1. Data Controller
The Data Controller is 2BFS S.R.L., with registered office at Viale XX Settembre 207/C, 54033 Marina di Carrara (MS), Italy. VAT 01500700453, REA MS-272228.
Email: info@2bfs.it
PEC: info@pec.2bfs.it
2. Types of data collected
Through the website 2bfs.it and its extensions, 2BFS S.R.L. may collect:
- Contact data voluntarily provided through the form on the Contact page: first name, last name, email, phone, company, area of interest, message content.
- Navigation data automatically collected by computer systems (IP addresses, browser type, operating system, pages visited, date and time).
- Technical cookies necessary for the correct functioning of the site, as described in the Cookie Policy.
- Application data sent via email to info@2bfs.it: CV, cover letter, references.
3. Purpose of processing
Collected data are processed for the following purposes:
- Responding to inquiries sent via contact form or direct email.
- Evaluating job applications for employment or collaboration opportunities.
- Operational management of the website, aggregate traffic analysis, IT security.
- Fulfillment of legal, accounting and tax obligations related to business relationships initiated through the site.
4. Legal basis for processing
Data processing is based on the following legal grounds (Art. 6 GDPR):
- Explicit consent of the data subject (Art. 6(1)(a)) for contact form submission and any purpose requiring consent.
- Performance of pre-contractual measures or a contract to which the data subject is a party (Art. 6(1)(b)).
- Legal obligation (Art. 6(1)(c)) for tax, administrative, IT security compliance.
- Legitimate interest of the Controller (Art. 6(1)(f)) for technical site management and communication security.
5. Methods and retention periods
Data are processed using IT tools and methods that ensure security and confidentiality, adopting technical and organizational measures appropriate under Art. 32 GDPR.
Data are retained for the times strictly necessary for declared purposes:
- Contact form data: up to 24 months from receipt, unless longer retention is required by law or for managing activated relationships.
- CVs and applications: up to 24 months from receipt, unless explicit consent of the data subject for longer retention.
- Navigation data: up to 12 months, unless retention is needed for IT security or legal defense.
6. Data recipients
Personal data are not disseminated. They may be communicated to:
- Authorized personnel of 2BFS S.R.L. (partners, employees, designated collaborators) by reason of their functions.
- External data processors appointed under Art. 28 GDPR: hosting, email, accounting service providers, legal and tax consultants.
- Public authorities when communication is mandatory by law.
Under no circumstances are data sold, exchanged or transferred to third parties for unauthorized marketing purposes.
7. Transfer of data to non-EU countries
Some third-party services used by the site (e.g. hosting, email sending, analytics) may involve data transfers to non-EU countries. In such cases, 2BFS ensures that transfers occur according to the safeguards provided by Articles 44-50 GDPR (Standard Contractual Clauses, adequacy decisions of the European Commission).
8. Rights of the data subject
Under Articles 15-22 GDPR, the data subject has the right at any time to:
- Access their personal data (Art. 15).
- Rectify inaccurate data or complete it (Art. 16).
- Obtain erasure ("right to be forgotten") where applicable (Art. 17).
- Restrict processing (Art. 18).
- Object to processing (Art. 21).
- Portability of data in structured, readable format (Art. 20).
- Withdraw consent at any time (Art. 7(3)), without prejudice to the lawfulness of processing carried out until that moment.
- Lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or the supervisory authority of the country of residence.
9. How to exercise rights
To exercise the rights listed above, data subjects can write to:
- Email: info@2bfs.it
- PEC: info@pec.2bfs.it
- Postal mail: 2BFS S.R.L. — Viale XX Settembre 207/C, 54033 Marina di Carrara (MS).
Requests will be processed within 30 days of receipt, except for cases of particular complexity that may require extension (with notice to the data subject).
10. Changes to this policy
2BFS S.R.L. reserves the right to update this Privacy Policy at any time, particularly to adapt it to regulatory changes, technological developments, or changes in processing methods. The date of the last update is indicated at the beginning of the document. Data subjects are invited to consult this page periodically.
11. Contact
For any clarification regarding personal data processing, write to info@2bfs.it.
Note: this policy is an initial draft prepared at the operational start of 2BFS S.R.L. It will be validated and updated by a legal consultant at the final launch phase of the site. The contents here comply with GDPR requirements but do not replace professional legal advice on specific cases.