In the next chapters you will find information on the methods of processing your personal data, data that can be detected while browsing the Internet on our site as a consequence of the services we offer. In order for you to be able to use all the services offered by our website, it is necessary for us to collect and process the personal data relating to you. The processing of personal data relating to your person can be, by way of indication but not limitation, any type of activity regarding the detection, organization, storage, analysis, interpretation, modification, choice, selection, comparison, use, connection, blocking communication, cancellation and destruction of data. The processing of personal data referred to you takes place in compliance with the principles of legality and correctness in compliance with the provisions of the law in force and with the EU Regulation 2016/679 of the European Parliament and of the Council. In this privacy statement, it is our pleasure to inform you about the data we collect, for what reasons this is necessary and what your rights are regarding the processing of your data.

Person in charge of data processing
The person in charge of the processing of personal data collected from this site is App. Garni Bonaria Sas Di Pezzedi Ivo & C., based in Str. Agà, 1 - 39033 - Corvara in Badia - BZ VAT number IT 02513310215 .
To obtain further information, you can contact us at any time at the following addresses:
Tel +39 0471 836142
E-Mail: info@bonaria.info
Internet: https://www.bonaria.info

Purpose of processing
We process data for the following purposes:

• for the fulfillment of legal obligations
• for the fulfillment deriving from contractual obligations
• to be able to make the requested information available to you and provide the agreed services
• for examining the efficiency of the system
• for the implementation of marketing activities such as the sending of commercial information, advertising material and market research
• to protect obligations (for example payments)
• for the detection of the degree of satisfaction referred to the quality of the products and services offered

Type of treatment Your
personal data are processed manually but also electronically but mainly thanks to the aid of automated means and processes that are refined according to the objectives set. In this case, databases and IT platforms are used in particular, which can be managed both by us and also by third parties. Each type of treatment guarantees the respect and confidentiality of the data processed. These general data and information are saved in the databases and as log files on the servers. In order to guarantee you unique browsing experiences, essential technical data must be collected, such as:

• type and version of the browser used
• operating system
• the website from which the system reaches our website (so-called referrers)
• the sub-websites that the system reaches from our website
• date and time of the visit to our site
• IP address
• other data and other similar information

The legal basis of this type of treatment is Art. 6 of the GDPR.
When you connect to the website, the computer systems and management software automatically and indirectly detect and / or manage all this series of data and information.
The detection of this data in anonymous format, we process on the one hand in a static form and at a later time to process them in order to improve the degree of protection.

Data retention period
In compliance with the laws in force, the data controller must respect different data retention periods regardless of the use made:

• With regard to the management and response to your questions on products and activities, your personal data will be kept for a period of time equal to the strictly necessary to process your request.
• With regard to the management of activities related to navigation on our website, your personal data will be kept for a period of time, equal to the strictly necessary to fulfill the requests you have forwarded.
• Regarding the management and operation in compliance with legal obligations (regarding the retention times of invoices, administration, and tax data) your personal data will be processed for a period equal to the deadlines set by law.
• With regard to the management of disputes and disputes, your personal data will be kept for as long as strictly necessary for the pursuit of these purposes and, in any case, no later than the applicable limitation periods.

Use of Cookies
To constantly improve navigation on our website we use cookies. Cookies are text information, which while browsing an Internet site are stored in the computer through the browser used. The storage of this data serves to recognize access. You can delete at any time, through the settings of the browser used, the cookies that are stored and at the same time set the browser so that cookies are no longer stored in the future. Should you opt for the latter choice, we cannot guarantee normal use of our site and some services and functions may no longer be usable. Further information on Cookies and their use can be found by consulting the appropriate dedicated section.

Contact form
In the event that you have decided to contact us through the contact form on our website, it is necessary to indicate some personal data in order to be able to process the request you have forwarded. This is also why the respective contact form fields are marked with an asterisk or otherwise as required fields. The insertion of further personal and / or sensitive data, on the other hand, remains your choice. Should you omit, even partially, the inclusion of the requested data marked with an asterisk or a similar character, it could make it impossible for us to fulfill the requested performance and services. Sending the request through the contact form is contextually the acceptance of the processing of personal data sent. The data you provide,

Profiling
Profiling is any type of automated processing of personal data which consists in using such personal information to evaluate, analyze and predict certain aspects relating to a natural person. For this type of marketing we have concluded agreements with third parties.

Collaborations with third parties
When we work with our suppliers and use third party services, we ensure that they are contractually obligated to use the same privacy / security standards that we use and we make sure they are respected. These third parties who act as data controllers of personal data guarantee that the data received are not stored and used for other purposes than those contractually agreed. In the context of these technical agreements the e-mail addresses made available to them are encrypted thanks to the use of technology such as Hashing so third parties are unable to trace the original addresses.

It may happen that we are forced to transfer your data to third parties residing in non-European countries (EEA). The EEA (European Economic Area) is made up of the countries of the European Union, Switzerland, Iceland, Lichtenstein and Norway. These countries guarantee the same rules regarding the security on the processing of personal data. Data transfer may occur when the servers (i.e. the physical place where the data is stored) or the headquarters of our suppliers is located in a country outside the EEA. In the event that we are forced to transfer data to a country outside the European Economic Area (EEA), we assume the responsibility that the data are treated with adequate security standards.

Dissemination of data
The personal data mainly processed are not disclosed. Only and exclusively in certain cases, personal data may be disclosed to the following applicants:

• Subcontractors for technical analysis and verification, payments, identification and delivery services, analytics providers or credit insurance agencies
• The public administration and the authorities, in the event that there is a legal obligation
• Credit institutions with which we entertain commercial relationships for the management of credits / debts and with financial intermediation
• any natural or legal person, public and / or private (legal, administrative and tax consultancy, courts, chambers of commerce, etc.) if the forwarding of data is necessary or relevant for the performance of our business

Rights of the interested party
The rights of the interested party set out above can be exercised by the same and / or by a person appointed by him by sending a written request by registered letter with return receipt and by e-mail (email) to the data controller Ivo Pezzedi at the operational headquarters App. Garni Bonaria Sas Di Pezzedi Ivo & C., based in Str. Agà, 1 - 39033 - Corvara in Badia - BZ P. The interested party has the right to obtain a copy of the data in our possession which will be sent available within the terms established by the law in force.
In certain cases we reserve the right to store some information for legal purposes (such as suspicion of fraud and violation of the terms and conditions). If you believe that your rights are being infringed, you have the right to contact the competent authorities for the protection of personal data as well as to take legal action.

Below we summarize the rights of the interested party:

• Right to confirm data processing
• Each interested party has the right to request the owner of the personal data to confirm whether or not they are being processed. If an affected person wishes to make use of this confirmation right, he or she can contact us at any time.
• Right to information
• Each interested party has the right to obtain free and at any time information on the processing of data relating to his person. The communication must contain the following information:
• the purposes of the processing
• the types of personal data that are processed
• the recipients and / or categories of recipients to whom the personal data processed with particular reference and attention to recipients located outside the EEA or to international organizations may be disclosed or not. Furthermore, as regards the diffusion to non-EEA countries, the interested party has the right to have additional information regarding the security guarantees of the treatment offered.
• the retention period envisaged for the processing and storage of personal data
• the possibility of making use of a complaint to the competent Authorities regarding the protection of personal data
• in the event that the personal data had not been assumed and managed by the company, the possibility of obtaining adequate information on their origin and origin
• the possibility of automated decisions, including the provisions of Art. 22 paragraph 1 and 4 of the GDPR regarding the profiling of personal data and in this case to obtain adequate and supported information regarding the decision-making logic involved and the possible consequences that this choice may entail for the protection of the rights of the interested party.
• Right to rectification of personal data
• Any person affected by the processing of personal data has the right to request the immediate correction of incorrect personal data concerning them.
• Right to erasure
• Any person affected by the processing of personal data has the right to request the data controller to immediately delete the personal data concerning him, provided that at least one of the following reasons is satisfied and that the processing of personal data is not required:
• The personal data has been collected or otherwise processed and is no longer required.
• The interested party revokes the processing authorization granted on the basis of the provisions of Art, 6 paragraph 1 letter a) of the GDPR or of Art, 9 paragraph 2 letter a) of the GDPR but also in the event that the processing should be in contrast with further data protection rules.
• The interested party presents an opposition to the processing pursuant to Art. 21, paragraph 1, of the GDPR and demonstrates that there are no legitimate reasons for the processing.
• In the event that personal data should be processed in a non-compliant manner
• The deletion of personal data is required to fulfill a legal obligation under Union or national law, to which the data controller is subject.
• The personal data have been processed in relation to the request for services by minors in compliance with the provisions of Art. 8 paragraph 1 of the GDPR.
• Right to limitation of processing
• Any person affected by the processing of personal data has the right to request the controller to restrict the processing if one of the following conditions is met:
• The accuracy of the personal data is contested by the data subject. The restriction applies to a period of time that allows the responsible person to verify the accuracy of the personal data processed.
• The processing does not comply with the laws in force, the interested party refuses to delete personal data and instead requests the limitation of the use of personal data.
• The data controller no longer needs the personal data for the purposes of the processing, but the data subject needs them in order to be able to assert, exercise or defend their rights by taking legal action.
• The person concerned has contested the processing in place on the basis of the provisions of Art. 21 paragraph 1 of the GDPR and it has not yet been clarified whether the legitimate reasons of the data controller concerned are superior to those of the person concerned.
• Right to data portability
• Any person affected by the processing of personal data has the right to receive in a structured format, common and readable by a data processing machine, the personal data relating to the person concerned and made available by you to the data controller. The interested party also has the right to transfer these data to another data controller without impediments of some fate on the part of the transferring owner.
• Furthermore, based on the content of Art. 20 paragraph 1 of the GDPR, the subject concerned by the processing of personal data has the right to demand that the data be transferred from the transferring holder directly to the new receiving holder as long as it is possible to identify a technical solution common to the parties and in compliance with the freedoms and rights of any third parties involved in the process.
• Right to object
• Any person concerned by the processing of personal data has the right to object to the processing of the same at any time for reasons deriving from his particular position.
• This principle also applies to profiling based on the provisions listed here.
• In the event that there is an opposition to the processing of data, we will stop the processing of personal data, unless we can demonstrate valid reasons for continuing with the processing, reasons that prevail over the interests, rights and freedoms of the data subject. but even if the processing serves the assertion, exercise or defense of legal claims.
• In the event that we were to use the processing of personal data for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data for direct marketing purposes. This provision also applies to profiling, when it is used for the purpose of direct marketing.
• Automated decisions including profiling
• Any person affected by the processing of personal data has the right to object to a decision based solely on automated processing, including profiling, which has legal consequences and effects on him and which significantly affects him, unless the decision is taken to conclude or fulfill a contract between the data subject and the data controller.
• If the decision to conclude or fulfill a contract between the data subject and the data controller is requested or has been made with the explicit consent of the data subject, we will take reasonable measures to safeguard the rights and freedoms of the data subject.
• Right to object to consent to data processing
• Any person concerned by the processing of personal data has the right to withdraw the consent given to the data controller at any time.

Place of processing of personal data
The processing of personal data provided by you takes place mainly in our establishments and in the departments where the data controller can be found. The contractual services agreed will take place exclusively in one of the Member States of the European Union or in a State party to the agreement on the European Economic Area.
Any partial or total transfer of the contracted service to a third country requires the prior consent of the customer and can only take place if the special guarantee and data security conditions referred to in Articles 44 and following of the GDPR are met (such as Commission on resolution of appropriateness, standard EU data protection clauses, approved codes of conduct).
For further information, please contact us at the addresses indicated in the "Publishing" section.

Google Analytics
This website uses Google Analytics, an analysis tool and advertising efficiency service from Google Inc. („Google“). Google Analytics uses so-called "Cookies", small text files which are stored on your computer and which allow an analysis of your use of the website. The information on your navigation on our website and which is collected through the use of cookies (including the IP address) are sent to a server in America where they are then saved. Google will use the information received to analyze your navigation on our website, compile reports for website operators on the activities carried out on the website and provide further services relating to website activity and internet usage. In certain cases, Google may also transfer this information to third parties, for example if required by law or as regards third parties who process this data on behalf of Google. Your IP address may in no case be used by Google and used for purposes other than those indicated above. With the use of the services of this website, the registered person consents to Google the processing of data concerning him in the manner and for the purposes indicated above. You can prevent the installation of cookies with the appropriate settings of the browser used for navigation; in this case we must warn you that disabling cookies could limit the quality of the website navigation as well as its use. To prevent Google from collecting and processing data in the ways described above, must download and then install the following plugins of the browser used https://tools.google.com/dlpage/gaoptout?hl=it. Further information on the conditions of use and data protection by Google Analytics can be found by consulting the link https://www.google.com/analytics/terms/it.html as well as https://support.google.com / analytics / answer / 6004245? hl = it. The website uses Google Analytics with the IP-Masking mode in order to ensure that the collection of IP addresses takes place anonymously. We consider it appropriate to specify that we use Google Analytics to evaluate and analyze AdWords data for statistical purposes and Double-Click-Cookies. If you do not like this setting, you can disable it at any time by visiting the link https://adssettings.google.com/?hl=it.



Google Fonts
This website uses Web Fonts for the correct display of the graphic fonts that are made available to Google. When our website is loaded, your browser loads the necessary web sources into the browser's cache space so that the graphic characters are correctly displayed.
To this end, the browser you have chosen must necessarily connect to Google's servers, which in this way will become aware of the fact that your IP address has loaded our website. The use of Google Web Fonts is a consequence of the desire to offer a clean and attractive navigation. This represents a legitimate interest also based on the content of Art. 6 paragraph 1 letter f) of the GDPR. Further information on the use of Web Fonts can be found at the following link https://developers.google.com/fonts/faq or by consulting the information note on Google data processing at the link https://www.google.com/policies / privacy /.

SSL certificate
We process personal data collected on the website with IT tools. Personal data is protected by encryption with Secure Socket Layer (SSL) technology. This technology protects you from the risk of inadvertently disclosing your personal data ´with the use of an unsecured connection.
The user is notified when accessing the secure connection by the appearance of a padlock icon. By clicking on the padlock symbol, you can check that the SSL certificate is valid and up-to-date.

Google Maps
For this web page we use the offer of Google Maps, which allows you to view interactive maps directly on the site, thus enabling you to use the maps function conveniently.
When you visit our site, Google is informed that you have accessed the corresponding subpage of our site. Furthermore, the data collected during your visit is transferred to Google, regardless of whether Google has provided you with a user account in which you are registered. If you are registered with Google, your data is directly linked to your account. If you do not wish to be registered with Google with your profile, you must log out before clicking on the button. Google stores your data to process your user profile and uses them for advertising purposes, for market research and / or to configure its web page in a way that is more suited to the needs of users. This processing (which also concerns unregistered users) is aimed in particular at the optimization of advertising activities, as well as at informing other users of the social network about your activities on our website. The user has the right to object to the provision of said user profiles, by contacting Google directly for this purpose.
Further information in relation to the purposes and scope of data collection and their processing by the person who proposes the plug-in can be found in the privacy statements of the same person, which will also provide you with information on your rights and yours. possibility of intervention to protect your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA, and is subject to the regulations of the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework .

Social Network Plug-in
1. This site also incorporates plug-ins and / or buttons for social networks, in order to allow easy sharing of content on your favorite social networks. These plug-ins are programmed so as not to set any cookies when accessing the page, to safeguard the privacy of users. Eventually cookies are set, if so provided by social networks, only when the user makes effective and voluntary use of the plug-in. Please note that if the user browses being logged into the social network then he has already consented to the use of cookies conveyed through this site at the time of registration to the social network.
2. The collection and use of information obtained through the plug-in are governed by the respective privacy policies of the social networks,
Facebook: https://www.facebook.com/help/cookies
Instagram: https://help.instagram.com/519522125107875