Notice on the processing of personal data

1. Data controller

B1P Group S.r.l., registered office at Via Cartesio 130, 00137 Roma, tax code and VAT number 14683891007. For any request concerning personal data: info@b1pgroup.com, tel. 06 92928012.

2. Data processed

• Browsing data. To display the pages, the hosting provider's systems record the technical data of each request: IP address, date and time, page requested, browser and operating system type. Only with your consent, given in the banner, the site uses Google Analytics 4 for aggregate visit statistics (pages viewed, referral channel, device type, city-level location). The site does not use profiling or advertising tools. Details are in the cookie policy.
• Contact form. Name and company (first and last name for job applications), email address, text of the enquiry, profile selected (for example designer or contractor), date sent and confirmation of having read the privacy notice.
• Email messages. The data contained in messages sent to the addresses shown on the website and in their attachments.
• WhatsApp and Telegram messages. If you write to us with the website's WhatsApp or Telegram buttons: phone number, profile name, content of the messages and of the files sent.
• Job applications. CV, portfolio and any other data sent to hr@b1pgroup.com. We ask you not to include health data or other special categories of data under Article 9 GDPR, unless necessary.

3. Purposes and legal bases

• Displaying the website and protecting it from abuse and attacks: the controller's legitimate interest in the security of the website (Art. 6(1)(f) GDPR).
• Measuring visits to the site with Google Analytics: consent of the data subject (art. 6(1)(a) GDPR and art. 122 of Legislative Decree 196/2003), which can be withdrawn at any time from the "Manage cookies" link in the footer.
• Replying to enquiries received through the form, by email, WhatsApp or Telegram, and preparing offers: pre-contractual measures taken at the request of the data subject (Art. 6(1)(b)); for enquiries not related to a contract, legitimate interest in replying (Art. 6(1)(f)).
• Assessing job applications: pre-contractual measures (Art. 6(1)(b)); for unsolicited CVs consent is not required (Art. 111-bis of Legislative Decree 196/2003).
• Complying with legal obligations and protecting the controller's rights: Art. 6(1)(c) and (f).

To prepare replies we may use the generative artificial intelligence tools of Google Workspace (Gemini). This use is internal to the controller's organisation and serves the purposes set out above, on the basis of the legitimate interest in handling enquiries efficiently (Art. 6(1)(f) GDPR). The licence excludes the use of data for training the models and every reply is checked by a person before it is sent.

The data is not used to send marketing communications, or for profiling or automated decision-making.

4. Provision of data

Providing the data is optional. Without a name, email and the text of the enquiry we cannot reply; without a CV we cannot assess an application.

5. Recipients

The data is processed by authorised and instructed B1P Group staff. The following process it on our behalf, as data processors (Art. 28 GDPR):

• Cloudflare, Inc. (United States): website hosting and receipt of the contact form;
• Plus Five Five, Inc., operating as Resend (United States): forwarding of form messages to the company mailbox;
• Google Ireland Limited: company email and generative AI tools (Google Workspace and Gemini), where messages are received, stored and processed; Google Analytics 4 service for site statistics, only with your consent.

Where necessary, the data may be received by the controller's advisers (accountant and law firm) and by the authorities, in the cases provided for by law. The data is not disseminated. For applications sent via LinkedIn, LinkedIn's privacy notice also applies to the data processed on its platform. WhatsApp Ireland Limited and Telegram process the data of messages sent through their services as independent controllers, under their own privacy notices.

6. Transfers outside the European Union

Cloudflare, Inc., Plus Five Five, Inc. (Resend) and Google LLC, for the services of Google Ireland Limited, participate in the EU-US Data Privacy Framework: transfers to the United States are based on the European Commission's adequacy decision of 10 July 2023. The data processing agreements of all three providers also include the standard contractual clauses approved by the Commission (Art. 46 GDPR), which apply if participation in the Data Privacy Framework ends. WhatsApp and Telegram may also process message data outside the European Union, under their own privacy notices.

7. Retention

• Browsing data: B1P Group does not retain it; it remains in the hosting provider's systems for the time needed for the security of the service.
• Google Analytics statistics: 2 months, the shortest retention the service allows; then deleted.
• Contact enquiries, through the form, by email, WhatsApp or Telegram: for the time needed to reply. If a relationship results, for its duration and for the statutory periods; otherwise no longer than 24 months from the last contact.
• Job applications: 12 months from receipt, including to assess them for later positions; they are then deleted.
• Accounting and tax documents: 10 years (Art. 2220 of the Italian Civil Code).

8. Rights of the data subject

By writing to info@b1pgroup.com you can request access to your data, rectification, erasure, restriction of processing and portability, and you can object to processing based on legitimate interest (Articles 15 to 22 GDPR). We reply within one month. You can also lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (garanteprivacy.it).

9. Cookies

The site uses technical cookies and, only with your consent, Google Analytics statistics cookies. No profiling or advertising cookies. Details and how to manage your choice are in the cookie policy.

10. Changes

Changes to this notice are published on this page, with the date of the last update.