Privacy Policy

Information on the Processing of Personal Data Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR)

Last updated: 30 October 2026

1. Data Controller

The Data Controller is BAM S.r.l. – Advertising Agency, with its registered office at Strada Conservatorio, 33 – 43121 Parma (PR), Italy.

2. Categories of Personal Data Processed

When visiting this website, the following categories of personal data may be processed:

Browsing data: IP address, browser and device information, pages visited, dates and times of access, and other technical data necessary for the operation and security of the website.

Data collected through cookies and similar technologies: information about website usage and, where required and subject to prior consent, data used for statistical analysis and advertising measurement.

Data voluntarily provided by users: personal information submitted through communications sent to the company’s email addresses, such as names, email addresses and message content.

The website does not provide user registration forms, newsletters or restricted user areas.

3. Purposes and Legal Bases for Processing

Personal data may be processed for the following purposes:

Website operation and security: ensuring the proper delivery of website content, preventing unauthorised access and protecting the IT infrastructure. Legal basis: the Data Controller’s legitimate interests under Article 6(1)(f) of the GDPR, where applicable.

Managing communications: responding to enquiries voluntarily submitted to the company’s email addresses. Legal basis: taking steps at the data subject’s request prior to entering into a contract, or the Data Controller’s legitimate interests, depending on the nature of the communication.

Statistical analysis: understanding website usage and improving content and performance through analytics tools. Legal basis: consent, where required for the use of the relevant technologies.

Advertising measurement: assessing the effectiveness of promotional activities through any tracking tools activated on the website. Legal basis: consent, where required.

Legal compliance: fulfilling statutory obligations and responding to requests from competent authorities. Legal basis: compliance with a legal obligation.

4. Cookies and Consent Management

The website uses technical cookies necessary for its operation and may use analytics and advertising cookies that require user consent.

Cookie preferences are managed through CookieYes, which allows users to accept, reject or customise non-essential cookie categories and subsequently change their choices.

For information about cookie categories, individual cookies and their respective durations, please refer to our Cookie Policy.

5. Third-Party Services

Google Analytics

The website uses Google Analytics to collect statistical information about browsing activity, including pages visited, interactions and technical device characteristics. Analytics cookies are activated subject to consent where required.

Google Tag Manager

The website may use Google Tag Manager to manage tags and measurement tools. This service enables other tools to be loaded, and their activation must comply with applicable consent preferences.

Google Advertising Measurement Tools

The website may use Google technologies to measure the effectiveness of advertising campaigns, where activated and in accordance with the preferences expressed by users.

Vimeo

The homepage features a video hosted on Vimeo. Loading the video player may involve transmitting technical information about the connection and device to Vimeo, even when no cookies are stored in the browser.

CookieYes

The website uses CookieYes to collect and store cookie preferences and allow users to change them.

Further information about processing carried out by individual providers can be found in their respective privacy policies.

6. Processing Methods and Security

Personal data is processed using electronic and digital systems in accordance with the principles of lawfulness, fairness, transparency, data minimisation and purpose limitation.

BAM implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or unlawful disclosure.

7. Recipients of Personal Data

Personal data may be processed by authorised BAM personnel and by providers of technical services, hosting, maintenance, analytics and content management, to the extent necessary for their respective activities.

Where required by law, these providers act as Data Processors pursuant to Article 28 of the GDPR.

Personal data may also be disclosed to competent authorities where required by law.

8. International Data Transfers

The use of services provided by international companies, including Google and Vimeo, may involve transferring personal data outside the European Economic Area.

Where applicable, such transfers must comply with the GDPR and be based on European Commission adequacy decisions, Standard Contractual Clauses or other safeguards provided for by applicable legislation.

The actual conditions depend on the providers and services used.

9. Data Retention

Personal data is retained for periods proportionate to the purposes for which it is processed.

In particular:

  • Technical browsing data and security logs are retained according to operational requirements and the hosting provider’s policies.
  • Email communications are retained for as long as necessary to handle enquiries and any resulting relationships, unless legal obligations or the need to protect legal rights require otherwise.
  • Data processed through analytics and advertising tools is subject to the retention periods configured within the relevant services.
  • Information about cookies and their respective durations is provided in the Cookie Policy.

Actual retention periods must be verified against the settings of the services used.

10. Data Subject Rights

Under the conditions established by the GDPR, data subjects may exercise the following rights:

  • Access to their personal data.
  • Rectification of inaccurate data.
  • Erasure of personal data.
  • Restriction of processing.
  • Data portability, where applicable.
  • Objection to processing, where provided for by law.
  • Withdrawal of consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise these rights, please contact privacy@bam.srl.

Data subjects also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) at (www.garanteprivacy.it).

11. Links to External Websites

The website may contain links to third-party websites and services. BAM is not responsible for the data processing practices adopted by these third parties, which are governed by their respective privacy policies.

12. Updates to This Privacy Policy

BAM reserves the right to update this Privacy Policy to reflect changes in legislation, technology or organisational practices.

The updated version will be made available on this page, indicating the date of the latest revision.