PRIVACY POLICY

(Website Privacy Notice pursuant to Art. 13 of Regulation (EU) 2016/679 – GDPR)

Last updated: [DATE]

1. Data Controller

The Data Controller responsible for the processing of personal data collected through this website is:

Email: info@baytechnology.it

The Data Controller determines the purposes and means of processing personal data collected through this website.

2. Types of Personal Data Collected

When using this website, the following categories of personal data may be collected.

2.1 Data provided voluntarily by the user

Users may voluntarily provide personal data through the contact form or other communication channels. These may include:

• First name
• Last name
• Company name
• Email address
• Phone number
• Message content

This information is processed solely to respond to requests or provide information about the company’s products and services.

2.2 Data collected automatically

When visiting the website, certain information may be collected automatically through IT systems and protocols, including:

• IP address
• browser type and version
• operating system
• referring URL
• pages visited
• date and time of access
• interaction data with website pages

These data are used to ensure proper website operation and to improve the service.

2.3 Cookies and tracking technologies

The website uses cookies and similar tracking technologies.

These include:

• technical cookies necessary for website functionality
• analytical cookies (Google Analytics 4)
• marketing cookies (Meta Pixel)

More information is available in the Cookie Policy.

3. Purpose of Processing and Legal Basis

Personal data are processed for the following purposes:

3.1 Responding to user inquiries

Processing of data submitted through the contact form or email.

Legal basis:

Article 6(1)(b) GDPR – performance of pre-contractual measures requested by the user.

3.2 Website management and security

Processing of navigation data to ensure proper website operation and prevent misuse.

Legal basis:

Article 6(1)(f) GDPR – legitimate interest of the Data Controller.

3.3 Website analytics

Use of Google Analytics 4 to analyze website traffic and improve services.

Legal basis:

User consent (Article 6(1)(a) GDPR).

3.4 Marketing and advertising

Use of Meta Pixel for advertising performance measurement and marketing analysis.

Legal basis:

User consent (Article 6(1)(a) GDPR).

3.5 Download of catalog or informational materials

When users download the product catalog, personal data may be processed to provide requested information.

Legal basis:

Article 6(1)(b) GDPR – pre-contractual measures.

4. Methods of Processing

Personal data are processed using electronic and digital tools in accordance with principles of:

• lawfulness
• fairness
• transparency
• data minimization
• purpose limitation

The Data Controller adopts appropriate technical and organizational measures to ensure data security and protection.

5. Data Recipients

Personal data may be processed by:

• authorized personnel of Bay Technology
• hosting providers located within the European Union
• IT service providers
• analytics and marketing service providers (Google and Meta)
• other service providers necessary for website operation

These entities may act as Data Processors pursuant to Article 28 GDPR.

6. International Data Transfers

Some services used on the website (such as Google Analytics and Meta Pixel) may involve the transfer of data outside the European Economic Area.

Such transfers are carried out in accordance with GDPR provisions and are based on:

• Standard Contractual Clauses (SCCs)
• other appropriate safeguards adopted by the service providers

7. Data Retention

Personal data are retained only for the time necessary to fulfill the purposes for which they were collected.

Indicative retention periods:

• Contact requests → up to 12 months
• Technical logs → up to 12 months
• Analytics and marketing cookies → according to the retention period defined in the Cookie Policy

After this period, personal data will be deleted or anonymized.

8. Rights of the Data Subject

Under Articles 15–22 GDPR, users have the right to:

• access their personal data
• request rectification of inaccurate data
• request erasure of personal data
• request restriction of processing
• request data portability
• object to processing
• withdraw consent at any time

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

9. Right to Lodge a Complaint

Users have the right to lodge a complaint with the competent supervisory authority.

In Italy:

Garante per la Protezione dei Dati Personali

https://www.garanteprivacy.it

10. How to Exercise Your Rights

Requests regarding personal data processing can be sent to:

info@baytechnology.it

The Data Controller will respond within one month as required by GDPR.

11. Changes to this Privacy Policy

The Data Controller reserves the right to modify this Privacy Policy at any time.

Updates will be published on this page with the revised date.

Users are encouraged to review this policy periodically.