Privacy Notice pursuant to Articles 13 and 14 of the General Data Protection Regulation (GDPR)
1. Data Controller
The Data Controller is BILLIANI S.r.l., with registered office at Via della Roggia 28, 33044 Manzano (UD), Italy, VAT No. / Tax Code / Companies Register No. UD 01712230307. For any request concerning the processing of personal data, data subjects may contact the Data Controller at info@billiani.it, unless a dedicated privacy contact address is subsequently designated.
2. Scope of this Privacy Notice
This Privacy Notice governs the processing of personal data collected through landing pages, commercial contact forms, newsletter subscriptions, catalogue or marketing material requests, downloads, event invitations, promotional campaigns, corporate initiatives, and communications relating to Billiani products, collections, projects, and initiatives.
3. Categories of Personal Data Processed
| Category | Examples | Nature of the Provision |
| Identification and contact data | First name, last name, email address, telephone number (where provided). | Required to manage the request; telephone number is preferably optional. |
| Professional data | Company/design studio, job title, business sector, country, geographical area, commercial interest. | Optional or required where necessary for B2B qualification purposes. |
| Request-related data | Products or collections of interest, free-text message, contact preferences. | Required to respond to the request. |
| Technical and security data | IP address, browser information, system logs, reCAPTCHA/anti-spam data. | Collected for security purposes and abuse prevention. |
| Marketing interaction data | Newsletter opens, clicks, unsubscribe requests, newsletter preferences, interactions with landing pages and communications. | Processed where supported by the relevant tools and based on consent and/or cookie preferences. |
4. Purposes of Processing and Legal Bases
| Purpose | Legal Basis | Notes |
| Managing requests submitted through forms or landing pages | Article 6(1)(b) GDPR; alternatively Article 6(1)(f) GDPR for general enquiries. | Responses shall be limited to the request submitted. |
| Newsletters and marketing communications | Article 6(1)(a) GDPR – consent. | Consent must be freely given, specific, informed, documented, and may be withdrawn at any time. |
| Invitations to events, trade fairs, presentations and product launches | Article 6(1)(a) GDPR; legitimate use of soft spam where legally applicable. | The use of unqualified mailing lists should be avoided. |
| Non-intrusive marketing segmentation/profiling | Article 6(1)(a) GDPR, where based on user interactions or preferences. | Only carried out where actually implemented and subject to separate consent. |
| Website security and spam/bot prevention | Article 6(1)(f) GDPR. | Requires transparency and a legitimate interest assessment. |
| Compliance with legal obligations and protection of legal rights | Articles 6(1)(c) and 6(1)(f) GDPR. | Includes retaining evidence of consent and handling legal claims. |
5. Processing Methods
Personal data are processed using IT systems, website management platforms, newsletter delivery platforms, CRM systems, security tools, analytics services and, where authorised, artificial intelligence-based support tools. Processing is carried out in accordance with the principles of lawfulness, fairness, transparency, data minimisation, accuracy, storage limitation, integrity, confidentiality and accountability.
6. Newsletter Subscription, Withdrawal of Consent and Unsubscribe
Subscription to the newsletter is based on the data subject’s explicit consent. A double opt-in procedure is recommended, consisting of a confirmation email and activation only after the data subject has confirmed the subscription. Every marketing communication includes a simple and free mechanism allowing recipients to unsubscribe at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before such withdrawal.
7. Cookies, Analytics and Tracking Technologies
Where the landing page uses non-anonymised analytical cookies, marketing cookies, advertising pixels, remarketing tags, A/B testing tools or similar technologies, these tools shall only be activated after the user’s consent has been obtained through a compliant cookie banner or Consent Management Platform (CMP). Continued browsing does not constitute valid consent for the use of non-essential cookies.
8. Artificial Intelligence
Billiani may use digital tools and, where internally authorised, artificial intelligence systems to support editorial activities, creative production, translations, analyses and campaign management. Such tools are not used to make solely automated decisions producing legal effects or similarly significant effects on data subjects. Content generated or enhanced through AI tools is subject to human review and, where realistic or potentially misleading, is accompanied by appropriate disclosure.
9. Recipients, Data Processors and International Transfers
Personal data may be processed by authorised personnel and by service providers appointed as Data Processors pursuant to Article 28 GDPR, including hosting providers, web agencies, newsletter platforms, CRM providers, analytics providers, security service providers, IT suppliers and professional consultants. Where suppliers located outside the European Economic Area (EEA), or with access from third countries, are engaged, Billiani verifies the existence of an adequacy decision, Standard Contractual Clauses (SCCs), supplementary safeguards and transfer impact assessments where required.
10. Data Retention
| Category | Recommended Retention Period | Criterion |
| Landing page/form requests | 12 months from completion of the request, unless a commercial relationship exists or retention is required for legal protection. | Data minimisation and lead management. |
| Newsletter and marketing data | Until consent is withdrawn, subject to periodic review; review after 24 months of inactivity is recommended. | Immediate withdrawal upon request and maintenance of consent records. |
| Records of consent and withdrawal | For the period necessary to demonstrate compliance and manage legal claims. | Accountability. |
| Technical logs | According to security requirements and internal technical policies. | Storage limitation principle. |
11. Rights of the Data Subject
Data subjects may exercise the rights provided for under Articles 15–22 GDPR, including the right of access, rectification, erasure, restriction of processing, objection, data portability (where applicable), and withdrawal of consent, by contacting info@billiani.it. Data subjects also have the right to lodge a complaint with the competent Supervisory Authority for the protection of personal data.
Sources and References