Contact form
You confirm that you have read the Privacy Policy of B&B Italia S.p.A. carefully and you accept its contents in full. In relation to the following individual purposes, we request that you give your consent by ticking the applicable box for each one. No mark in the applicable box will be understood as “I do not consent”.
Please type the letters and numbers below
SCROLL

Privacy Policy

PRIVACY POLICY

This Privacy Policy (hereinafter “Privacy Policy” or simply “Policy”), issued pursuant to the provisions of Art. 13 of Regulation EU No. 2016/679 (“GDPR”), explains how and why B&B Italia S.p.A. collects, records and uses personal data related to the users of its official Website: www.bebitalia.com/it (hereinafter “Website”).

This Privacy Policy is applicable to the personal data of each user of the Website (hereinafter “Website User” or simply “User”) whether acting in a private or professional capacity and/or for professional purposes on behalf of the company/business for which they work, in the event that they decide to complete one or more of the Registration Forms (hereinafter “Forms”) present on our Website.

B&B Italia S.p.A. considers your privacy to be of fundamental importance and always strives to ensure that your personal data are processed with respect for fundamental rights and freedoms and your dignity, with particular reference to confidentiality, personal identity and the right to the protection of personal data.

Please read this Policy carefully and check it periodically with great care in order to always verify your rights and any amendments that may become necessary over time.

 

CONTENTS

1.    Data Controllers

2.    Data Processed

3.    Processing

4.    Processing Purposes and Legal Basis

5.    Nature of Data Provision and Consequences of Refusal

6.    Processing Methods

7.    Data Storage

8.    Security Measures

9.    Persons Authorized to Process Data

10.  Data Disclosure and Dissemination

11.  Data Transfer

12.  Rights of the Data Subject

13.  Ways to Exercise Rights

14.  Amendments to this Privacy Policy

 

1. Data Controllers

B&B Italia S.p.A. (a Company with registered office at Via Durini No. 14 - 20122 Milan and administrative office at Strada Provinciale 32, No. 15 - 22060 Novedrate (Como), Tax Code and VAT No. IT 07122350965, subject to the control and coordination of Design Holding S.p.A., hereinafter also “B&B”), in its capacity as Data Controller, informs you, in your capacity as Data Subject, that your personal data (hereinafter “Personal Data” or simply “Data”) will be processed in full compliance with current legislation on personal data protection and with the implementation of all the security, technical and organisational measures deemed appropriate for the protection of said Data. 

Apart from B&B Italia S.p.A., your Data, with your consent where necessary, may also be processed by the other companies that are part of the same corporate group, “Design Holding Group”. An up-to-date list of the companies that are part of the group is available by clicking here.

Each of these companies may act as an autonomous and separate Data Controller or as a Joint Data Controller, in accordance with the provisions of Clause 4 below. The contents of the Agreement between Joint Data Controllers are available by clicking here.

 

2. Data Processed

The Data covered under this policy include the following Data related to you, which you yourself can directly communicate to us via the Forms on our Website: name, surname, personal email address, work email address, personal telephone number, work telephone number, job and sector, name of the company/business/organisation you work for, address of domicile/residence, head office of the company/business/organisation you work for.

It is possible that only some of the aforementioned Data will be processed. Therefore, please always refer to the Data specifically requested in each Form on our Website that you decide to complete and also to the contents of this Policy.

For the purpose of providing a better understanding of the above, please be reminded that Personal Data is defined under current European law as “any information relating to an identified or identifiable natural person ("data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person”.


3. Processing

Your Data is processed by means of a series of operations and, precisely, purely by way of example, through: collection, registration, organisation, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, limitation, erasure and destruction.


4. Processing Purposes and Legal Basis

Your Data will be processed for the following purposes:

a. Without your express consent (since the processing concerned is necessary for the performance of a specific request made by you) for the following purpose: to fulfil your requests for information related to our products, services, stores, etc.

In this case B&B Italia will act as an autonomous and separate Data Controller.

b. Only subject to your informed, specific and separate consent (Art. 6, paragraph 1, letter (a) of the GDPR) for the following purpose: entry of your contact details into our database dedicated to companies and professionals, which is used to manage potential future opportunities for collaboration between us and the company/business you represent. More precisely, your contact details will be used to send you, using both traditional methods (paper mail, operator assisted calls) and automated methods (email, fax, text message, multimedia message, calls without an operator), information, including of a commercial nature, concerning the job you perform and in order to communicate with you to consider together any possible collaborations between B&B Italia S.p.A. and the company/business you work for, in order to establish all the pre-contractual issues/measures related to the aforementioned opportunities for collaboration.

In this case B&B Italia will act as an autonomous and separate Data Controller.

c. Without your express consent – since the processing concerned is performed on the basis of the legitimate interest of B&B (Art. 6, paragraph 1, letter (f) of the GDPR) – for the following purpose: sharing your Data with third-party companies operating in the field of furnishing, design and lighting and which are part of the same corporate group that B&B Italia S.p.A. also belongs to (including the group’s parent company Design Holding S.p.A. and the subsidiary and/or investee and/or affiliated companies thereof, pursuant to the provisions of Art. 2359 of the Italian Civil Code, which include by way of example: Arc Linea Arredamenti S.p.A., FLOS S.p.A., Louis Poulsen A/S), limited to internal administrative and accounting purposes.

In this case, the companies in the group will act as separate and autonomous Data Controllers. Please see Clause 1 for a complete list of the companies in the group.

d. Only subject to your informed, specific and separate consent (Art. 6, paragraph 1, letter (a) of the GDPR), for the following purposes:

(i) the sending of information and promotional communications from B&B, including those of a commercial nature, newsletters, advertising material and/or offers of products and services and completion of statistical and/or market surveys and research, using both traditional methods (paper mail, operator assisted calls) and automated methods (email, fax, text message, multimedia message, calls without an operator), from Italy or abroad (including from countries that do not belong to the European Community);

(ii) the sending of information and promotional communications from third-party companies, including those of a commercial nature, newsletters, advertising material and/or offers of products and services and completion of statistical and/or market surveys and research, using both traditional methods (paper mail, operator assisted calls) and automated methods (email, fax, text message, multimedia message, calls without an operator), from Italy or abroad (including from countries that do not belong to the European Community), such third-party companies operating in the field of furnishing, design and lighting and which are part of the same corporate group that B&B Italia S.p.A. belongs to (including the group’s parent company Design Holding S.p.A. and the subsidiary and/or investee and/or affiliated companies thereof, pursuant to the provisions of Art. 2359 of the Italian Civil Code, which include by way of example: Arc Linea Arredamenti S.p.A., FLOS S.p.A., Louis Poulsen A/S).

In this case, the companies in the same group will act as separate and autonomous Data Controllers. Please see Clause 1 for a complete list of the companies in the group.

e. Only subject to your informed, specific and separate consent (Art. 6, paragraph 1, letter (a) of the GDPR), for the following purposes: sharing your Data, by means of the same database, with companies operating in the field of furnishing, design and lighting and which are part of the same group to which  B&B Italia S.p.A. also belongs (including, the group’s parent company, Design Holding S.p.A., and the subsidiary and/or investee and/or affiliated companies of the same, pursuant to the provisions of Art. 2359 of the Italian Civil Code, which include by way of example: Arc Linea Arredamenti S.p.A., FLOS S.p.A., Louis Poulsen A/S), to send you, using both traditional methods (paper mail, operator assisted calls) and automated methods (email, fax, SMS, MMS, calls without an operator), information notices, including of a commercial nature, concerning the job you perform, and in order to communicate with you to consider together any possible collaborations between the company/business for which you work and the aforementioned companies and/or to establish all the pre-contractual issues/measures related to the aforementioned opportunities for collaboration.

In this case, the companies of this group, including B&B Italia, will act as Joint Data Controllers. Please see Clause 1 for a complete list of the companies in the group and to access the contents of the Joint Data Control Agreement.

f. Without your consent – since the processing concerned is necessary to fulfil specific contractual obligations (Art. 6, paragraph 1, letter (b) of the GDPR – for the following purpose: the establishment, performance and management of specific commercial agreements that may be concluded between the company/business you work for and the companies that are part of the corporate group identified above.

In this case, the companies in this group will act as separate and autonomous Data Controllers or as Joint Data Controllers in the event that commercial agreements involving two or more companies of the same corporate group are concluded. Please see Clause 1 for a complete list of the companies in the group and to access the contents of the Joint Data Control Agreement.

g. Without your consent – since the processing concerned is necessary in order to fulfil specific legal obligations or to exercise a legitimate interest (Art. 6, paragraph 1, letters (c) and (f) of the GDPR) – for the following purpose: the correct fulfilment of specific obligations, including obligations related to accounting or taxes, as well as for the proper exercise of rights by the companies that make up the corporate group, including the right to defend themselves in the event of litigation.

In this case, the companies in this group will act as separate and autonomous Data Controllers.

 

5. Nature of Supplying Data and Consequences of Refusal

The nature of supplying your Data and the consequences of failure to supply the same are explained below, in relation to the purposes pursued as listed under Clause 4 above:

  • Supplying Data for the purposes set out under letter a. of the preceding Clause 4., even if optional, is necessary to correctly fulfil your specific requests and, therefore, failure to provide your Data will make it impossible for B&B to provide you with the information requested.
  • Providing the Data and the associated consent to their processing for the purposes set out under letter b. of Clause 4. above, even if optional, is necessary in order to correctly fulfil your request for the inclusion of your contact details in our database dedicated to companies and professionals, and therefore failure to provide them will prevent us from contacting you to respond with all the information and commercial information pertaining to your area of work, and furthermore to assess together the possibility of a professional collaboration between B&B Italia S.p.A. and the company/business you work for and/or to establish all the pre-contractual issues/measures related to the aforementioned opportunities for collaboration. Where consent is granted, you are entitled to withdraw it at any moment. Please note that withdrawing consent shall not prejudice the legality of the processing based on the consent you gave before withdrawal.
  • The provision of the Data for the purposes set out under letter c. of Clause 4. above, although optional, is necessary to correctly manage, for administrative and accounting purposes (within the corporate group concerned), the information related to you, and therefore failure to provide them could compromise the proper management of the administrative and accounting data that are directly related to you and/or the company/business you represent.
  • Providing the Data and the associated consent to processing them for the purposes set out under letter d. (i) and (ii) of Clause 4 is optional. However, your refusal and/or the provision of inaccurate and/or incomplete information could prevent the possibility of contacting you to provide you with information, commercial communications and promotions, including therein the completion of statistical and/or market studies and research. Where consent is granted, you are entitled to withdraw it at any moment. Please note that withdrawing consent shall not prejudice the legality of the processing based on the consent you gave before withdrawal.
  • Providing the Data and the associated consent to processing them for the purposes set out under letter e. of Clause 4 is optional. However, your refusal would prevent the companies in the same corporate group from contacting you as indicated under Clause 4 so that they can send you information and commercial communications pertaining to your area of work, as well as proposals for possible collaborations of a professional nature between the company/business you work for and the companies that make up the aforementioned group and/or to establish all the pre-contractual issues/measures related to the aforementioned opportunities for collaboration. Where consent is granted, you are entitled to withdraw it at any moment. Please note that withdrawing consent shall not prejudice the legality of the processing based on the consent you gave before withdrawal.
  • Providing the Data for the purposes set out under letters f. and g. is necessary, and your refusal could prevent the possibility of establishing and managing contractual relationships and make it impossible to fulfil specific legal obligations and exercise the rights held.


6. Processing Methods

Your Personal Data will be processed using suitable electronic and/or paper-based methods for reasons strictly connected to the purposes cited above and, in any event, in a manner that guarantees the security and confidentiality of the Data itself. B&B informs Data Subjects that no form of automated decision-making process will be used, with “automated decision-making process” meaning “a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her”.


7. Data Storage

The Data will be stored on/by means of servers/cloud systems located within the European Union and also by means of paper-based methods, which will be stored at the offices of B&B Italia S.p.A.

The time-scales for storing your Data in relation to the purposes pursued and as listed under the preceding Clause 4 are detailed below:

  • With regard to the purposes set out under letter a. of Clause 4. above, your Data will be processed and stored for the time strictly necessary to respond to your requests for information, and in any event for no more than 3 (three) months after the complete performance of your requests.
  • With regard to the purposes set out under letters b. and e. of Clause 4. above, your Data will be processed and stored in our database dedicated to companies and professionals for no longer than 5 (five) years from the time they are entered or from the last update, where applicable. In order to ensure the updating and accuracy of the Data, you may access your profile at any time and update the Data present or you can contact us using the methods detailed in Clause 14 below.
  • With regard to the purposes set out under letter d. (i) and (ii) of Clause 4. above, your Data will be processed and stored for no longer than 2 (two) years from when you gave and/or updated your express consent by means of the relevant Form on this Website. In order to ensure that the Data and any consent you gave are up-to-date and correct, you will be sent a specific communication every 24 months.
  • With regard to the purposes set out under letters c., f. and g. of Clause 4. above, your Data will be processed and stored in our database dedicated to companies and professionals for no longer than 10 (ten) years from the time of entry, unless a different retention time is required by the current laws for the sector to comply with specific legal obligations (e.g. where contracts are signed), or in the event that a dispute arises (e.g. litigation).

Upon expiry of the retention period, the Data will be deleted and eliminated from all paper-based and/or electronic media using secure methods and in full compliance with the legislation applicable at the time to the field of Personal Data protection, otherwise they will be made anonymous by B&B solely in order to perform statistical and/or historical analyses, therefore without any possibility for B&B and/or third parties to identify the Data Subjects concerned.


8. Security Measures

We care about protecting your information. Therefore, we endeavour to adopt all appropriate and reasonable measures to protect the personal information stored by us against improper use, loss or unauthorised access. For this reason, we have implemented a series of specific technical and organisational measures. Measures are included to handle any suspected Data breach.


9. Persons Authorised to Process Data

In order to perform the processing covered under this Policy, the following persons will have access to your Data:

a. The employees and collaborators working in the corporate departments of B&B Italia S.p.A. who have been assigned to pursue the aforementioned purposes, who have received prior authorisation and instruction to perform the processing and who have received adequate operational instructions in this context.

b. The suppliers of B&B Italia S.p.A. who provide services that are connected and essential to the aforementioned purposes, among which the following companies in particular: Jakala S.p.A., which provides, on behalf of B&B Italia S.p.A., Website planning, development, production and maintenance services; salesforce.com Italy S.r.l. as the owner of the Salesforce platform used by B&B under a dedicated licence; MailUp S.p.A., which on behalf of B&B Italia S.p.A. and through its platform, provides services for sending information and commercial notices; Adobe Inc., which on behalf of B&B Italia S.p.A. and through specific technologies, provides content management system services, which include the hosting services related to the Website.

These suppliers operate in virtue of specific Data processing agreements signed with B&B Italia S.p.A. A list of these third parties is always available at the Data Controller’s head office.

c. Consultants of B&B Italia S.p.A., who provide assistance with regard to legal, tax, accounting and organisational matters. These consultants act as Data Processing Contractors in virtue of specific data processing agreements signed with B&B Italia S.p.A. pursuant to the provisions of Art. 28 of the GDPR. A list of these third parties is always available at the Data Controller’s head office.

d. Companies that are part of the same corporate group, which according to the provisions of the preceding Clause 4, may receive your Data and act as autonomous and separate Data Controllers or as Joint Data Controllers in virtue of specific agreements. For full details on this subject, please refer to Clause 1.

 

10. Data Communication and Dissemination

The Data Controller is entitled to share your Data with supervisory bodies and/or judicial authorities, as well as with all other subjects in relation to which dissemination is mandatory by law for the performance of the purposes cited. Your Data will not otherwise be disseminated and/or shared.


11. Data Transfer

Personal Data will be managed and stored on/by means of servers/cloud systems located within the European Union, which belong to the Data Controller and/or to third party companies assigned and duly appointed as External Data Processing Contractors. In any event, it shall remain understood that a subsequent and possible transfer of the Data outside the European Union will be carried out in accordance with the applicable legal provisions and the decisions regarding adequacy adopted by the European Commission and also, if necessary and in the absence of decisions on adequacy, by concluding agreements that guarantee an adequate level of protection and/or by adopting the standard contractual clauses provided by the European Commission.


12. Rights of the Data Subject

In your capacity as Data Subject, you are entitled to exercise a series of rights in relation to the processing of Personal Data pertaining to you. A list of these rights is given below, however, for any further details, you may contact us via the methods indicated under Clause 13.

Your specific rights are:

The right to objection: this right enables you to object to us processing your Personal Data for one of the following four reasons: (i) for our legitimate interests; (ii) to perform a task in the public interest or to exercise an official permit; (iii) to send you direct marketing material; (iv) for scientific, historical, research or statistical purposes.

The right to withdraw consent: where we obtained your consent to processing the Personal Data for specific activities, you may withdraw said consent at any time with the consequent termination by us of the activity to which you had previously consented, unless we believe there is another reason that justifies continuation of the data processing for that purpose. In this case, we will inform you of the situation.

Requests for access to personal data: you are entitled at any time to request that we tell you which items of your Data we have in our possession and to ask that we amend, update or delete it. In this case, we could ask to verify your identity and obtain more information about your request. In providing you with access to the data we have, we will not charge you anything, unless your request is “clearly unfounded or excessive”. Should you request further copies of this information, we may charge you a modest amount for administrative expenses, where permitted by law. Where the law permits it, we may refuse your request. If we refuse your request, we will always tell you our reasons.

The right to deletion: you are entitled to request the deletion of the Personal Data under certain circumstances. In general, the right to request deletion and to obtain it depends on the existence of certain reasons, including: data that is unnecessary in relation to the purposes for which it was collected; Personal Data that was processed unlawfully; Personal Data that must be deleted due to a legal obligation established by the law of the European Union or its Member States and which is applicable to the Data Controller; the Data Subject revoked consent. This right cannot be exercised in cases where the Data is necessary for managing complaints.

The right to restriction of processing: you are entitled to request that processing of Personal Data be restricted under certain circumstances. This means that we will be able to continue only storing the Data and we will not be able to perform further processing until: (i) one of the circumstances listed below is resolved; (ii) you provide consent, or (iii) further processing for the institution, exercise or defence of legal rights, protection of the rights of another data subject or for reasons of notable public interest for the EU or one of its Member States is necessary. The circumstances in which you are entitled to request the restriction of the processing of the Personal Data are:

  • if you dispute the accuracy of the Personal Data we are processing. In this case, the processing will be restricted for the period in which the accuracy of the Data is being checked;
  • if you object to the processing of your Personal Data for our legitimate interests. In this case, you may request that your Data be restricted while we verify the reasons for their processing;
  • if the data processing is unlawful, but you prefer to restrict it instead of cancelling it; and
  • if we no longer need to process your Personal Data, but you still request it to institute, exercise or defend legal rights.

If we shared the Personal Data with third parties, we will inform them of the limitation to processing, unless that is impossible or involves disproportionate effort. We will certainly contact you before removing any limitations to the processing of the Personal Data.

The right to correction: you are entitled to request that we correct any inaccurate or incomplete Personal Data that we hold. If we shared the Personal Data with third parties, we will inform them of the correction, unless that is impossible or involves disproportionate effort. Where appropriate, we will also tell you the identity of the third parties with whom we shared the imprecise or incomplete Data. If we deem it reasonable not to comply with your request, we will explain the reasons for our decision to you.

The right to data portability: if you so wish, you are entitled to transfer the Personal Data from one data controller to another. To enable you to complete this operation, we will give you your Data in a common, machine-readable and password-protected format so that you can transfer them to a different online platform. The right to data portability is applicable to: (i) Personal Data processed by us automatically (or rather, without any human intervention); (ii) Personal Data supplied by you; and (iii) Personal Data processed by us on the basis of your consent or to fulfil a contract.

The right to lodgee a complaint to a supervisory body: you are entitled to lodge a complaint with a local supervisory body.


13. Ways to Exercise Rights

To exercise the rights set out under the preceding Clause 12, you can write to the Data Controller at the following addresses: B&B Italia S.p.A. - Strada Provinciale Novedratese 32, No. 15, 22062 – Novedrate (Como); email: privacy@bebitalia.com .

Please be informed that if there are other Data Controllers or Joint Data Controllers as per this Privacy Policy, the same rights set out under Clause 12 may be exercised with respect to each of them using the contact details and methods that will be provided by them within a reasonable time of receiving the data or when contact is first made or by referring to the instructions given in the Joint Data Control Agreement cited under Clause 1.


14. Amendments to this Privacy Policy

This Privacy Policy may be amended. We therefore recommend that you check this policy regularly and refer to the most recent version.

If you do not accept the changes made, you can cancel your registration at any time via the previously completed Form directly on the Website or you can amend and/or withdraw the consent previously given by accessing the completed Form or you can contact us at any time using the methods detailed under Clause 13 above.


Last updated: 22 July 2021