure providers, IT services, maintenance and technical support, tools for communicating with and managing customers, as well as consultants and professionals.

Where required by law, these parties are appointed as processors under Article 28 GDPR. An updated list of processors can be requested from the Controller.

Data may also be disclosed to competent authorities when required by law or by a lawful order. Personal data is not disseminated.

7.Transfer of data outside the European Economic Area

If some providers used by ABBS involve the processing or transfer of personal data to countries outside the European Economic Area, such transfers will take place in accordance with Articles 44 et seq. of the GDPR, on the basis of an adequacy decision of the European Commission, the Standard Contractual Clauses or other instruments and safeguards provided by applicable law.

For transfers to US organisations that adhere to the EU-U.S. Data Privacy Framework, the transfer may take place on the basis of the related adequacy decision of the European Commission, within the applicable limits and conditions.

8.What are the data subject’s rights?

Where provided by the GDPR, the data subject may exercise the rights of:

• access to personal data (Article 15 GDPR);
• rectification of inaccurate data or completion of incomplete data (Article 16 GDPR);
• erasure of data in the cases provided (Article 17 GDPR);
• restriction of processing (Article 18 GDPR);
• data portability in the cases provided (Article 20 GDPR);
• objection to processing in the cases provided (Article 21 GDPR);
• withdrawal of consent, where processing is based on consent (Article 7(3) GDPR).

These rights may be exercised by writing to info@abbs.one. ABBS will respond without undue delay and, as a rule, within one month of receipt; where provided by the GDPR, the period may be extended by a further two months.

9.Right to lodge a complaint

A data subject who considers that the processing of their personal data infringes the GDPR may lodge a complaint with the competent supervisory authority. In Italy, the competent authority is the Garante per la protezione dei dati personali, without prejudice to any other remedy provided by applicable law.

10.Changes to this notice

ABBS may update this notice from time to time as a result of legal, technical, organisational or service changes. The updated version will be made available through the channels used to deliver the service.

1.Who is the data controller?

The data controller, under Article 4(1)(7) of Regulation (EU) 2016/679 (“GDPR”), is ABBS S.r.l., with registered office in Cremona (CR), Via dell’Innovazione Digitale, 3, tax code and VAT number 01837680196, also referred to as “ABBS” or the “Controller”.

For any information about the processing of personal data or to exercise the rights provided by the GDPR, you can contact ABBS at info@abbs.one.

2.Who does this notice apply to?

This notice is addressed to the natural person who uses the application made available by ABBS to access and use, for personal purposes, the services and features available through the application. That person is referred to below as the “User”.

3.What personal data is processed and for what purposes?

3.1.Identifying, contact and service-use data

ABBS may process ordinary personal data provided by the User or generated in the course of using the application, such as identification data, contact details and information needed to manage the requested services.

Such data may be processed to:

• enable registration, access and use of the application’s features;
• follow up on the User’s requests and enable use of the available services;
• manage activities connected with the contractual or pre-contractual relationship;
• comply with administrative, accounting, tax and other legal obligations;
• respond to lawful requests from competent authorities.

Depending on the purpose, the legal basis for processing is performance of a contract or of pre-contractual measures taken at the User’s request, under Article 6(1)(b) GDPR, or compliance with a legal obligation under Article 6(1)(c) GDPR.

3.2.Communications about similar services (soft spam)

Where permitted by applicable law, ABBS may use the User’s email address to send occasional communications about services already provided or similar to those already used or purchased.

The legal basis for the processing is the Controller’s legitimate interest, under Article 6(1)(f) GDPR, within the limits permitted by applicable law. The User may object to such communications at any time.

3.3.Geolocation data

Where the related feature is active and the User has authorised access to the device’s location, the application may process data relating to the User’s geographic position, including to personalise the experience and show services available based on location.

The legal basis for the processing is the User’s consent, under Article 6(1)(a) GDPR. The User may refuse or withdraw geolocation authorisation through their device settings, without prejudice to the fact that some location-based features may be unavailable.

4.Is providing the data mandatory or optional?

Providing the data needed for registration, account management and delivery of the requested services is necessary to use the related features. Failure to provide it may make it impossible to follow up on the User’s requests or provide the service.

Processing of geolocation data is optional and subject to the User’s authorisation. Withholding consent does not, in general, prevent use of the application, but may make features that depend on geographic position unavailable.

5.How data is processed and protected

Personal data is processed by electronic, IT and telematic means and, where necessary, by manual means, according to logic strictly related to the purposes stated in this notice.

ABBS adopts appropriate technical and organisational measures to protect personal data against loss, destruction, unauthorised access, disclosure or unlawful use, in accordance with the GDPR principles of lawfulness, fairness, transparency, minimisation, integrity and confidentiality.

6.How long is data kept?

Personal data is kept for as long as strictly necessary to pursue the purposes for which it was collected and, where applicable, for the duration of the relationship with the User, without prejudice to longer retention periods required by administrative, accounting, tax or other legal obligations.

Data processed on the basis of consent is kept until consent is withdrawn or, if earlier, until the purpose for which it was collected ceases. ABBS adopts procedures aimed at avoiding the retention of personal data for longer than necessary.

7.Who can process the data and to whom may it be disclosed?

Personal data may be processed by ABBS staff and contractors who are duly authorised and instructed. Where necessary to deliver the services, data may also be processed by external parties that provide services functional to ABBS’s activities, such as hosting providers, cloud infrastructure, IT services, maintenance, support, communication management or payments.

Where required by law, these parties are appointed as processors under Article 28 GDPR. An updated list of processors can be requested from the Controller.

Data may be disclosed to competent authorities in the cases provided by law or upon a lawful request. Personal data will not be disseminated.

8.Transfer of data outside the European Economic Area

If some providers used by ABBS involve the processing or transfer of personal data to countries outside the European Economic Area, the transfer will take place in accordance with Articles 44 et seq. of the GDPR, on the basis of an adequacy decision of the European Commission, the Standard Contractual Clauses or other instruments and safeguards provided by applicable law.

For transfers to US organisations that adhere to the EU-U.S. Data Privacy Framework, the transfer may take place on the basis of the related adequacy decision of the European Commission, within the limits and conditions provided by applicable law.

9.What are the User’s rights?

Where provided by the GDPR, the User may exercise the following rights:

• withdraw consent at any time, under Article 7(3) GDPR;
• access their personal data and obtain a copy, under Article 15 GDPR;
• request rectification of inaccurate data or completion of incomplete data, under Article 16 GDPR;
• request erasure of data in the cases provided by Article 17 GDPR;
• obtain restriction of processing under Article 18 GDPR;
• receive the data in a structured, commonly used and machine-readable format in the cases provided by Article 20 GDPR;
• object to processing in the cases provided by Article 21 GDPR.

To exercise these rights or request information about the processing of personal data, write to info@abbs.one.

ABBS will respond to requests without undue delay and, as a rule, within one month of receipt. Where provided by the GDPR, this period may be extended by a further two months having regard to the complexity and number of the requests.

10.Right to lodge a complaint

A User who considers that the processing of their personal data infringes the GDPR has the right to lodge a complaint with the competent supervisory authority. In Italy, the competent authority is the Garante per la protezione dei dati personali. This is without prejudice to the possibility of using any other remedy provided by applicable law.

11.Changes to this notice

ABBS may update this notice from time to time, including as a result of legal, technical or application-feature changes. The updated version will be made available through the channels used by ABBS with an indication of the update date.