Privacy Policy
www.kimya.it
PRIVACY NOTICE PURSUANT TO ARTICLE 13 OF REGULATION (EU) 2016/679 (GDPR)
Kimya S.r.l. – Società Benefit protects the confidentiality of personal data and ensures the necessary protection against any event that may expose it to the risk of breach.
As provided for by Regulation (EU) 2016/679 (GDPR), and in particular Article 13, the following information is provided to the user (“Data Subject”) as required by law regarding the processing of their personal data.
This document may be printed using the print command available in the settings of any browser.
Personal Data (or Data)
Personal Data means any information that, directly or indirectly, even in connection with any other information, including a personal identification number, makes a natural person identified or identifiable.
Usage Data
This refers to information collected automatically through this Website (including by third-party applications integrated into this Website), such as: IP addresses or domain names of the computers used by the User who connects to this Website, URI (Uniform Resource Identifier) addresses, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server’s response (successful, error, etc.), the country of origin, the characteristics of the browser and operating system used by the visitor, the various time-related details of the visit (for example, the time spent on each page), and details relating to the navigation path within the Website, with particular reference to the sequence of pages viewed and parameters relating to the User’s operating system and IT environment.
User
The individual using this Website who, unless otherwise specified, coincides with the Data Subject.
Data Subject
The natural person to whom the Personal Data refers.
Data Processor (or Processor)
The natural or legal person, public authority, agency, or any other body which processes personal data on behalf of the Data Controller, as described in this privacy policy.
Data Controller (or Controller)
The natural or legal person, public authority, service, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data, as well as the tools adopted, including the security measures relating to the operation and use of this Website. Unless otherwise specified, the Data Controller is the owner of this Website.
Service
The service provided by this Website.
European Union (or EU)
Unless otherwise specified, any reference to the European Union contained in this document is intended to extend to all current member states of the European Union and the European Economic Area.
Cookies
Cookies are Tracking Tools consisting of small portions of data stored within the User’s browser.
Tracking Tool
Tracking Tool means any technology – e.g. cookies, unique identifiers, web beacons, embedded scripts, e-tags, and fingerprinting – that enables the tracking of Users, for example by collecting or storing information on the User’s device.
Data Controller
Kimya S.r.l. – Società Benefit
Via dei Marmisti n. 10 – 70026 Modugno (BA) – Italy
Tax Code/VAT No.: 04997160728
Email address: info@kimya.it
Tel.: +39 080 4507462
Types of Data collected
Among the Personal Data collected by this Website, either independently or through third parties, are: Tracking Tools; Usage Data; IP address; first name; last name; email address.
Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or through specific information notices displayed prior to the Data collection.
Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically during the use of this Website. Unless otherwise specified, all Data requested by this Website is mandatory.
If the User refuses to provide such Data, it may be impossible for this Website to provide the Service.
In cases where this Website specifically states that some Data is optional, Users are free not to communicate such Data without any consequence to the availability or operation of the Service. Users who have any doubts about which Data is mandatory are encouraged to contact the Data Controller.
Any use of Cookies – or other tracking tools – by this Website or by the owners of third-party services used by this Website serves the purpose of providing the Service requested by the User, in addition to the other purposes described in this document and in the Cookie Policy.
The User assumes responsibility for the Personal Data of third parties obtained, published, or shared through this Website.
Methods and place of processing of the collected Data
Methods of processing
The Data Controller adopts appropriate security measures aimed at preventing unauthorized access, disclosure, modification, or destruction of Personal Data.
Processing is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the purposes indicated. In addition to the Data Controller, in some cases, other parties involved in the organization of this Website (administrative, commercial, marketing, legal personnel, system administrators) or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may have access to the Data, and may also be appointed, if necessary, as Data Processors by the Data Controller.
An updated list of Data Processors may always be requested from the Data Controller.
Place
The Data is processed at the Data Controller’s operating offices and in any other places where the parties involved in the processing are located. For further information, please contact the Data Controller.
The User’s Personal Data may be transferred to a country other than the one in which the User is located. To obtain further information on the place of processing, the User may refer to the section concerning details on the processing of Personal Data.
Retention period
Unless otherwise specified in this document, Personal Data is processed and stored for as long as required by the purpose for which it has been collected and may be retained for a longer period due to any legal obligations or based on the Users’ consent.
Purposes of the processing of collected Data
The User’s Data is collected to allow the Data Controller to provide the Service, comply with legal obligations, respond to requests or enforcement actions, protect its own rights and interests (or those of Users or third parties), detect any malicious or fraudulent activity, as well as for the following purposes: Analytics, Interaction with social networks and external platforms, Contacting the User, Displaying content from external platforms, and Remarketing and behavioral targeting.
Details on the processing of Personal Data
Specifically, Personal Data is collected for the following purposes and using the following services:
Contact form
By filling in the contact form on this Website with their Data, the User consents to its use for responding to requests for information, quotations, or any other purpose indicated in the form header.
Personal Data processed: first name; last name; email address.
The interactions and information acquired by this Website are in any case subject to the User’s privacy settings for each social network.
This type of service may still collect traffic data for the pages where the service is installed, even when Users do not use it.
Users are advised to log out from the respective services in order to ensure that the data processed on this Website is not linked back to their profile.
Facebook Like button and social widgets (Meta Platforms Ireland Limited)
The “Like” button and Facebook social widgets are services that allow interaction with the Facebook social network, provided by Meta Platforms Ireland Limited.
Personal Data processed: Usage Data; Tracking Tools.
Place of processing: Ireland – Privacy Policy.
This activity is facilitated by tracking Usage Data and the use of Tracking Tools to collect information that is then transferred to partners managing remarketing and behavioral targeting activities.
Some services offer a remarketing option based on email address lists.
Generally, services of this kind provide the possibility to opt out of such tracking.
In addition to any opt-out feature provided by any of the services listed in this document, the User may read more about how to disable interest-based advertising in the relevant section “How to opt out of interest-based advertising” in this document.
Facebook Remarketing (Meta Platforms Ireland Limited)
Facebook Remarketing is a remarketing and behavioral targeting service provided by Meta Platforms Ireland Limited that connects the activity of this Website with the Meta advertising network.
Personal Data processed: Usage Data; Tracking Tools.
Place of processing: Ireland – Privacy Policy – Opt Out.
Google Analytics (Google Ireland Limited)
Google Analytics is a web analysis service provided by Google Ireland Limited (“Google”). Google uses the Personal Data collected to track and examine the use of this Website, compile reports, and share them with other services developed by Google.
Google may use Personal Data to contextualize and personalize ads within its own advertising network.
Personal Data processed: Usage Data; Tracking Tools.
Place of processing: Ireland – Privacy Policy – Opt Out.
Bing Webmaster Tools (Microsoft)
Bing is a free Microsoft software for website analytics and statistics on the Bing search network, the search engine owned by Microsoft. This tool allows webmasters to add website ownership, enabling indexing by the crawler, and then access a range of performance statistics (clicks, impressions) along with various additional features.
Bing Webmaster Tools also includes several diagnostic, analysis, and indexing troubleshooting features, allows manual submission of new URLs for indexing, sitemap creation, and provides various insights into Website performance on the Bing search engine.
Personal Data processed: Usage Data; IP address; Tracking Tools.
Place of processing: United States – Privacy Policy – Opt Out
This type of service may still collect web traffic data related to the pages where the service is installed, even when users do not use it.
Google Fonts (Google Ireland Limited)
Google Fonts is a font style visualization service provided by Google Ireland Limited that allows this Website to integrate such content within its pages.
Personal Data processed: Usage Data; Tracking Tools.
Place of processing: Ireland – Privacy Policy.
Cookie Policy
This Website uses Tracking Tools. To learn more, Users may refer to the Cookie Policy.
Further information on processing
Legal basis for processing
The Data Controller processes Personal Data relating to the User if one of the following conditions applies:
- the User has given consent for one or more specific purposes;
- processing is necessary for the performance of a contract with the User and/or for the implementation of pre-contractual measures;
- processing is necessary for compliance with a legal obligation to which the Data Controller is subject;
- processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;
- processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party.
In any case, it is always possible to ask the Data Controller to clarify the specific legal basis of each processing activity and in particular to specify whether the processing is based on the law, required by a contract, or necessary to enter into a contract.
Further information on retention time
Unless otherwise specified in this notice, Personal Data is processed and stored for as long as required by the purpose for which it has been collected and may be retained for a longer period due to any legal obligations or based on the Users’ consent.
Therefore:
- Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User shall be retained until such contract has been fully performed.
- Personal Data collected for purposes related to the legitimate interest of the Data Controller shall be retained until such interest has been satisfied. The User may obtain further information regarding the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.
When processing is based on the User’s consent, the Data Controller may retain Personal Data for a longer period until such consent is withdrawn. Furthermore, the Data Controller may be required to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority.
At the end of the retention period, Personal Data will be deleted. Therefore, once this period has expired, the right of access, deletion, rectification, and the right to data portability can no longer be exercised.
User rights
Users may exercise certain rights with reference to the Data processed by the Data Controller.
In particular, within the limits provided by law, the User has the right to:
- withdraw consent at any time – The User may withdraw previously given consent to the processing of their Personal Data at any time.
- object to the processing of their Data – The User may object to the processing of their Data when it is carried out on a legal basis other than consent.
- access their Data – The User has the right to obtain information on the Data processed by the Data Controller, on certain aspects of the processing, and to receive a copy of the Data processed.
- verify and request rectification – The User may verify the accuracy of their Data and request that it be updated or corrected.
- obtain restriction of processing – The User may request the restriction of the processing of their Data. In this case, the Data Controller will not process the Data for any purpose other than storage.
- obtain the erasure or removal of their Personal Data – The User may request the deletion of their Data by the Data Controller.
- receive their Data or have it transferred to another controller – The User has the right to receive their Data in a structured, commonly used, and machine-readable format and, where technically feasible, to have it transmitted to another controller without hindrance.
- lodge a complaint – The User may lodge a complaint with the competent data protection supervisory authority or take legal action.
Users have the right to obtain information regarding the legal basis for the transfer of Data abroad, including to any international organization governed by international law or established by two or more countries, such as the United Nations, as well as regarding the security measures adopted by the Data Controller to safeguard their Data.
Details on the right to object
Where Personal Data is processed for a public interest, in the exercise of official authority vested in the Data Controller, or for the purposes of the legitimate interests pursued by the Data Controller, Users have the right to object to such processing on grounds relating to their particular situation.
Users are informed that, if their Data is processed for direct marketing purposes, they may object to such processing at any time, free of charge and without providing any justification. If Users object to processing for direct marketing purposes, the Personal Data will no longer be processed for such purposes. To find out whether the Data Controller processes Data for direct marketing purposes, Users may refer to the relevant sections of this document.
How to exercise these rights
To exercise their rights, Users may submit a request to the contact details of the Data Controller provided in this document. Requests may be submitted free of charge and will be answered by the Data Controller as soon as possible, in any case within one month, providing the User with all information required by law.
Any rectification, erasure, or restriction of processing will be communicated by the Data Controller to each recipient, if any, to whom the Personal Data has been disclosed, unless this proves impossible or involves a disproportionate effort.
The Data Controller will inform the User about such recipients if requested.
Legal defense
The User’s Personal Data may be used by the Data Controller in legal proceedings or in the preparatory stages leading to possible legal action for the defense against abuse in the use of this Website or related Services by the User.
The User declares to be aware that the Data Controller may be required to disclose Data by order of public authorities.
Specific notices
Upon request, in addition to the information contained in this privacy policy, this Website may provide the User with additional and contextual notices regarding specific Services, or the collection and processing of Personal Data.
System logs and maintenance
For operational and maintenance purposes, this Website and any third-party services used by it may collect system logs, i.e. files that record interactions and may also contain Personal Data, such as the User’s IP address.
Information not contained in this Policy
Further information regarding the processing of Personal Data may be requested at any time from the Data Controller using the contact details provided.
Changes to this Privacy Policy
The Data Controller reserves the right to make changes to this Privacy Policy at any time by notifying Users on this page and, if possible, on this Website, as well as, where technically and legally feasible, by sending a notification to Users through any contact details available. Users are therefore encouraged to check this page regularly, referring to the date of the last modification indicated at the bottom.
Where the changes affect processing activities whose legal basis is consent, the Data Controller will collect the User’s consent again, if necessary.
Last updated: June 01, 2026
