Privacy Notice

1. Who is responsible

Bongetta Formaggi di Bongetta Almo srl, Via Della Riva 27, 23013 Cosio Valtellino (SO), Italy — VAT 00529770141.

We are not required to appoint a Data Protection Officer under Article 37 GDPR: we carry out no large-scale systematic monitoring and process no special categories of data at scale. We publish a dedicated contact anyway, because other laws in the countries where this site is reachable require a publicly accessible channel. For Singapore, this is the contact required under section 11(5) of the PDPA.

2. What we collect

Data you give us by filling in the inquiry form: name, company, job title, business email, country, type of company, the content of your message, and — if you choose to enter them — phone number and company website.

Data recorded automatically at the moment you submit the form, needed to demonstrate consent: date and time in UTC, IP address, browser string, page language, page address and any campaign parameters, the exact text and version of each consent statement shown, and the state of each checkbox.

Measurement data, only if you consent to the relevant cookie category. No measurement or advertising tool is loaded before your consent.

We do not ask for and do not want to receive special categories of data — health, beliefs, union membership, biometrics — nor identity documents or dates of birth. The form says so explicitly.

3. Why we process it, and on what basis

We do not rely on legitimate interest for commercial email, and we do not use the soft opt-in exemption: it applies only where data was obtained in the course of a completed sale, which is not the case for an inquiry received through this site. Under CASL, express consent obtained here is what allows us to email recipients in Canada; under CAN-SPAM, every message carries our postal address and a working unsubscribe link.

4. Who receives the data

Data is handled by authorized Bongetta staff and by the providers that run the site infrastructure, the email service and the management of commercial contacts, appointed as processors under Article 28 GDPR.

We do not sell, rent or share your data with third parties for their own marketing.

5. Where the data is processed

Data is stored and processed in Italy, therefore inside the European Union. If a provider were ever to process data outside the Union, we would state it here before it happened, together with the safeguards applied.

If you write to us from outside the EU, your data travels to Italy. That is what the third checkbox on the form asks you to authorize explicitly.

6. How long we keep it

7. Your rights

You may ask for access to your data, correction, erasure, restriction of processing, portability, and you may object to processing. You may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

We answer within 10 days. That is the shortest deadline among the countries where this site is published, and we apply it to everyone.

To unsubscribe from commercial communications: the link is in every message, it is free, it requires no login and it stays valid permanently. The request takes effect immediately and in any case within 2 business days.

8. Cookies

Cookie categories, purposes, duration and how to withdraw consent are set out in the Cookie Policy. You can change your choice at any time through the link in the footer of every page.

9. “Do Not Track” and global opt-out signals

We do not track users across third-party sites and we build no advertising profiles. The site loads no measurement or advertising tool before express consent. A browser sending a Do Not Track header or a Global Privacy Control signal is therefore already in the most protective state this site offers, which is no active tracking at all.

10. Children

This site is addressed exclusively to trade professionals. We do not knowingly collect data from children. By submitting the form you confirm that you are 18 or older and acting on behalf of a company.

11. Automated decisions

We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.

12. Where to complain

13. Changes

If we change this notice we update the date at the top of the page. Where the change concerns purposes or legal bases, we ask for fresh consent rather than simply publishing a new version.