Privacy Policy

This Privacy Policy is provided pursuant to Article 13 of Regulation (EU) 2016/679 (“GDPR”) regarding the processing of personal data collected from the data subject.
This policy applies exclusively to the website www.bybtech.it and not to any other third-party websites you may visit via links. BYB TECH SRL has no control over or responsibility for the content or privacy practices of other websites.
This Privacy Policy also considers the provisions of Directive 2002/58/EC (ePrivacy Directive), as updated by Directive 2009/136/EC, and Italian Data Protection Authority (“Garante Privacy”) decisions — particularly the provision of 8 May 2014 regarding cookies.

1. Data Controller

The Data Controller is:
BYB TECH SRL
Via Camillo Brozzoni, 9 – 25125 Brescia (BS) – Italy
Email: info@bybtech.it
Represented by its legal representative in office.

2. Purpose and Lawfulness of Processing

Your personal data are processed lawfully under Article 6 of the GDPR for the following purposes:

A) Contractual and Legitimate Interest Purposes (Art. 6(1)(b) and (f))

To enable browsing and technical operation of our website.
To respond to contact requests or information inquiries sent via the contact form.
To process and fulfill orders, manage payments, deliver products and provide support.
To meet legal and regulatory obligations (e.g., tax compliance, invoicing).
For internal administrative and accounting activities necessary to fulfill pre-contractual or contractual obligations.

B) Marketing Purposes (Art. 6(1)(a) – Consent)

With your explicit consent, to send promotional and marketing communications, including newsletters.
Your data may be entered in a CRM system to analyze open rates, click-throughs, and device or user interaction details to improve our communication effectiveness. These activities may involve **profiling**, but **no automated decision-making with legal effects** is conducted.

You may withdraw your consent at any time using the unsubscribe link in emails or by contacting us directly.

3. Categories of Personal Data Processed

We may collect the following categories of personal data:

Identifying information (e.g., name, email, address, phone)
Account credentials (if applicable)
Payment data (processed securely by third-party gateways)
Technical data (IP address, browser type, operating system)
Behavioral and interaction data (only if you consent to marketing cookies/newsletters)

We do not collect or process special categories of data (e.g., health, religion, political beliefs) unless required by law.

4. Data Sharing and International Transfers

Your data may be shared with trusted third-party service providers strictly for the purposes listed above, including:

Hosting and infrastructure: Aruba, AWS, or equivalent providers
Analytics and cookies: Google Analytics, Tag Manager
CRM and email systems: Mailchimp, Brevo (formerly Sendinblue), or similar
E-commerce and order processing: Stripe, PayPal, Shopify (if applicable)
Professional advisors and legal authorities when legally required

Where data are transferred outside the EU (e.g., to the USA), BYB TECH SRL ensures appropriate safeguards are in place, such as:

Adequacy decisions from the EU Commission
Standard Contractual Clauses (SCCs)
Binding Corporate Rules (BCRs)

5. Data Retention

Your personal data will be stored only for the time necessary to fulfill the purposes for which they were collected, specifically:

Website browsing data: Temporary (session-based)
Contact and information requests: Up to 12 months
Newsletter subscription: Until withdrawal of consent (opt-out)
Order and transaction data: 10 years (or as required by tax/accounting law)
Job applications/CVs: 24 months max
Marketing analytics data: Up to 24 months, unless you withdraw consent sooner

For more details on data retention criteria, you may contact info@bybtech.it
.

6. Data Subject Rights

You have the right to:

Access your personal data (Art. 15 GDPR)
Rectify inaccurate data (Art. 16)
Request erasure (“right to be forgotten”) (Art. 17)
Restrict processing (Art. 18)
Receive a copy of your data in portable format (Art. 20)
Object to processing based on legitimate interest (Art. 21)
Withdraw your consent at any time (Art. 7(3))

To exercise your rights, contact: info@bybtech.it.

7. Automated Decisions and Profiling

We may use profiling techniques for marketing purposes (e.g., tracking newsletter engagement), but we do not use automated decision-making that has legal or significant effects on you, as defined by Article 22 of the GDPR.

8. Cookies

We use cookies and similar technologies to ensure website functionality, measure performance, and (with your consent) enable marketing and personalization.
Please refer to our Cookie Policy for full details on the types of cookies used, third parties involved, and how to manage your preferences.