Privacy Policy

Dear User,

Thank you for visiting our site, www.bianchimilano.com (the “Website”)!

This policy (the “Policy”) describes how we at F.I.V. E. Bianchi S.p.A. (“Bianchi” or “we”) process your personal data, in compliance with Regulation (EU) 2016/679 (the “GDPR”), Italian Legislative Decree 196/2003, as amended (the “Privacy Code”), the relevant provisions and guidelines issued by national and European data protection authorities, as well as applicable national and European law (jointly, the “Applicable Law”).

Some of our services may be subject to specific policies, in which case we will provide you with all the relevant information, as and when required. 

For further information on how this Website uses cookies, see our Cookie Policy

Last updated: August 2023

1. About us

The Data Controller is F.I.V. E. Bianchi S.p.A., with registered office at Via Delle Battaglie, 5 - 24047 Treviglio (BG), Italy, tax code and VAT no. 01897810162. 

Questions regarding how personal data is processed can be mailed to our office or emailed to privacy@bianchi.com.

2. What personal data we process 

We will process - by both manual and automated means - only the data which is strictly necessary to achieve the purposes described below under paragraph 3. 

Specifically, we will process the following common personal data: your identification data (i.e., your first name and last name), the password you chose when creating your account, your contact data (i.e., email address and telephone number, home address), your size, the data required for payment and invoicing purposes, as well as any personal data (of a common nature) contained in the “contact” and support request forms and, where relevant, data relating to your business activity (including company name and VAT number). 

In addition, we will process your browsing data (such as, for example, your IP address, details about the web browser you use) in accordance with this Policy and our Cookie Policy

3. The purposes for which we process your personal data

The personal data referred to in paragraph 2 above will be processed for the following purposes:

  • (i) Account creation and use of the Website: your personal data is processed in order to allow you to create your personal account (and manage it) and to use all the features available on the Website, as well as receive communications regarding the use of the Website (including communications relating to: a forgotten password, order creation and order notifications);
  • (ii) Purchases and related services: your personal data is processed in order to allow you to purchase Bianchi products and/or accessories on the Website and to provide you with all the services of a contractual nature envisaged by the general terms and conditions of sale , including customer care (accessible via the Website) and after-sales services[4] ;[5] 
  • (iii) Assistance and requests for information: your personal data is processed in order to handle and respond to any requests you may have made through the contact channels indicated on the Website;
  • (iv) Direct marketing: your personal data will be processed in order to send you information and commercial communications, newsletters and/or market research on Bianchi products and/or those of Bianchi’s business partners, such as promotions, using automated tools (e.g., email), but without sharing your data with third parties;
  • (v) Profiling: your personal data will be processed in order to analyse and process information about you for the purposes of creating a profile of your preferences, habits, consumer choices and/or browsing behaviour and thus to offer you experiences and communications which are in line with your interests;
  • (vi) Fulfilling legal obligations: your personal data is processed in order to fulfil our legal obligations and to respond to any requests made by a competent authority;
  • (vii) Protection of rights: your personal data is processed in order to protect our rights and those of our employees, contractors and partners, both in and out of court.

4. The legal basis on which we process your personal data and the nature of providing such data

In order to achieve the purposes indicated above under paragraph 3, Bianchi will process the personal data under paragraph 2 in compliance with the following legal bases:

To perform a contract or pre-contractual measures (Article 6(1)(b) of the GDPR)

Personal data collected for the purposes (i)-(iii) will be processed as necessary in order to perform a contract to which you are party and/or to perform pre-contractual measures adopted at your request. 

Communicating the personal data collected for these purposes is a necessary requirement in the performance of the contractual relationship with Bianchi. As such, failure to communicate this data will make it impossible to conclude or even to continue a contractual relationship.

Consent (Article 6(1)(a) of the GDPR)

Data collected for purposes (iv) and (v) will only be processed with your freely-given, specific, informed and unambiguous consent. 

Providing your personal data for these purposes is not necessary in order to use the Website or to provide the services you request; however, failure to provide your consent - or should you revoke your consent once given - will not allow you to receive communications, including possibly profiled ones (depending on the consent given and/or revoked), on Bianchi’s commercial initiatives. You may revoke your consent at any time, without prejudice to the lawfulness of the processing done and based on your consent before your withdrawal, by clicking the unsubscribe link which can be found at the bottom of each communication or by sending an email to the address indicated in this Policy. Any refusal to grant consent, or any subsequent withdrawal of consent, shall only prevent you from receiving commercial communications from Bianchi, including possibly profiled ones, and it shall not prevent you from continuing to use the Website and its features.

To fulfil a legal obligation (Article 6(1)(c) of the GDPR)

Personal data collected for purpose (vi) will be processed as necessary to fulfil a legal obligation to which Bianchi is subject.

Communicating the personal data collected for these purposes is a necessary requirement in the performance of the contractual relationship with Bianchi. As such, failure to communicate this data will make it impossible to conclude or even to continue a contractual relationship.

To pursue a legitimate interest (Article 6(1)(f) of the GDPR)

Personal data collected for purpose (vii) will be processed since such processing is necessary for the purposes of pursuing Bianchi’s legitimate interests or those of a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a minor.

Failure to provide the necessary data may make it impossible for the data subject to conclude or even to continue a contractual relationship with Bianchi. In any case, data subjects have the right to object, at any time, to the processing of their personal data, subject to Bianchi’s right to demonstrate the existence of compelling legitimate grounds for processing that override the data subject’s interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

5. How long your personal data is kept

Your personal data - processed for the purposes set out above under paragraph 3 - will be kept no longer than is strictly necessary to achieve the purposes for which such data was collected. At the end of the storage period, your personal data will be erased or rendered anonymous.

Specifically, your personal data is stored in accordance with the terms and the criteria specified below:

  • For purposes (i), (ii), (vi) and (vii): personal data collected for these purposes will be kept as long as is strictly necessary to achieve these purposes, unless data needs to be kept longer in order to comply with a legal obligation, an order from a competent authority or to defend our rights.
  • For purpose (iii): data collected to fulfil your request will be kept until your request is fulfilled, unless it needs to be kept longer in order to comply with a legal obligation, an order from a competent authority or to defend our rights.
  • For purpose (iv): unless you revoke your consent, your personal data will be processed in order to send you direct marketing commercial communications for 24 months after being recorded in Bianchi’s systems.
  • For purpose (v): unless you revoke your consent, your personal data will be kept for a period not exceeding 1 (one) year after collection.
    More detailed information regarding data storage periods is available upon request. Use the contact details given in this Policy to reach Bianchi. 

6. Who we share your data with 

In pursuing the purposes set out in paragraph 3 of this Policy, your personal data may be processed by the following categories of parties:

  • a. Authorised Bianchi personnel, who are given special instructions regarding processing;
  • b. Third parties who carry out activities connected to or instrumental to Bianchi’s business, such as, for example, suppliers entrusted with the maintenance and development of the computer system, email providers, couriers, forwarders, payment service providers to manage transactions within the Website, insurance companies, legal and/or tax consultants;
  • c. Independent authorities, law enforcement agencies or judicial and administrative authorities for their institutional purposes within the limits provided for by law, as well as to establish and prosecute criminal offences, to prevent and protect against threats to public safety, to enable Bianchi to establish, exercise or defend legal claims, as well as for other reasons related to protecting the rights and freedoms of others. 
  • These parties will act, as the case may be, as autonomous data controllers or as data processors, in the latter case by virtue of a specific, written agreement covering the processing of personal data and following the instructions given by the Data Controller. The list of recipients who might receive your personal data is available upon request. Use the contact details given in this Policy to reach Bianchi.

7. Transferring personal data outside the European Economic Area

If necessary for the purposes set out above under paragraph 3, your personal data may be transferred outside the European Economic Area (“EEA”) in accordance with Applicable Law and, in particular, in accordance with the safeguards set out in the GDPR (e.g., standard contractual clauses, technical, organisational and/or contractual measures) that are appropriate to ensure an adequate level of data protection and, in any event, essentially equivalent to the level guaranteed within the EEA. 

The list of countries outside the EEA to which Bianchi may transfer your personal data is available upon request. Use the contact details given in this Policy.

8. Your rights

Subject to Applicable Law, you may exercise the following rights: 

  • The right to obtain confirmation from Bianchi as to whether or not personal data concerning you is being processed, and, where that is the case, obtain access to your personal data and the information required by Applicable Law (right of access, Article 15 of the GDPR); 
  • The right to have inaccurate personal data concerning you rectified and to have incomplete personal data completed (right to rectification, Article 16 of the GDPR); 
  • The right to have personal data concerning you erased (right to be forgotten, Article 17 of the GDPR);
  • The right to obtain from Bianchi restriction of processing (right to restriction of processing, Article 18 of the GDPR); 
  • The right to receive, in a structured, commonly used and machine-readable format, the personal data concerning you and provided to Bianchi, and the right to transmit such data to another data controller without hindrance from Bianchi (right to data portability, Article 20 of the GDPR);
  • The right to object, at any time, to the processing of personal data concerning you on legitimate grounds (right to object, Article 21 of the GDPR).
  • The right to revoke any consent given by following the instructions contained in any marketing communication as well as by sending a request to the contact details indicated in this Policy.

Furthermore, if you believe that your personal data has been processed in breach of the principles laid down in Applicable Law, you may lodge a complaint with a judicial authority or with the Data Protection Authority in the Member State of your habitual residence, place of work or place of the alleged infringement. The competent authority in Italy is the Italian Data Protection Authority (the “Data Protection Authority”). More information on how to lodge a complaint is available on the Data Protection Authority’s website at http://www.garanteprivacy.it.

In order to exercise your rights, you may contact Bianchi using the contact details indicated in paragraph 1, above.

9.     Amendments to this Policy

As well as in consideration of any future amendments that might be made to Applicable Law, Bianchi may supplement and/or update all or part of this Policy. It is understood that any amendments, additions or updates will be communicated in accordance with Applicable Law.