This notice describes the processing of personal data carried out through the website https://www.bustebiemme.it/ pursuant to Regulation (EU) 2016/679 (GDPR). It does not apply to external websites that may be reached through links contained on this website.
The Data Controller is biemme srl, with registered office at Viale Rimembranze, 54/37 – 20099 Sesto San Giovanni.
Email: info@bustebiemme.it
Telephone: +39 02 6690666
The IT systems used to operate this website automatically collect certain technical data, such as IP address, device and browser information, date and time of the request, requested resource and technical connection data. These data are processed to ensure the operation and security of the website and, where applicable, to produce aggregate statistics on its use.
The legal basis is the need to provide the service requested by the user and, for website security and proper technical management, the legitimate interest of the Data Controller. Technical data are retained for the time necessary for these purposes, unless longer retention is required for security reasons or to investigate unlawful activity.
Sending emails or requests through any contact forms involves the processing of the data voluntarily provided by the user solely in order to reply to the request. Any data collected through the website are forwarded to the Data Controller and are not used by the website for marketing or profiling purposes unless a specific notice is provided and separate consent is obtained.
The legal basis is the performance of measures requested by the data subject or, where applicable, the legitimate interest of the Data Controller in replying to communications received. Data are retained for the time necessary to handle the request, without prejudice to any subsequent contractual relationship, legal obligations or the Data Controller’s internal procedures.
Providing data by email or through contact forms is optional. Any fields marked as required are necessary only to allow the Data Controller to receive and handle the request; failure to provide them may make it impossible to reply.
The following sections are shown only when the relevant service is actually used. Non-essential services are activated in accordance with the preferences expressed by the user through the consent management system.
For non-essential services, the legal basis is the user’s consent. Services strictly connected with website security and abuse prevention may be used on the basis of the Data Controller’s legitimate interest in protecting the website, without prejudice to any consent required for non-technical cookies or similar tools. Cookie storage periods are shown in the dedicated table.
Google Analytics is a website analytics and statistics service provided by Google. It helps understand how the website is used, for example which pages are visited, how often they are viewed and which devices or traffic sources are involved. The service may process technical data, browsing information and online identifiers to produce statistics and reports. Where cookies or other non-essential tools are used, Google Analytics is activated only after the user’s consent.
Provider: Google. Privacy Policy
Google reCAPTCHA is a security and spam protection service provided by Google, used to protect forms and other website functions from spam, automated submissions and abuse. To distinguish legitimate interactions from automated activity it may analyse technical device and connection information, IP address and the way the user interacts with the page.
Provider: Google. Privacy Policy
These services allow content or resources provided by external platforms to be integrated into the website. Loading them may establish a connection to the relevant provider’s servers and transmit the technical data required for communication. Where a service involves non-essential tracking, it is activated in accordance with the user’s consent preferences.
YouTube is an external multimedia content service provided by Google, used to display videos hosted on YouTube directly on the website without hosting those video files on the website server. The embedded player may receive technical device and connection information and data relating to interaction with the video.
The website may also use YouTube’s Privacy Enhanced Mode, based on the youtube-nocookie.com domain, which limits the use of embedded video views for personalising the YouTube experience and advertising. In some configurations the player may also be loaded only when the user chooses to start the content; in that case the connection to YouTube and processing related to the player begin when the player is actually loaded.
Provider: Google. Privacy Policy
Google Maps is an external maps and geographic content service provided by Google, used to display interactive maps, locations, points of interest and geographic information directly within website pages. Loading a map establishes a connection to Google systems and may transmit technical device, IP address and interaction data. Where loading is not strictly necessary, it may be subject to the user’s consent.
Provider: Google. Privacy Policy
Google Fonts is an external visual resource service provided by Google, used to display typefaces and keep the website’s appearance consistent across devices. The Data Controller does not use the service to personally identify or profile users. When fonts are loaded from Google’s servers, the browser nevertheless establishes a connection to those servers and transmits the technical data required to request and deliver the font files.
Provider: Google. Privacy Policy
Data may be processed by technical providers acting on behalf of the Data Controller or, for the external services identified in this notice, by the relevant providers according to their respective roles and terms. Where a service involves transfers of data outside the European Economic Area, such transfers are carried out using the safeguards provided for by the GDPR, such as adequacy decisions, the Data Privacy Framework where applicable, or Standard Contractual Clauses. Information on the applicable safeguards and, where provided for, how to obtain a copy may be requested from the Data Controller or found in the provider privacy notices linked from this page.
Where provided for by the GDPR, data subjects may exercise their rights of access, rectification, erasure, restriction, portability and objection, and may withdraw any consent previously given without affecting the lawfulness of processing carried out before withdrawal.
Requests relating to the exercise of data protection rights may be sent to info@bustebiemme.it. A complaint may also be lodged with the competent supervisory authority.
The website does not carry out decisions based solely on automated processing that produce legal effects or similarly significantly affect the data subject, unless this is expressly stated in a specific privacy notice.
Cookies are small text files that a website may store on a user’s device. They may be used to ensure the correct operation and security of the website, remember preferences, obtain statistics or, subject to consent, measure advertising activity and perform profiling or remarketing. Cookies may be first-party, when they are managed directly by the website being visited, or originate from third-party services integrated into website pages, and they may last only for the browsing session or remain stored for a defined period. Technical and necessary cookies are those required for the operation of the website or to provide functions requested by the user and do not require prior consent. Analytics cookies are used to measure website traffic and usage: they may be treated as equivalent to technical cookies only where the conditions established by applicable law and the competent supervisory authority are met; otherwise they are used only with the user’s consent. Profiling and marketing cookies and other tools used for remarketing, advertising measurement or personalised advertising are activated exclusively after consent. Some functions may also use third-party services: being a “third party” does not by itself determine the purpose of a cookie or other tool, which instead depends on the specific service used and on its category. Information about the cookies actually present, their purposes and storage periods is provided in the dedicated table and in the descriptions of the services used by the website.
Where cookies or other tracking tools require consent, users may give, refuse or withdraw that consent at any time through the preference panel or privacy widget available on the website. Withdrawal does not affect the lawfulness of processing carried out before preferences were changed.
For tools managed by third parties, users may also use any opt-out mechanism provided by the relevant provider, follow the instructions in that provider’s privacy policy, or contact the provider directly.
The website may use tools managed directly by the Data Controller and tools connected to services supplied by third parties. Third-party providers may receive the technical data required to operate their services according to their own privacy notices. The presence of an external service does not automatically imply profiling: purpose, legal basis and consent requirements depend on the specific service used.
The duration of cookies and similar tools may vary. Some expire at the end of the browsing session, while others remain stored for a period defined by the Data Controller or the relevant provider. Where available, the specific duration is shown in the cookie table or in the provider’s documentation.
Users may use browser or device settings to see which cookies or similar technologies are stored, block them, or delete them. These controls operate at a technical level and generally do not provide the same category-based control as the website’s consent panel.
More information is available in the help pages of the main browsers:
On mobile devices, some tracking preferences may also be managed through the operating system’s privacy, advertising or tracking settings.
In addition to the controls provided by the website and individual providers, users may consult advertising preference services such as YourOnlineChoices for the EU and UK, the Network Advertising Initiative and Digital Advertising Alliance in the United States, DAAC in Canada, and DDAI in Japan.
The Digital Advertising Alliance also provides AppChoices, a tool for managing behavioural advertising preferences in mobile applications.
Refusing non-essential tools does not prevent access to the website’s essential functions. Optional features that depend on external services, such as videos, maps, embedded content or personalisation functions, may however remain unavailable until the relevant consent is given.
The following table lists the cookies detected and classified by category, together with their purposes and storage periods on the user’s device:
Necessary cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data.
| Cookie | Duration | Description |
|---|---|---|
| wpml_browser_redirect_test | session | Checks whether cookies are available for WPML browser-language redirection. |
| wt_consent | 1 year | Stores the visitor consent choices recorded by the WebToffee GDPR Cookie Consent plugin. |
| wpEmojiSettingsSupports | session | WordPress stores emoji capability test results so the browser does not need to repeat the same checks during the session. |
Functional cookies help perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and other third-party features.
| Cookie | Duration | Description |
|---|---|---|
| _icl_visitor_lang_js | 1 day | Stores the language selected by WPML browser-language redirection. |
| wp-wpml_current_language | session | Stores the current language used by WPML for AJAX language filtering. |
Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc.
| Cookie | Duration | Description |
|---|---|---|
| _ga | 2 years | Distinguishes unique users for Google Analytics. |
| _ga_* | 2 years | Persists session state for a Google Analytics 4 property. |
| _gat | 1 minute | Used by Google Analytics to throttle the request rate. |
| _gat_* | 1 minute | Used by Google Analytics to throttle the request rate for a specific property. |
| _gid | 1 day | Distinguishes users for Google Analytics over a short period. |
Advertisement cookies are used to provide visitors with customized advertisements based on the pages you visited previously and to analyze the effectiveness of the ad campaigns.
| Cookie | Duration | Description |
|---|---|---|
| 1P_JAR | unknown | Description is currently not available. |
| CONSENT | unknown | Description is currently not available. |
| NID | 6 months | Stores Google service preferences and information and may also be used for analytics, personalization or advertising depending on user settings. |
| YSC | session | Stores a unique identifier used by YouTube during the current browsing session. |
| yt-remote-cast-available | session | YouTube stores whether casting is available for the embedded video player during the browser session. |
| yt-remote-cast-installed | session | YouTube stores temporary casting-related player preferences during the browser session. |
| yt-remote-connected-devices | never | YouTube stores information about connected devices and embedded video preferences in browser storage. |
| yt-remote-device-id | never | YouTube stores a device identifier used for embedded video player preferences and connected-device features. |
| yt-remote-fast-check-period | session | YouTube stores a temporary player preference used by embedded videos during the browser session. |
| yt-remote-session-app | session | YouTube stores temporary information about the embedded video player interface during the browser session. |
| yt-remote-session-name | session | YouTube stores embedded video player session preferences in browser session storage. |
| yt.innertube::nextId | never | YouTube stores a unique identifier in browser storage to maintain information related to videos viewed by the user. |
| yt.innertube::requests | never | YouTube stores request-related identifiers in browser storage to maintain information related to video usage. |
| ytidb::LAST_RESULT_ENTRY_KEY | never | YouTube stores the last selected result entry to support video and search-related user preferences. |
| YtIdbMeta#databases | never | YouTube stores IndexedDB metadata used in connection with interactions with embedded video content. |
| Google Maps | Google Maps is a map visualization service provided by Google and is used to embed interactive maps on the website. | |
| YouTube | YouTube is an external video service used to embed video content on the website. |
Other cookies are those that are being identified and have not been classified into any category as yet.
| Cookie | Duration | Description |
|---|---|---|
| gdlr-core-privacy-box | unknown | Description is currently not available. |
| mmenuExpandedState | session | Browser storage key detected statically in the site source code. |
The following services are actually used by the website and may involve cookies, identifiers or connections to external providers. The actual presence of cookies may vary depending on the pages visited, the preferences expressed and the functions used.
Google Analytics is a website analytics and statistics service that measures visits and how the website is used, producing statistics that help understand website performance and content interest. It may use cookies and online identifiers; where the conditions for treatment as a technical analytics tool are not met, it is activated only after consent. Privacy Policy
Google reCAPTCHA is a security and spam protection service that protects forms and website functions from spam and automated use by analysing technical data and interaction with the page. Privacy Policy
YouTube is an external multimedia content service that allows Google-hosted videos to be played directly within website pages. The player may involve connections to Google systems and the use of technical data or identifiers. The website may use the youtube-nocookie.com Privacy Enhanced Mode and may also defer loading the player until the user starts or loads the video; in the latter case the connection to the service begins only at that time. Privacy Policy
Google Maps is an external maps and geographic content service that may involve cookies, identifiers or transmission of technical data to Google. Where the service is not necessary, loading may be subject to consent. Privacy Policy
Google Fonts is an external visual resource service that loads typefaces from Google’s servers. The Data Controller does not use it to identify or profile users, but loading establishes a connection to Google servers and transmits the technical data required to request the font files. Privacy Policy
Cookie: a small portion of data stored by the browser. Tracking tool: any technology used to collect or store information on a device or about a user’s interaction, including cookies, identifiers, scripts, pixels and similar technologies. User: the person using the website. Data Controller: the person or organisation that determines the purposes and means of the processing of personal data carried out through the website.
This Privacy and Cookie Policy may be updated over time, for example following changes to the services used by the website, processing methods or applicable law. The version published on this page is the version currently in force; users are therefore encouraged to review it periodically for any changes. Last updated: 25/09/2026.
