Privacy Notice

1. Who is responsible

Bongetta Formaggi di Bongetta Almo srl, Via Della Riva 27, 23013 Cosio Valtellino (SO), Italy — VAT 00529770141.

Email: contact@bongetaformaaggi.com

We are not required to appoint a Data Protection Officer under Article 37 GDPR: we carry out no large-scale systematic monitoring and process no special categories of data at scale. We publish this channel anyway, because other laws in the countries where this site is reachable require a publicly accessible channel. For Singapore, this is the contact required under section 11(5) of the PDPA.

2. What we collect

Data you give us by filling in the inquiry form: name, company, job title, business email, country, type of company, the content of your message, and — if you choose to enter them — phone number and company website.

Data recorded automatically at the moment you submit the form, needed to demonstrate consent: date and time in UTC, IP address, browser string, page language, page address and any campaign parameters, the exact text and version of each consent statement shown, and the state of each checkbox.

Measurement data, only if you consent to the relevant cookie category. No measurement or advertising tool is loaded before your consent.

We do not ask for and do not want to receive special categories of data — health, beliefs, union membership, biometrics — nor identity documents or dates of birth. The form says so explicitly.

3. Why we process it, and on what basis

We do not rely on legitimate interest for commercial email, and we do not use the soft opt-in exemption: it applies only where data was obtained in the course of a completed sale, which is not the case for an inquiry received through this site. Under CASL, express consent obtained here is what allows us to email recipients in Canada; under CAN-SPAM, every message carries our postal address and a working unsubscribe link.

4. Who receives the data

Data is handled by authorized Bongetta staff and by the providers that run the site infrastructure, the email service and the management of commercial contacts, appointed as processors under Article 28 GDPR.

Website hosting and the domain’s email server: InMotion Hosting, Inc., a company based in the United States.

The InMotion Hosting servers that host the site, the data submitted through the form and email messages are located in the United States.

Management of commercial contacts (CRM): we do not currently use any CRM tool. If we adopt one, the provider will be named here before it is put to use.

We do not sell, rent or share your data with third parties for their own marketing.

5. Where the data is processed

The controller, Bongetta Formaggi di Bongetta Almo srl, is based in Italy, where our staff handle the inquiries we receive. Inquiries submitted through the form and email messages from all senders, in every country, are stored on servers in the United States, operated by InMotion Hosting, Inc. as a processor.

For senders in the European Union, the transfer to the United States relies on the Standard Contractual Clauses adopted by the European Commission (Article 46(2)(c) GDPR), incorporated into InMotion Hosting’s Data Processing Addendum. You can request a copy of these safeguards through the channel given on the Data protection contact page.

For senders in Brazil, the transfer to Italy and the United States relies on the specific consent given in the third checkbox of the form, under Art. 33, VIII of the LGPD and ANPD Resolution CD/ANPD No. 19/2024.

The third checkbox is required. Because inquiries are stored on these servers, the inquiry cannot be sent without it: the form shows a message and nothing you entered is recorded or forwarded.

6. How long we keep it

7. Your rights

You may ask for access to your data, correction, erasure, restriction of processing, portability, and you may object to processing. You may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

We answer within 10 days. That is the shortest deadline among the countries where this site is published, and we apply it to everyone.

To unsubscribe from commercial communications: the link is in every message, it is free, it requires no login and it stays valid permanently. The request takes effect immediately and in any case within 2 business days.

8. Cookies

Cookie categories, purposes, duration and how to withdraw consent are set out in the Cookie Policy. You can change your choice at any time through the link in the footer of every page.

9. “Do Not Track” and global opt-out signals

We do not track users across third-party sites and we build no advertising profiles. The site loads no measurement or advertising tool before express consent. A browser sending a Do Not Track header or a Global Privacy Control signal is therefore already in the most protective state this site offers, which is no active tracking at all.

10. Children

This site is addressed exclusively to trade professionals. We do not knowingly collect data from children. By submitting the form you confirm that you are 18 or older and acting on behalf of a company.

11. Automated decisions

We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.

12. Where to complain

13. Changes

If we change this notice we update the date at the top of the page. Where the change concerns purposes or legal bases, we ask for fresh consent rather than simply publishing a new version.