PRIVACY NOTICE FOR WEBSITE USERS
This notice is issued in accordance with Article 13 of Regulation (EU) 2016/679 concerning personal data (“Data”) protection and is directed towards website Users
DATA CONTROLLER | Blank Spaces S.r.l. VAT number: IT12072760015 Based in: Via Molino delle Lime, 4/F, 10064 Pinerolo (TO) e-mail: privacy@blankspaces.it |
DATA PROTECTION OFFICER (DPO) | For inquiries related to this privacy policy or how data is handled, you can contact the Data Protection Officer (DPO – RPD) of the Data Controller Argo Business Solutions S.r.l. at the address dpo.blankspaces@argobs.com. |
CATEGORIES OF DATA PROCESSED | The categories of processed data are as follows: Data provided from the Data Subject through the filling of the contact forms or by using the email address available on the website Usage Data |
PURPOSE OF THE PROCESSING | LEGAL BASIS | DATA RETENTION |
| 1. To enable the User to contact the Data Controller by means of a specific contact form available on the website or by sending an email (the Data will not be processed directly through interaction with the website) | Processing is necessary for the performance of a contract to which the data subject is party or to take steps at the request of the data subject (art. 6 (b) GDPR) | 10 years for correspondence with legal or commercial relevance. 1 year for all other types of messages |
| 2. Acquire statistics and metrics to ensure the proper functioning of the website | Legitimate interest of the Data Controller (Art. 6(f) GDPR) | Stored for the period necessary to achieve this purpose. The metrics collected through technical and session cookies will follow the retention periods outlined in the cookie policy. Any additional data will be processed in an anonymous and aggregated form, without the possibility of identifying the user |
| 3. Possible legal defense of the Data Controller | Legitimate interest of the Data Controller (Art. 6(f) GDPR) | For the entire duration of the legal dispute or until the expiration of the deadlines for filing appeals |
| 4. To send the User emails and promotional communications containing commercial offers, etc. | Given consent from the data subject (art. 6 (a) GDPR) | Retained until the Data Subject withdraws their consent and, in any case, for no longer than 10 years from the date of Data collection |
| 5. Carrying out profiling activities through the collection of information provided directly by the User and/or by means of specific cookies. | Given consent from the data subject (art. 6 (a) GDPR) | Retained until the Data Subject withdraws their consent and, in any case, for no longer than 10 years from the date of Data collection |
DATA PROVISION REQUIREMENT | The provision of personal data for purposes 1, 2 and 3 is optional. However, failure to provide such data may prevent the Website from delivering its services. For purposes 4 and 5 the provision is also optional and voluntary. The data subject may choose not to provide any data or may later withdraw consent for the processing of data already provided. |
WITHDRAWAL OF CONSENT | The Data Subject may revoke the consent given for purposes 4 and 5 at any time, without impacting the lawfulness of the processing carried out based on the consent before its withdrawal. |
DATA RECIPIENTS | The collected Data may be disclosed to: Employees or collaborators of the Data Controller in Italy or abroad, in their capacity of subjects authorized to process personal data and/or system administrators; Third-party companies or other subjects (e.g. credit institutions, IT consultants, etc.) that perform outsources activities on behalf of the Data Controller, in their capacity as Data Processors. Tool used for sending newsletters; Furthermore, the data may be communicated to: Supervisory, legal and public authorities to which it is obligatory to communicate data; Subjects to whom communication is mandatory by law for the fulfillment of the aforementioned purposes.” |
EXTRA-EU TRANSFER | The personal data will be stored on servers located within the European Union and managed by third-party companies duly appointed as Data Processors. The Data Controller may transfer the User’s Personal Data to a third country. The Data will be transferred exclusively to countries considered “adequate” and therefore, “safe” by the European Commission or to the companies that ensure appropriate safeguards pursuant to Articles 44-50 of the GDPR. |
RIGHTS OF THE DATA SUBJECT | The Data Subject may exercise the rights granted by the GDPR (articles 15-22), including: a. Access rights – receive confirmation from the Data Controller that the Data Subject’s Data is held by the Data Controller, and access the content of the Data; b. Right of rectification – request the updating, modification, and/ or correction of the Data; c. Right to erasure and right to restriction of processing – request the erasure of Data and/or restriction of processing if the Data Subject believes that their Data is being processed in violation of this Privacy Notice; d. Right to object – object to the processing of the Data; e. Submit a complaint to the relevant Supervisory Authority – the Data Protection Authority (accessible on www.garanteprivacy.it) in case of violation of the regulations on the protection of Personal Data; f. Right to Data Portability – receive an electronic copy of the Data concerning the Data Subject (where such Data has been provided by the Data Subject in the context of a contract) and request that the Data in question be transmitted to another data controller. |
COMPLAINT TO AUTHORITY | The data subject has the right to submit a complaint to the Italian Data Protection Authority (art. 77 GDPR). |
AUTOMATED DECISION-MAKING PROCERSS | The Controller does not carry out any processing of personal data that involves automated decision-making processes. |
Version No. 1 of 13/05/2026