1. Data Controller
Bellelli S.r.l. C.F.: 02228140360 and VAT number: 01025980291, with registered office in 45021, Badia Polesine (RO), via Meucci n. 232.
The Data Controller can be contacted at the following contacts:
Email:
PEC:
Phone: +39 0425594953
2. Types of Data Processed
During navigation on the website, personal data such as IP address, domain name of the computers and terminals used by users, addresses in URI/URL notation (Uniform Resource Identifier/Locator) of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the user’s operating system and IT environment are processed.
If the user decides to fill out the contact form or purchase one of the products on our e-commerce, personal data such as name, surname, email address, shipping address, phone number will be processed.
If the user decides to register their account on the site, personal data such as name, surname, username, email address, shipping and billing address will be processed.
If additional data beyond what is necessary for the purposes indicated above are requested, or if the data are processed for purposes other than those provided for in this policy, the Data Controller will send a specific information notice to the data subject.
Regarding cookies, specific information is available in the Cookiebot panel.
3. Purposes of Data Processing, Lawfulness of processing and Legal basis
The processing of personal data is aimed at:
a) ensuring the proper functioning of the prodigee.eu website –legal basis art. 6 par. 1 lett. f) GDPR which authorizes the processing of personal data when necessary for the legitimate interests pursued by the data controller. The legitimate interest is understood as the possibility to set up a website for promoting its commercial activity and ensuring its functioning;
b) ensuring the acceptance and execution of requests made to the controller via the “contacts” form on the website – legal basis art. 6 par. 1 lett. a) GDPR, which authorizes the processing of personal data upon freely given consent of the data subject;
c) allowing the user to register and activate their own account – legal basis art. 6 par. 1 lett. a) GDPR, which authorizes the processing of personal data upon freely given consent of the data subject;
d) fulfilling obligations incumbent on the data controller and consequent to requests made through the “contacts” form – legal basis art. 6 par. 1 lett. c) GDPR, which authorizes the processing of personal data when necessary to comply with a legal obligation to which the controller is subject;
e) completing the sale of Prodigee branded products through the e-commerce section of the site and consequent shipment to the customer – legal basis art. 6 par. 1 lett. b) and c) GDPR, which authorizes the processing of personal data when necessary for the execution of a contract to which the data subject is party or for pre-contractual measures and to comply with a legal obligation of the data controller;
f) analyzing traffic on the website without profiling or identifying the user – through Google Analytics cookies – legal basis art. 6 par. 1 lett. f) GDPR, which authorizes the processing of personal data when necessary for the legitimate interests of the data controller. Legitimate interest means monitoring the website’s functioning and analyzing accesses.
4. Provision of Data. Consequences of Failure to Provide Data
Browsing the website involves the automatic acquisition of personal data identified in art. 2.
Personal data required for filling out the “contacts” form and registering accounts are voluntarily provided by the user who consents to their processing by ticking the appropriate box. Such consent may be revoked at any time without prejudice to the legal basis based on consent before revocation.
Personal data required for the purchase of Prodigee products in the e-commerce area are mandatory to conclude the contract. Failure to provide such data makes it impossible for the data controller to fulfill the request.
5. Methods of Processing, Data Retention, and Duration
Personal data will be processed through paper and electronic archives (including portable devices) also in the cloud, strictly necessary for the purposes indicated above, by the data controller and its appointed employees. The servers containing your personal data are located in Italy.
Your navigation data provided for the purposes of point 3 lett. a) are not stored.
Your contact data provided for the purposes of points 3 lett. b), d), and e) are stored for the time necessary to respond to your request made through the “contacts” form and to complete the purchase and delivery of the chosen product. Processing will in any case be made for no longer than the period prescribed by law related to the specific request.
Personal data for the purposes of point 3 lett. c) are stored for ten years. Inactive accounts are deleted after ten years from the last commercial transaction. Activated accounts that have never been used will be deleted after five years.
Personal data collected for the purposes of point 3 lett. f) are stored for no longer than the period required by law.
6. Data Communication and Transfer
Your personal data may be communicated to employees of the data controller specifically appointed for personal data processing, third parties such as, by way of example and not exhaustive: system administrators, lawyers, insurance companies, carriers, previously appointed external data processors by the controller.
Your data will not be transferred to any non-EU country.
7. Profiling and Dissemination of Data
Your personal data are not subject to dissemination or any fully automated decision-making process, including profiling. The controller uses Google Analytics 4 solely for website traffic analysis without profiling or identifying users.
8. Data Subject Rights
Pursuant to articles 15-21 GDPR, the data subject has the following rights:
• Right of access: right to obtain confirmation from the data controller of whether or not personal data concerning hi,/her are being processed, and if so, access to the data and information such as purposes of processing, categories of data, recipients, retention period, rights to rectification/cancellation/limitation/opposition, right to complain to a supervisory authority, origin of data if not collected from the data subject, existence of automated decision-making including profiling, logic, importance, and consequences of processing.
• Right to rectification: right to obtain correction of inaccurate personal data without unjustified delay and completeness of incomplete data.
• Right to erasure (“right to be forgotten”): right to obtain the erasure without undue delay if data are no longer necessary, consent is withdrawn, opposition exercised without overriding legitimate grounds, unlawful processing, legal obligation for deletion, or data collected related to information society services.
• Right to restriction of processing: right to obtain limitation of processing where data accuracy contested, unlawful processing opposed to erasure, controller no longer needs data but data required for legal claims, or opposition to processing pending verification.
• Right to data portability: right to receive personal data provided to a controller in a structured, commonly used, machine-readable format and transmit to another controller where processing is based on consent or contract and carried out by automated means.
• Right to object: right to object at any time for reasons related to their particular situation to processing based on legitimate interests or profiling.
These rights may be exercised by written request to the Data Controller via PEC at or by registered mail to 45021 Badia Polesine (RO) via Meucci n. 232.
Anyone who believes their data processing violates legal provisions has the right to lodge a complaint with the supervisory authority, the Privacy Guarantor (www.garanteprivacy.it), or to appeal the competent judicial authority.
Last revision 31/10/2025