Privacy Policy | Botworks Automation

Integra Global Privacy Policy.

Who is the Data Controller? ^[1]

Integra Global S.r.l., with legal headquarters at Via Dante, 70– 20099 Sesto San Giovanni (MI) (VAT Number: 13435690964) (hereinafter referred to as "Data Controller")

How can I contact them?

The company's contact details are:

Email: info@botworksautomation.com

Certified Email (PEC): intglobal@legalmail.it

Address: Via Dante, 70– 20099 Sesto San Giovanni (MI)

1. Introduction
According to the European General Data Protection Regulation (GDPR), legal entities are not considered data subjects, and therefore the regulation does not apply to them. However, if personal data related to an individual is included in the context of collecting company data, that individual will be considered a data subject under the mentioned regulation, and the applicable legal framework will apply.

2. What processing activities are carried out through the website? What are the legal bases, purposes, and retention periods?

*REGISTRATION/LOGIN*	*PURPOSE*	The purpose of data processing is to register on the site and receive a personalized quote for the purchase you wish to make.
	*LEGAL BASIS*	Consent of the Data Subject. In the case of a dispute, the data will be processed to take legal action and/or defend in court based on the legitimate interest of the Data Controller.
	*DATA RETENTION PERIOD*	The data will be processed until consent is revoked. If the account remains inactive for 7 years, we will send you an email to see if you are still interested in keeping it active; otherwise, the account will be deleted. The data will be processed for a longer period in case of a dispute.
	*OTHER INFORMATION*	Registration is not required to make purchases, as it is also possible to proceed in "guest" mode.

*PURCHASE*	*PURPOSE*	The primary purpose of data processing is to allow you to purchase and receive the requested product and, additionally, it is necessary for the fulfillment of legal obligations (including accounting and tax obligations). The data may be needed in case of disputes regarding the correct fulfillment of the contract.
	*LEGAL BASIS*	Performance of a contract and the consequent fulfillment of legal obligations incumbent on the data controller. In case of a dispute, the data will be processed to act or defend in court, which corresponds to the legitimate interest of the data controller.
	*DATA RETENTION PERIOD*	The data will be deleted after 10 years from the fulfillment of the contract. They may be retained longer only in the event of disputes and thus to exercise or defend a right based on the legitimate interest of the data controller.
	*OTHER INFORMATION*	Providing data is mandatory, and if refused, it will not be possible to purchase the requested products.

*FAST CHECKOUT PURCHASE*	*PURPOSE*	The primary purpose of data processing is to allow you to purchase and receive the purchased product. Additionally, the data is necessary for fulfilling legal obligations (including accounting and tax obligations). Lastly, they may be needed in case of disputes regarding the correct fulfillment of the contract.
	*LEGAL BASIS*	Performance of a contract and the consequent fulfillment of legal obligations incumbent on the data controller. In case of a dispute, the data will be processed to act or defend in court, which corresponds to the legitimate interest of the data controller.
	*DATA RETENTION PERIOD*	The data will be deleted after 10 years from the fulfillment of the contract. They may be retained longer only in the event of disputes and thus to exercise or defend a right based on the legitimate interest of the data controller.
	*SOURCE AND CATEGORIES OF DATA PROCESSED*	In the case of a purchase through fast checkout, personal data, shipping information, billing information, and contact details will be imported from the website's database via user login (Art. 14 GDPR).

*BACK IN STOCK*	*PURPOSE*	The purpose of data processing is to inform you when a sold-out product becomes available for purchase again.
	*LEGAL BASIS*	Execution of pre-contractual measures carried out at the request of the data subject.
	*DATA RETENTION PERIOD*	Up to 18 months from the collection date.
	*OTHER INFORMATION*	The User is free to provide the requested data, as there is no legal obligation to provide it. However, if the user chooses not to provide the data marked as essential, the Data Controller will not be able to achieve the stated purpose.

*CONTACT US*	*PURPOSE*	The purpose is to offer the User the possibility to contact the Data Controller.
	*LEGAL BASIS*	Execution of pre-contractual measures carried out at the request of the data subject.
	*DATA RETENTION PERIOD*	12 months from the last communication between the parties.
	*OTHER INFORMATION*	Providing the data is optional, but failure to provide it could make it impossible to contact the Data Controller.

*TRANSACTIONAL EMAILS*	*PURPOSE*	The purpose of data processing is to send you information regarding the purchase made or to be made.
	*LEGAL BASIS*	Contractual fulfillment
	*DATA RETENTION PERIOD*	Until the order is delivered or for a longer period in case of dispute
	*OTHER INFORMATION*	Transactional emails are sent to allow better management of orders.

NEWSLETTER/ DEM including automated methods (email, SMS, WhatsApp, social) or traditional ones	*PURPOSE*	The purpose of data processing is to send you newsletters and DEM through traditional methods or also through automated methods (email, SMS, WhatsApp, social networks).
	*LEGAL BASIS*	Consent given by the Data Subject pursuant to Art. 6, para. 1, letter a) GDPR and 130 para. 1-2 D.Lgs. 196/03
	*DATA RETENTION PERIOD*	5 years from the last sending.
	*OTHER INFORMATION*	Consent can be withdrawn at any time. The User is free to provide the requested data, as there is no legal obligation to provide it. However, if the user chooses not to provide the data marked as essential, the Data Controller will not be able to achieve the indicated purpose.

NEWSLETTER/ DEM "Softspam"	*PURPOSE*	The purpose of data processing is to send you newsletters and DEM. In case of purchase of our product, your data will be exported to a CRM for sending commercial information on products similar to those purchased.
	*LEGAL BASIS*	In case of purchase, your consent is not required pursuant to Art. 130 para. 4 D.Lgs. 196/03.
	*DATA RETENTION PERIOD*	5 years from the last sending.
	*OTHER INFORMATION*	It is possible to opt out at any time.

MARKETING AND PROFILING THROUGH DIGITAL PLATFORMS	*PURPOSE*	The purpose of data processing is to show marketing content based on your interests, as identified by your interactions on our site or social media. This includes using digital platform retargeting tools to spread targeted advertising messages.
	*LEGAL BASIS*	Consent which can be obtained through various methods: Through Cookies on our Site: Your consent to marketing and profiling cookies is collected through the cookie settings on our site. For Custom Audience CRM Campaigns (Prospecting and Retargeting): For these campaigns, we obtain your explicit consent to use your contact data (e.g., email address) for marketing purposes. Interaction with Social Pages: If you have given consent to the use of profiling cookies on our Site, we can process your contact data and the information communicated during interaction with Social Pages. We use this information, in accordance with your privacy settings on social media, to show personalized marketing ads.
	*DATA RETENTION PERIOD*	The data will be retained until consent is revoked through cookie settings.
	*OTHER INFORMATION*	Consent obtained through Cookies on our Site: The User can manage or withdraw this consent at any time, as described in our Cookie Policy. Please note that cookies may be both first-party and third-party, and thus installed, through us, directly by Meta. Consent obtained for Custom Audience CRM Campaigns (Prospecting and Retargeting): This consent allows us to process your data to identify lookalike audiences and to show targeted advertising on social media and other digital platforms. In the case of simple user segmentation, your consent is not required.

*CHAT*	*PURPOSE*	The purpose of data processing is to receive information and assistance via chat.
	*LEGAL BASIS*	Consent. Only in case of dispute, the data will be processed based on the legitimate interest of the Data Controller.
	*DATA RETENTION PERIOD*	We will process the data for the time necessary to respond to requests and then delete the data. They may be kept longer only in case of possible disputes and thus to exercise or defend a right based on the legitimate interest of the data controller. Data obsolescence is checked every 12 months.
	*OTHER INFORMATION*	Providing data is optional and not always necessary. It is evident that in the absence of required data, it will not be possible to provide assistance to the User.

*ABANDONED CART*	*PURPOSE*	The purpose of data processing is to send up to 3 emails to encourage the user to complete the purchase interrupted on the site.
	*LEGAL BASIS*	Legitimate interest of the Data Controller in completing the purchase.
	*DATA RETENTION PERIOD*	72 hours
	*OTHER INFORMATION*	Providing data is automatic and results from the partial completion of the shopping cart.

*REVIEW*	*PURPOSE*	The purpose is to share one's experience and advertise the company
	*LEGAL BASIS*	Legitimate interest of the Data Controller and consent of the Data Subject to the review tool.
	*DATA RETENTION PERIOD*	Reviews will be published on the site until they become obsolete and/or consent is revoked.
	*OTHER INFORMATION*	Consent can be withdrawn at any time.

*BROWSING DATA*	*PURPOSE*	Site security
	*LEGAL BASIS*	We process the data based on the legitimate interest of the company in cybersecurity and compliance with legal obligations. The legal basis for processing cookies other than those necessary is consent.
	*DATA RETENTION PERIOD*	24 months
	*OTHER INFORMATION*	For cookie policy, refer to the specific notice.

3. What else do I need to know?
The data will be processed lawfully, fairly, and with the utmost confidentiality, in compliance with appropriate security measures as provided by the Code and the Regulation. The processing will be carried out using digital means. The data will not be subject to public disclosure except for those related to reviews. Furthermore, the user will not be subject to automated decision-making processes such as profiling unless they consent to this through the installation of cookies or other tracking tools, for which reference is made to the specific information provided.

4. Who will my data be communicated to?
The Data Controller may communicate the data to all subjects to whom communication is legally required for the fulfillment of the purposes established by law.

The Data Controller also makes use of some companies or IT tools that perform data processing activities on the personal data of the data subjects exclusively for the benefit of the data controller, all appropriately designated as data processors pursuant to Article 28 GDPR.

Data will also be communicated to payment gateways as independent data controllers.

The list of data processors is available on-site.

In the event of a merger, sale, or any other corporate change and/or in the case of organizing one of these operations, your data may be shared. Additionally, if the company owning the Data Controller or part of it is sold to a third party, the latter may continue to use your data, always in accordance with the methods provided by this privacy policy.

5. What is the location of data storage and transfer?
The management and storage of personal data will take place on servers located within and outside the EU. The Data Controller ensures that extra-EU transfers are carried out in accordance with Articles 44-47 of Chapter V of the GDPR by signing standard contractual clauses and/or through the EU Commission’s adequacy decision of July 10, 2023.

6. What are my rights and how can I exercise them?

a) Data subject rights
The user, as a data subject, has the rights provided by Article 15 and following of the Regulation, namely:

1. RIGHT OF ACCESS (Art. 15 GDPR)

The data subject has the right to obtain confirmation of the existence or non-existence of personal data concerning them, even if not yet recorded, and to receive such data in an intelligible form.

2. RIGHT TO RECTIFICATION (Art. 16 GDPR)

The data subject has the right to obtain the rectification of inaccurate personal data concerning them and also the completion of incomplete data.

3. RIGHT TO ERASURE (Art. 17 GDPR)

The data subject has the right to obtain the erasure of personal data in the presence of specific reasons such as withdrawal of consent, opposition to processing, or if the data is no longer necessary for the purposes for which it was collected and processed or in the case of unlawful processing. Erasure may not always be possible, but the data controller will certainly need to provide adequate justification.

4. RIGHT TO RESTRICT PROCESSING (Art. 18 GDPR)

The data subject has the right to obtain the restriction of processing in certain situations, such as during the assessment period of rectification or opposition requests.

5. RIGHT TO DATA PORTABILITY (Art. 20 GDPR)

If processing is based on consent or contract and is carried out by automated means, the data subject may receive the data in a structured, commonly used, and machine-readable format, or request the transmission of such data to another data controller.

6. RIGHT TO OBJECT (Art. 21 GDPR)

The data subject has the right to object, in whole or in part:

a) for legitimate reasons, to the processing of personal data concerning them, even if relevant to the purpose of collection;

b) to the processing of personal data concerning them for purposes not covered by Article 2.

The user may submit an objection request regarding the processing of their personal data under Article 21 of the GDPR, providing evidence of the reasons justifying the objection: the Data Controller reserves the right to assess the request, which will not be accepted if there are overriding legitimate grounds for processing that prevail over the interests, rights, and freedoms of the user.

7. RIGHT TO LODGE A COMPLAINT

The data subject has the right to lodge a complaint with the competent supervisory authority under Article 77 of the GDPR if they believe that the processing of their data is contrary to the applicable legislation.

b) How to exercise your rights:
The data subject may exercise the rights mentioned in the previous article at any time by contacting the Data Controller at the addresses provided above.

Last version: 29/07/2024

This information has been drafted by Polimeni.Legal

^[1] According to Article 4(7) GDPR: the data controller is the entity that determines the purposes and means of the processing of personal data, and their responsibilities are outlined in Article 24 GDPR.