Privacy Policy

Information pursuant to Art. 13 GDPR

EU Regulation 2016/679 and Legislative Decree 196/2003

We inform you that your personal data will be processed in compliance with the applicable data protection legislation, EU Regulation 2016/679 (“GDPR”) and Legislative Decree 196/2003 as amended (“Privacy Code”).

Data Protection Officer (DPO)

The Company has appointed a Data Protection Officer (DPO), who can be contacted at the following email address:

luca.confalonieri@bongiornosrl.com

Categories of personal data processed

The following categories of data will be processed:

• Personal data of individuals who contact the Company through the website or other channels to request quotations or information.
• Corporate data of entities other than individuals involved in shipping requests or shipment management.
• Data relating to goods to be shipped.
• Data relating to pick-up and delivery locations.
• Data concerning the suitability of transport vehicles and drivers for shipments requiring specific authorizations/restrictions (e.g., ADR/IMO goods, oversized loads).
• Contact person data for quotations, shipping assignments, information requests, invoicing, payments, management of outstanding amounts and disputes.
• Data required to fulfil transport, customs or administrative obligations requested by Public Authorities, Customs, Carriers, Shipping Lines, Airlines, Customs Brokers, Insurance Companies, Banks, Transport Auxiliaries and Law Enforcement, both nationally, within the EU, and outside the EU.

Purposes and legal basis of the processing

Personal data is processed exclusively for the purposes indicated by the Data Controller.

The legal basis of the processing is:

• Consent;
• Execution of pre-contractual/contractual measures of which the data subject is a party;
• Compliance with legal obligations to which the Data Controller is subject;
• Protection of vital interests of the data subject or another natural person;
• Performance of a task carried out in the public interest or in the exercise of official authority;
• Pursuit of the legitimate interest of the Data Controller or third parties.

Methods of processing

Processing may be carried out with or without the use of manual, IT or electronic tools.

Appropriate measures are adopted to ensure the security and confidentiality of the data, in compliance with legal requirements.

No automated decision-making processes will be used during processing.

Provision of personal data

Providing personal data is strictly necessary for the purposes indicated.

Total or partial refusal to provide the data may result in the impossibility of performing the shipping service.

Communication of personal data

For the purposes indicated above, personal data may be communicated to:

• Authorized personnel pursuant to Art. 29 GDPR and Art. 2-quaterdecies of the Privacy Code;
• Third-party companies appointed as Data Processors pursuant to Art. 28 GDPR.

Transfer of data abroad

Personal data may be transferred to EU countries, non-EU countries or international organizations depending on the service requested.

In the event of transfers to non-EU countries, the data subject provides explicit authorization as an exception to Arts. 45 et seq. GDPR, due to the operational needs and territorial context related to the execution of the assignment.

Rights of the data subject

The data subject may exercise at any time the rights provided for in Arts. 15–22 GDPR, including:

• Access to personal data and information on purposes, categories of data, recipients and retention period;
• Rectification of inaccurate data or completion of incomplete data;
• Erasure of data in the cases provided by GDPR;
• Restriction of processing;
• Data portability to another Data Controller;
• Withdrawal of consent without prejudice to the lawfulness of processing based on consent before the withdrawal;
• Objection to processing pursuant to Art. 21 GDPR;
• Right to lodge a complaint with the Data Protection Authority (www.garanteprivacy.it).

How to exercise your rights

The data subject may exercise their rights by writing to the Data Controller or the DPO at the contacts indicated in this policy.

Data Controller Email: bongiornosrl@bongiornosrl.com

PEC: bongiornosrl@legalmail.it

DPO Email: luca.confalonieri@bongiornosrl.com

Cookies and tracking technologies

This website uses technical cookies and, with prior consent, analytics and marketing cookies. For details on categories, purposes and consent management, see the cookie banner on the site.

Technical and essential cookies: necessary for the website to function (e.g. language preferences, session). No consent required.

Analytics cookies (Google Analytics): used to analyze website usage in aggregate form. Activated only with consent to the 'Analytics' category.

Marketing cookies (Google Tag Manager, Google Ads): used to measure the effectiveness of advertising campaigns. Activated only with consent to the 'Marketing' category.

Campaign attribution cookie (_bt_attr): first-party cookie used to temporarily store attribution data from advertising campaign visits (e.g. campaign ID, ad group, keyword, device, landing page), in order to link a contact request to the relevant campaign. Does not contain personal user data. Duration: 30 days. Category: Marketing. Set only with consent to the 'Marketing' category.

Related technical data: when you submit a contact or quote request form, technical data related to your visit may be associated with the data you entered, such as: advertising campaign identifier, ad group, keyword, match type, device type, ad network, Google Ads geographical identifier, landing page, and acquisition date. This data does not contain personal information and is used solely to evaluate the effectiveness of advertising campaigns and improve our service.