Disclosure on the processing of personal data (“Privacy Policy”) of pursuant to Art. 13 of Regulation (EU) 2016/679 and Leg. Dec. no. 196/2003 and subsequent amendments.

Updated at 12 June 2018

In compliance with the provisions set forth in Art. 13 of Regulation (EU) 2016/679 and in Legislative Decree no. 196/2003, the company Pelletterie Bianchi e Nardi SpA, headquartered in Scandicci, Via delle Fonti 2, identified by tax code and VAT number 00385830484, legally represented by its pro-tempore attorney, Mr. Gabriele Bianchi, acting as Personal Data Controller,


its kind Users (hereinafter referred to as the “Data Subject(s)”) to read and understand this disclosure on the processing of personal data (“Privacy Policy”) before navigating its website


The disclosure is made exclusively for this website and exclusively concerns the role of Pelletterie Bianchi e Nardi SpA as Personal Data Controller for this website and not for other websites which might be accessed by the User through links or directly through social media available in the website, and its purpose is to inform the Users of the website how their personal data are collected and processed.


Any change or update to this Privacy Policy will be made available to all Users in the “Privacy” section of this website.

The changes will apply from the date of their publication on said website. If the data subject is not willing to accept any change, he or she may discontinue their use of the website.

Therefore, data subjects are invited to periodically consult the dedicated webpage.

  1. Purpose of the personal data processing

The data collected in this website will be processed by the Data Controller in compliance with necessity, lawfulness, fairness, proportionality and transparency principles with the following purposes:

  • Permit the use of the website;
  • Fulfil legal requirements;
  • Send emails by using contact forms;
  • Subscribe to the newsletter.


  1. Disclosure

The Personal Data Controller points out that this disclosure can be freely and easily consulted on the website,, in the dedicated section, or by sending a request using the contact details provided in the following article called “Personal Data Controller “.

  1. Processing of “special categories of personal data” and “data relating to criminal convictions”

Within the meaning of Art. 9 of Regulation (EU) no. 2016/679, merely by way of example, “special categories of personal data” are defined as those revealing the racial or ethnic origin, health state, trade union membership, political opinion and, in any case, data revealing the religious of philosophical beliefs of the subject, or his/her role, activity or position in a trade union, as well as their biometric data or sexual orientation.

Within the meaning of Art. 10 of Regulation (EU) no. 2016/679, merely by way of example, personal data relating to criminal convictions and offences are defined as those data relating to criminal convictions, criminal offenses and security measures.

All the data belonging to the categories referred to in Articles 9 and 10 of the Regulation relating to a data subject are processed exclusively to fulfil the obligations indicated in point 1) above, subject to the possibility for the data subject to exercise his/her rights under Articles 15, 16, 17,18, 20, and 21 of Regulation (EU) no. 2016/679, as indicated in point 11), as specified in point 12).

  1. Processing

The processing of data takes place with the aid of electronic and/or paper instruments according to logics that are strictly related to the purposes mentioned above and, in any case, by adopting appropriate procedures and organizational measures and technologies to protect the security, confidentiality, relevance and non-excessiveness of data.

The processing of data will be carried out by the personnel directly hired by the Data Controller and/or by natural or legal persons specifically designated and charged with data processing by the Data Controller, whose contact details shall be made available at the express request of the data subject at the addresses provided in point 7).

  1. Legal basis

The personal data processed by the Data Controller are voluntarily made available by Users during their navigation of the website or through emails, filling of appropriate forms and the affixing of the relative requested flags.

  1. Compulsory or optional nature of the provision of personal data

We inform Users you that provision of their personal data is compulsory, as a refusal to provide them would imply the consequence of making it impossible for them to continue visiting the website.

The data subject, by browsing in this website, gives his/her voluntary consent to the provision and processing of his/her personal data and navigation details.

Sending and transmitting both voluntary and optional communications by filling the specific forms available in the website or by email implies the acquisition of the personal data provided by the data subject with the purpose of allowing communications and submitting any request. Voluntary and optional registration to the Newsletter service involves the acquisition of the personal data provided by the data subject, which will only be used for the purpose of sending the Newsletter and processed in compliance with this disclosure.

  1. Personal Data Controller

The Personal Data Controller is the company Pelletterie Bianchi e Nardi SpA, headquartered in Scandicci, Via delle Fonti 2, identified by tax code and VAT number 00385830484, legally represented by its pro-tempore attorney, Mr. Gabriele Bianchi – Tel. 055/722511 – Fax 055/721261

More specifically, for any disclosure and/or notification regarding the processing of personal data, the Data Controller provides the email address, as well as the certified email address

An updated list of the outsourced data processors charged with the processing of personal data is made available for data subjects at the Data Controller’s headquarters upon request to be submitted to the addresses specified above.

  1. Data Protection Officer

The company Pelletterie Bianchi e Nardi SpA has appointed a Data Protection Officer: YES □*   NO □

  1. Disclosure and dissemination of the data collected

The data provided may in no case be disclosed or disseminated to third parties, except after obtaining prior specific consent from the data subject and, in any case, only to the extent necessary for the fulfilment of the purposes better specified in point 1).

Disclosure to third parties other than the Data Controller, corporate and outsourced Data Processor(s), and any designated person or entity, as well as to the external or foreign persons or entities used by the Data Controller for the conduction of instrumental or ancillary activities required for the management of corporate activities, including the providers of software solutions, web application, and storage services, even delivered through Cloud Computing systems, and used for this purpose, is permitted only for the purpose of performing transactions required for the precontractual or contractual relationship established and without prejudice to the subjects entitled to access the data by law, order or decision of judicial authorities, and, in any case, always in compliance with the guarantees required by Regulation (EU) no. 2016/679 and with the Italian Data Protection Authority’s guidelines, as well as by the Commission created in compliance with said EU Regulation.

  1. Retention period

6 The personal data of Data Subjects shall be preserved only for the time required to carry out the activities mentioned in point 1) above, for a minimum period of 12 (twelve) months and for a maximum period not exceeding 10 (ten) years, in any case subject to the safeguards provided for sensitive data in respect of which the Data Controller shall take care to regularly check their strict relevance, non-excessiveness and indispensability with respect to the still ongoing or even ceased processing. All this subject to the defensive needs of the Personal Data Controller, which may extend the retention period for the personal data that are strictly necessary and indispensable for the management of any litigation that may be initiated.

  1. Data Subject Rights

Data Subjects may, at any time, exercise their rights with the Personal Data Controller pursuant to Articles 15, 16, 17, 18, 20, and 21 of Regulation (EU) no. 2016/679, which is summarized below for simplification:

Art. 15 – Right of access by the data subject: The data subject shall have the right to access the personal data concerning him or her and the related processing. This right consists in the possibility to obtain confirmation as to whether or not personal data concerning him or her are being processed or request and receive a copy of said processed personal data.

Art. 16 – Right to rectification: The data subject shall have the right to obtain from the Controller the rectification of inaccurate personal data concerning him or her without undue delay. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Art. 17 – Right to erasure (“right to be forgotten”): The data subject shall have the right to ask the Personal Data Controller to erase and no longer process personal data that concern him or her and, in some cases, where there is a reason, to obtain erasure without undue delay when the purpose of the processing no longer exists, consent has been revoked, opposition has been made to the processing or when the processing of the personal data that concern him or her is not otherwise compliant with the Regulation.

Art. 18 – Right to restriction of processing: The data subject shall have the right to restrict the processing of his or her personal data in case of inaccuracies, objection or as an alternative measure to erasure.

Art. 20 – Right to data portability : The data subject, except in the event that the data are stored using non-automated processing (e.g. in paper format), shall have the right to receive the personal data that concern him or her in a structured, commonly used and machine-readable format, where reference is made to data directly provided by the data subject, with express consent or based on a contract, and to request that said data are transmitted to another controller, if technically feasible.

Art. 21 – Right to object: The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her.

The data subject, however, has the right to submit a complaint to the supervisory authority of the State, as well as to introduce an appeal to the competent Judicial Authority for the protection of his or her rights.

  1. Exercise of rights

If the data subject wishes to exercise one of his or her rights listed above, he or she shall submit the request directly to the Data Controller at the addresses indicated in section 7), without prejudice to the right to file a complaint to Data Protection Authority of the State or to appeal to the competent Judicial Authority.

! The data subject shall also have the right to revoke his or her consent at any time by sending a specific request to the Controller by using the addresses provided in section 7). In any case, the revocation of consent will not affect the lawfulness of the processing based on the consent given before the revocation.

¹The deadline for a reply to the data subject is, for all rights (including the right of access), 1 (one) month, extendable up to 3 (three) months in particularly complex cases; the Data Controller shall in any case acknowledge receipt of the request to the data subject within 1 (one) month from the request, including in the case of rejection.

The Controller shall assess the complexity of the data subject’s request and establish the amount of any contribution to be charged to the data subject, but only if the request is manifestly ungrounded or excessive.

  1. Minors

The Data Controller shall not carry out any processing of personal data of minors without parental consent.

  1. Data processed

The Data Controller collects data freely provided by the User by voluntary filling of the contact form and/or by sending an email or other notification.

While the User is navigating the website, certain personal data relating to the use of internet communication protocols are acquired (“Navigation Data”).

By way of example, Navigation Data include:

  • IP addresses: the Internet Protocol address is a numerical label that uniquely identifies a device, called a host, connected to a computer network that uses the Internet Protocol as the network protocol;
  • The domain names of the computers used by the Users who connect to the website;
  • The URI (Uniform Resource Identifier) addresses of the requested resources;
  • The time of the request, the method used to submit the request to the server;
  • The size of the file obtained in reply;
  • The numerical code indicating the status of the response given by the server (done, error, etc.);

and other parameters related to the operating system and the User’s computer environment.

These data are acquired with the exclusive purpose of allowing the usability of website and are collected in an aggregate form, but could, through processing and associations with data held by third parties, allow the identification of the Users.

Navigation Data are used for statistical purposes on the use of the website and to check its correct operation.

In particular, we specify that no cookies are used for profiling purposes, but only technical cookie are used for the purpose of improving the quality of navigation for Users in the website in question (Privacy Cookies).

Sending and transmitting information, both on a voluntary and on an optional basis, through the website or through emails, implies the acquisition of the personal data provided by the data subject with the purpose of allowing communication and process requests, this in compliance with the principles of this disclosure.

The User may subscribe to the website’s NEWSLETTER, as well as send requests for product customization through the dedicated “BESPOKE” section of the website. These operations require the Data Controller to acquire personal data such as addresses, emails or telephone numbers, which are necessary to fulfil the Users’s requests.

These data will be used only to fulfil the Users’ requests; only if necessary, they will be processed for purposes connected with contractual obligations, taxes and accounting; billing log; litigation and credit protection; fulfilment of legal obligations, and may be disclosed to third parties only in the event that this this is necessary for that purpose.

The User’s CONSENT is required for the processing of personal data relating to subscription to the Newsletter because, in both cases, the User’s contact details (email address and telephone number) may be used for direct marketing activities, such as sending by email advertising communications materials containing information content or promotional materials regarding the goods or services provided or promoted by the Data Controller or the Data Controller’s commercial partners. Refusal to give this consent does not imply any consequence for the accessibility of the website, except for non-reception of advertising and promotional materials.


Information About Cookies

A cookie is a small file of letters and numbers that our website places on your computer. These cookies allow us to distinguish you from other users of our website, which helps us to provide you with a good experience when you browse this website and also allows us to improve our site.  Some of the cookies we use are “analytics” cookies. They allow us to recognise and count the number of visitors and to see how visitors move around the website when they are using it. This helps us to improve the way our website works, for example by ensuring that users are finding what they are looking for easily.

Analytics Cookies

These cookies allow us to recognise and count our visitors and to see how visitors move around the website. This helps us to improve the way the website works, for example, by ensuring that users are finding what they are looking for easily. These cookies help us measure and improve site performance using a service provided by Google Analytics and Omniture.

Third Party Cookies

These cookies include social media tools to enhance interaction (such as Facebook and Twitter). If you are signed up to these sites their cookies may be set through our website.

Functional Cookies

These cookies are essential to basic site functionality. They are anonymous and are automatically deleted when you close your browser.

Blocking Cookies

You can block cookies by activating the setting on your browser that allows you to refuse the placing on your computer of all or some cookies. However, if you use your browser settings to block all cookies (including functional cookies) you may not be able to use all or parts of this website.  Instructions on how to change your browser settings are available at the following links:

Internet Explorer
Google Chrome
Mozilla Firefox

Further Informations

If you are still unsure about cookies, or you just want help to manage them, then
please visit

List Cookies

First cookies: Directive Check if the user decided not to display more informative message for cookies

Third __utma, __utmb, __utmc, __utmv, __utmz, __utmt: Google Analytics is a web analytics service provided by Google, Inc. (“Google”), to help us see how our website is used. In doing so information about your use of our website, including your IP address, may be transmitted to Google and stored on servers in the United States. The data collected by Google Analytics is used to analyse how frequently the same people revisit the website, how the website is found (from advertising or referring websites), and which pages are most frequently viewed. This information is combined with data from thousands of other users to create an overall picture of website use, and is never identified individually or personally and is not linked to any other information we store about you.

First _icl_current_language: Save Language