Privacy Policy

Privacy Policy

Policy version: 04.00Last updated:

This is a courtesy translation. In case of any discrepancy, the Italian version prevails.

This page describes how the website is managed with regard to the processing of the personal data of the users who consult it.

This notice is provided pursuant to Article 13 of Regulation (EU) 2016/679 ("GDPR") and the applicable national legislation to those who interact with the web services of HO.BAG CORPORATE SRL, accessible electronically starting from the address www.hobagsrl.com, which corresponds to the home page of the official website of HO.BAG CORPORATE SRL.

This notice is provided only for the website of HO.BAG CORPORATE SRL and its subdomains, and not for any other external websites consulted by the user through links that may be present on the site.

This notice is also based on Recommendation No. 2/2001 which the European data protection authorities, meeting in the Working Party established by Article 29 of Directive 95/46/EC, adopted on 17 May 2001 to identify certain minimum requirements for the online collection of personal data and, in particular, the methods, timing and nature of the information that data controllers must provide to users when they connect to web pages, irrespective of the purpose of the connection.

Who processes personal data

The Data Controller, i.e. the entity that determines the purposes and means of the processing of personal data, is HO.BAG CORPORATE SRL, with registered office at Via Celtica, 31/33 - 31020 San Vendemiano (TV).

Types of data processed, purposes and legal basis of the processing

Browsing data

The computer systems and software procedures used to operate this website acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.

This information is not collected in order to be associated with identified data subjects but, by its very nature, could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment.

These data are used solely to obtain anonymous statistical information on the use of the site and to check that it is working properly, and are deleted after processing. The data may be used to establish liability in the event of hypothetical computer crimes against the site.

Data provided voluntarily by the user

The optional, explicit and voluntary sending of e-mail to the addresses indicated on this site, including by filling in specific forms, entails the subsequent acquisition of the sender's address, which is necessary in order to reply to requests, as well as of any other personal data included in the message.

The processing of personal data provided voluntarily is carried out for the following purposes and on the basis of the respective legal bases (Article 6 GDPR):

  • Handling requests for information on the services provided and on the products/solutions marketed directly by HO.BAG CORPORATE SRL, and handling reports of any kind. Legal basis: the User's request, made by sending a request and/or communication, including through the contact form.
  • Subscription to the newsletter service with informative and promotional content. Legal basis: the User's request, made by subscribing to the service. To stop receiving the newsletter, click on the link at the bottom of any e-mail relating to the newsletter service or, in case of problems, send a request to privacy@hobagsrl.it.
  • Sending informative, commercial and/or promotional communications by automated means of contact (newsletter) and traditional means of contact (telephone calls with an operator, post), using the contact details that the User may have provided. Legal basis: the User's consent. Consent is optional and may be withdrawn at any time, including partially with reference to specific means of contact.

Any specific notices will be progressively reported or displayed on the pages of the site set up for particular services provided on request.

Cookies, plugins and services for interaction with external platforms

Full information on the use of cookies and of services for interaction with external platforms (e.g. social networks) by this site is available at the following link: Cookie Policy of the website www.hobagsrl.com.

Nature of the provision of data

Apart from what is specified for browsing data, the provision of data by the User is voluntary. Failure to provide the data may make it impossible for HO.BAG CORPORATE SRL to provide the services requested.

Consent, where required for specific purposes, is always optional and, if given, may be withdrawn at any time by sending a request to the following address: privacy@hobagsrl.it.

Disclosure of data

Without prejudice to disclosures and dissemination carried out in compliance with legal obligations, all data collected and processed may be disclosed to:

  • Parties to whom the data must be disclosed for the performance of a contract to which the Data Subject is a party or for the implementation of pre-contractual measures taken at the Data Subject's request, as well as, in general, for the pursuit of the purposes set out in this notice;
  • Parties that carry out processing on behalf of the Data Controller as Data Processors pursuant to Article 28 GDPR, such as, by way of example only and not limited to: parties that provide services for the management of the information system and telecommunications networks (including e-mail and newsletter delivery). The complete and up-to-date list of Data Processors may be obtained by those entitled, simply upon request at the Data Controller's registered office;
  • Parties authorised to access the data under the applicable legislation and/or to whom the data must be disclosed in compliance with legal obligations.

Personal data may be processed by the employees and collaborators assigned to the relevant offices of the Company, who are expressly authorised to carry out the processing in accordance with Article 29 of the GDPR and the applicable national legislation.

Transfers of data abroad

Data are not transferred outside the European Union, with the exception of those collected by the Google Analytics statistics service (Google Ireland Ltd), which may involve their transfer to Google LLC in the United States. The transfer takes place on the basis of the European Commission's adequacy decision of 10 July 2023 (EU-U.S. Data Privacy Framework), to which Google LLC adheres, and only with the user's prior consent to statistics cookies. Any use of other technological solutions involving the transfer of data to non-European third countries may take place exclusively in compliance with Articles 44 et seq. GDPR (in the presence of adequacy decisions and/or appropriate safeguards, always provided that data subjects have enforceable rights and effective legal remedies, or provided that, in each case, one of the specific derogations provided for by law applies).

Data retention periods

Data are retained for a period no longer than is necessary to achieve the purposes set out in this notice. In particular, the data provided will be kept in our archives according to the following parameters:

  • Data provided voluntarily by the user: until the service has been provided or in accordance with any deadlines laid down by law;
  • Data processed for sending the newsletter: until unsubscription;
  • Data processed for informative, promotional and commercial purposes: 24 months.

In relation to the specific limitation periods provided for by law, data necessary to establish, exercise or defend a legal claim may be subject to longer retention periods.

Checks on whether the stored data have become obsolete in relation to the purposes for which they were collected are carried out periodically.

Rights of the data subject

The Data Subject has the right to obtain, in the cases provided for, access to their personal data and the rectification or erasure thereof, or the restriction of the processing concerning them, or to object to the processing (Articles 15 et seq. of the GDPR), by contacting the Data Controller at the following e-mail address: privacy@hobagsrl.it.

Right to lodge a complaint

A Data Subject who considers that the processing of their personal data infringes the provisions of GDPR 2016/679 has the right to lodge a complaint with the supervisory authority of the European Union Member State in which they habitually reside or work, or of the place where the alleged infringement occurred, as provided for by Article 77 GDPR 2016/679, or to take legal action before the competent courts.

For further information you can contact the Data Controller:

HO.BAG CORPORATE SRL — Via Celtica, 31/33 - 31020 San Vendemiano (TV) — Tel. +39 0438209043 - Fax +39 0438209907 — e-mail: privacy@hobagsrl.it