Processing of Personal DataWebsite, Online Shop, User Accounts, Orders, Contacts, Downloads, Cookies and Newsletter
| Single Notice pursuant to Articles 12, 13 and 14 of Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) This Privacy Notice provides a comprehensive framework governing the processing of personal data carried out through the corporate website and online shop of Billiani S.r.l. The landing page that will be created for future marketing campaigns or specific initiatives will be accompanied by a dedicated privacy notice made available at the point where personal data are collected. Accordingly, this document contains only a general reference to such processing and does not replace the specific privacy notice applicable to the relevant landing page. |
Versione 1.0 – 4 agosto 2026
1. Scope of this Privacy Notice
Billiani S.r.l. is committed to protecting the privacy and rights of individuals whose personal data are processed in connection with the browsing and use of its website, online shop and related digital services. This Privacy Notice explains what personal data are collected, the purposes for which they are processed, the legal bases for such processing, how long the data are retained, to whom they may be disclosed, and how data subjects may exercise the rights granted to them under applicable data protection legislation.
This Privacy Notice applies, in particular, to website visitors, registered users, customers and prospective customers, individuals who submit requests through contact forms or email, users who download technical content or other materials made available by Billiani S.r.l., and newsletter subscribers.
| Landing page Any landing page created by Billiani S.r.l. for a specific initiative or campaign will be governed by its own dedicated Privacy Notice, which will be made available directly where personal data are collected. Accordingly, this Privacy Notice merely contains a general reference and does not replace the specific notice applicable to the relevant landing page. |
2. Data Controller
The Data Controller is:
| Company Name | BILLIANI S.R.L. |
| Corporate Structure | Single-member company subject to the management and coordination activities of 1997 S.r.l. pursuant to Article 2497-bis of the Italian Civil Code |
| Registered Office | Via della Roggia 28, 33044 Manzano (Udine), Italy |
| VAT No. / Tax Code / Companies Register | 01712230307 |
| Telephone | (+39) 0432 740180 |
| info@billiani.it |
3. Categories of Personal Data Processed
ï Identification data, such as first name and last name.
ï Contact details, including email address, telephone number, postal address, billing address and shipping address.
ï Account information, including login credentials, user preferences, order history, wish lists and information necessary to manage the user profile.
ï Contractual and commercial information, including purchased products, quantities, prices, delivery methods, customer support requests, returns, refunds and communications exchanged with customers.
ï Tax and invoicing data required to comply with accounting, administrative and tax obligations.
ï Payment-related information processed only to the extent necessary to complete transactions. Full payment card details are generally processed directly by the relevant payment service providers.
ï Information submitted through contact forms, emails, customer support requests or material download forms, including the content of communications.
ï Newsletter subscription data, including first name, last name, email address, company/private individual classification, country, date and evidence of consent, subscription status and any subsequent withdrawal of consent.
ï Technical and browsing data, including IP address, online identifiers, server logs, browser type, operating system, device information, referring URL, pages visited, date and time of access and session duration.
ï Data collected through cookies and similar technologies in accordance with the preferences expressed by the user through the consent management platform.
4. Processing Methods and Principles
Personal data are processed using electronic means and, where necessary, paper-based records, in accordance with the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, confidentiality and accountability. Appropriate technical and organisational measures, proportionate to the level of risk, are implemented to prevent the accidental or unlawful loss, destruction, alteration, unauthorised access, disclosure or use of personal data.
The provision of personal data is limited to what is necessary for the specific functions and services concerned. Unless expressly stated otherwise, Billiani S.r.l. does not request or intentionally collect special categories of personal data through its website. Users are therefore requested not to voluntarily include unnecessary information or sensitive personal data in any free-text fields.
5. Purposes of Processing, Legal Basis, Provision of Data and Retention Period
| Processing Activity / Purpose | Main Categories of Data | Legal Basis | Provision of Data | Retention Period |
|---|---|---|---|---|
| Website operation, navigation and security | Technical data, IP address, logs, device information | Legitimate interest in ensuring the availability, security and protection of IT systems; compliance with legal obligations | Automatic and necessary to access and use the website | For the duration of the browsing session; security logs are generally retained for up to 12 months unless required for the establishment, exercise or defence of legal claims |
| Account registration and management | Identification data, contact details, login credentials, preferences | Performance of a contract or pre-contractual measures | Necessary to create and maintain a user account | For the lifetime of the account and thereafter for the period necessary to protect the Controller’s legal rights |
| Order management, sales, delivery, returns and customer support | Identification data, contact details, order information, shipping details, communications | Performance of a contract and pre-contractual measures | Mandatory. Failure to provide the required data prevents completion of purchases or handling of requests | For the duration of the contractual relationship and, thereafter, generally for up to 10 years for contractual and administrative documentation, unless longer retention is required due to legal proceedings |
| Payments and fraud prevention | Transaction data and payment references | Performance of a contract; compliance with legal obligations; legitimate interest in preventing fraud and abuse | Necessary to complete payment | Retained in accordance with applicable legal requirements and transaction retention periods. Payment service providers apply their own retention policies. |
| Tax, accounting and legal compliance | Identification data, tax information, invoices, transaction records | Compliance with legal obligations | Mandatory | Generally retained for 10 years or for any longer period required by applicable law |
| Requests submitted through contact forms, email and customer support | Identification data, contact details, contents of the request | Performance of pre-contractual measures or a contract; otherwise, the Controller’s legitimate interest in responding to enquiries | Required in order to receive a response | For the time necessary to process the request and, in general, no longer than 24 months, unless a contractual relationship or legal dispute arises |
| Download of 3D models or technical materials | Identification data, contact details, download logs | Performance of the requested service; legitimate interest in ensuring security and verifying proper use | Required where the download form requests such information | For the time necessary to provide the service and, generally, no longer than 24 months, unless followed by a contractual relationship |
| Newsletter and promotional communications | First name, last name, email address, customer category, country, consent records and related logs | Data subject’s explicit consent | Optional. Refusal does not affect access to the website, online shop or any other services | Until consent is withdrawn and, in any event, subject to periodic verification of the data subject’s continued interest. Evidence of consent is retained for accountability and legal defence purposes |
| Non-essential cookies, analytics and marketing | Online identifiers, preferences, browsing events | Consent provided through the cookie consent management platform | Optional. Consent may be withdrawn at any time through the cookie preference settings | In accordance with the retention periods specified in the Cookie Policy and by the relevant service providers |
| Handling complaints, disputes and protection of legal rights | Data relevant to the specific case | Legitimate interest and the establishment, exercise or defence of legal claims | May be necessary depending on the circumstances | For the duration of the relevant proceedings and any applicable statutory limitation periods |
6. Newsletter and Promotional Communications
By subscribing to the newsletter, users may receive updates by email regarding the activities of Billiani S.r.l., including company news, product launches, collections, events, projects, initiatives, editorial content, invitations and promotional communications.
The processing of personal data for these purposes is based exclusively on the data subject’s freely given, specific and explicit consent.
Consent to receive the newsletter must be collected by means of a separate, unticked checkbox, distinct from the acknowledgement confirming that the user has read this Privacy Notice.
Subscription to the newsletter is not a condition for browsing the website, making purchases, creating an account, downloading materials or submitting requests.
Billiani S.r.l. may implement a double opt-in procedure to verify ownership of the email address provided. Evidence of the subscription process, including the date and time of registration, IP address, applicable version of the Privacy Notice and consent status, may be retained for accountability purposes.
Each newsletter or promotional email shall include a simple and free mechanism enabling recipients to withdraw their consent or unsubscribe at any time.
Withdrawal of consent shall not affect the lawfulness of processing carried out prior to such withdrawal.
| Email Tracking Where tracking pixels or similar technologies are used to collect information regarding email opens, interactions, devices, IP addresses or recipient behaviour, such processing shall be described transparently and carried out in accordance with applicable data protection legislation. Where the newsletter platform performs tracking activities that are not strictly necessary, Billiani S.r.l. shall configure both the service and the consent collection process in a manner consistent with the applicable legal requirements. |
7. Cookies and Similar Technologies
The website uses technical cookies and, subject to the user’s prior consent, cookies or similar technologies for preference management, audience measurement, analytics and marketing purposes. Technical cookies that are strictly necessary for the operation of the website may be used without obtaining prior consent. Any non-essential cookies or similar technologies shall only be activated following the user’s affirmative choice. Users may accept, reject or customise their cookie preferences through the cookie banner and the consent management platform and may subsequently modify their choices at any time. An up-to-date list of cookies, service providers, processing purposes and retention periods shall be made available through the Cookie Policy and the consent management platform. Continued browsing of the website shall not be regarded as valid consent for the use of non-essential cookies. Analytics, advertising technologies and similar tracking tools, including advertising pixels, shall remain blocked until valid consent has been obtained, unless they are configured in a genuinely anonymous manner that does not require consent under applicable legislation.
8. Categories of Recipients and Authorised Persons
Within the limits of their respective duties and responsibilities, personal data may be processed by:
Where required under Article 28 GDPR, service providers processing personal data on behalf of Billiani S.r.l. are appointed as Data Processors by means of appropriate contractual arrangements. Certain entities, including payment service providers, carriers and public authorities, may process personal data as independent Data Controllers, in accordance with their respective legal responsibilities.
9. Transfers of Personal Data to Third Countries
The use of technology providers, digital platforms and online services may involve the transfer of, or access to, personal data from countries outside the European Economic Area (EEA). In such cases, Billiani S.r.l. ensures that an adequacy decision has been adopted by the European Commission or that appropriate safeguards are implemented in accordance with Articles 44 et seq. of the GDPR, including, where applicable:
Further information regarding the safeguards adopted for international data transfers may be requested from the Data Controller using the contact details provided in this Privacy Notice.
10. Automated Decision-Making and Profiling
Billiani S.r.l. does not carry out automated decision-making, including profiling, that produces legal effects concerning the data subject or similarly significantly affects them within the meaning of Article 22 of the GDPR. Any personalisation or profiling activities relating to cookies, advertising or analytics are carried out solely within the scope of the preferences expressed by the user and may be disabled at any time through the consent management tools made available on the website.
11. Third-Party Services and External Links
The website may include links, plug-ins or functionalities provided by third parties, including social media platforms, authentication services, payment providers, anti-spam systems and reCAPTCHA services. Where users interact directly with such third-party services, the relevant provider may process personal data as an independent Data Controller in accordance with its own privacy notice. Billiani S.r.l. encourages users to review the terms of use and privacy policies of each third-party provider before using their services.
12. Data Subject Rights
Where the conditions set out in the GDPR are met, data subjects may exercise the rights provided for under Articles 15 to 22 of the GDPR, including the right to:
Requests to exercise these rights may be submitted to info@billiani.it or by using the other contact details provided by the Data Controller. Where necessary, Billiani S.r.l. may request additional information to verify the identity of the applicant before processing the request and will respond within the time limits established by applicable data protection legislation.
Without prejudice to any other administrative or judicial remedy, data subjects also have the right to lodge a complaint with the competent supervisory authority for the protection of personal data.
13. Children’s Data
The website, online shop and related services are not specifically intended for children. Purchases may only be made by individuals who have the legal capacity to enter into binding contracts. Should Billiani S.r.l. become aware that personal data relating to a child have been collected inappropriately, it will take appropriate steps to verify the circumstances and, where necessary, delete such data without undue delay.
14. Updates to this Privacy Notice
This Privacy Notice may be updated from time to time to reflect changes in applicable legislation, organisational arrangements, technological developments or the services provided by Billiani S.r.l.
The current version of this Privacy Notice is published on the website together with the date of its latest update. Where any amendments materially affect processing activities based on consent, Billiani S.r.l. will assess whether renewed consent is required in accordance with applicable law.