PRIVACY POLICY

(Information on the processing of personal data - art. 13 of EU Regulation 679/2016)

Last updated: June 2026

Introduction

Pursuant to European Regulation No. 679/2016 (hereinafter "Regulation" or "GDPR"), BELMAC SRL invites you to carefully read this Privacy Policy, which contains important information regarding the protection of your Personal Data. The processing of your Personal Data will be based on the principles of fairness, lawfulness, transparency, purpose and storage limitation, data minimization, accuracy, integrity, and confidentiality, in accordance with the provisions of the Regulation.

1) DATA CONTROLLER

The Data Controller is BELMAC SRL (hereinafter "BELMAC" and/or "Data Controller"), with registered office at Forlì - Via Balzella 71/B int 3, in the person of its pro tempore legal representative.

Contact email for data protection: Cette adresse e-mail est protégée contre les robots spammeurs. Vous devez activer le JavaScript pour la visualiser.

2) PERSONAL DATA PROCESSED

The following categories of Personal Data will be processed by BELMAC:

Personal details and identity data.
Contact details (email, shipping/billing address, phone number).
Navigation data and preferences collected through the cookie banner installed on the website (for which the user has the right to prior, granular acceptance or rejection; for more information, please refer to the Cookie Policy).
Bank and payment details necessary for managing the commercial relationship and orders.
Photographic images and/or video recordings (e.g., events or initiatives).
Data voluntarily shared by the user on the social network pages dedicated to BELMAC (Facebook, Instagram, etc.).

3) PURPOSES AND LEGAL BASIS OF PROCESSING

Your data will be collected and processed exclusively for the following purposes:

Performance of a Contract and pre-contractual measures (Art. 6, par. 1, letter b of the GDPR): Managing purchase orders on the website (both as a registered user and as a guest), processing payments, shipping products, and providing customer support communications (e.g., updates on order status). Providing this data is necessary to complete the purchase.
Website Registration and User Account: Creation and management of a personal profile to access exclusive services. The legal basis is the Consent of the data subject, freely expressed at the time of registration and revocable at any time.
Managing requests via contact forms: Responding to messages sent spontaneously by the user. The legal basis is the legitimate interest of the Data Controller to respond to requests or the adoption of pre-contractual measures.
Marketing and Newsletter (Additional Purposes): Subject to explicit and separate consent, sending promotional material, discounts, and participation in contests and events. The legal basis is the Consent of the data subject, freely revocable via the specific link at the bottom of the emails or by writing to the Data Controller.
Commercial Profiling: Subject to specific, optional, and granular consent (also issued through the cookie banner preferences), analyzing consumption habits to offer personalized promotions. The legal basis is the Consent of the data subject.

4) PROCESSING METHODS AND SECURITY

Processing is carried out both with the aid of electronic and automated tools and manually. The Data Controller adopts adequate technical and organizational measures to guarantee a level of security appropriate to the risk, preventing unauthorized access or data loss. Data is processed exclusively by trained and formally authorized personnel.

5) RECIPIENTS OF THE DATA

Your Personal Data will not be disseminated but may be made accessible or communicated to:

Internal employees and collaborators of BELMAC authorized to process the data.
Third-party companies performing outsourced activities on behalf of the Data Controller (e.g., web hosting providers, shipping and logistics services, banking intermediaries, legal and tax consultants), formally appointed as Data Processors pursuant to Art. 28 of the GDPR.
Judicial authorities or law enforcement agencies in cases provided for by law.
Data is stored on servers located within the European Union. Should transfers outside the EU become necessary, they will be regulated by Standard Contractual Clauses or the Data Privacy Framework.

6) DATA RETENTION PERIOD

Personal Data will be kept for the following periods of time:

Prospect data (requests without purchase): Retained for a maximum of 24 months from the last spontaneous contact.
Website Registration: Until the user requests deletion. In case of prolonged inactivity for 24 months, the account and related data will be removed, subject to prior notice.
Tax and contractual billing data: Mandatorily kept for 10 years from the date of the transaction for legal fiscal and administrative compliances.
Data for Marketing and Profiling: Kept respectively for a maximum of 24 months (marketing) and 12 months (profiling) from the date consent was granted, unless renewed or revoked early.

7) PROTECTION OF MINORS

BELMAC does not deliberately collect personal data from minors under 16 years of age. In the event that it becomes necessary to process data relating to minors, the Data Controller undertakes to collect the prior consent of parents or legal guardians.

8) RIGHTS OF THE DATA SUBJECT

At any time, the user may exercise their rights by sending a communication to the addresses indicated in point 10:

Right of Access (Art. 15): Obtain confirmation of the processing and access to one's data.
Right to Rectification (Art. 16) and Erasure/To Be Forgotten (Art. 17): Correct inaccurate data or request its permanent removal.
Right to Restriction (Art. 18) and Portability (Art. 20): Request the temporary blocking of processing or the transfer of data in a structured format.
Right to Object (Art. 21): Object at any time to processing for marketing or profiling purposes.
Right to Withdraw Consent: Withdraw the consent given at any time without affecting the lawfulness of the processing prior to withdrawal.
Right to Lodge a Complaint: Lodge a formal appeal with the competent Data Protection Authority (for Italy: www.garanteprivacy.it).

9) FEEDBACK MECHANISM FOR ACCESSIBILITY (European Accessibility Act)

In compliance with the directives of the European Accessibility Act, BELMAC is committed to making its website accessible to all users, including citizens with disabilities or functional limitations.

Should you encounter digital barriers, visual contrast issues, difficulty navigating via keyboard, or the absence of alternative tags for screen readers, you can send a detailed report to Cette adresse e-mail est protégée contre les robots spammeurs. Vous devez activer le JavaScript pour la visualiser., indicating the link to the page and the issue encountered. We commit to responding and mitigating the barrier within the terms provided by law.

10) PROCEDURES FOR EXERCISING RIGHTS

To exercise the rights listed above or to request the updated list of Data Processors, the user may write to:

Via Email: Cette adresse e-mail est protégée contre les robots spammeurs. Vous devez activer le JavaScript pour la visualiser.
Via Paper Mail: BELMAC SRL, Via Balzella 71/B int 3, 47122 Forlì (FC), Italy.