Privacy Notice

We inform you pursuant to and by effect of articles 4 para. 5 of the Federal Data Protection Act (LPD) and, where applicable, of the art. 5, 13 and 14 of the European Regulation (EU) 2016/679 (GDPR), that the personal data provided or otherwise acquired in the context of our activity will be processed, in compliance with the principles set out in the aforementioned regulations and the stringent obligations of confidentiality to which the activity of our Company is subject.

We specify that only the processing of data that falls within the territorial scope of the art. 3 GDPR are governed by the European regulation, or in the case of:
a) offer of goods or services to natural persons in the EU;
b) monitoring the behavior of natural persons in the EU.
La Bottega del Pianoforte SA does not have a business establishment in the EU.

1. Definitions
Pursuant to this information, it is meant by:
a) «data subject»: any identified or identifiable natural person concerned by one or more personal data. It can be a subject who simply browses our website or acquires information by any means, or subjects who have contacted our company and/or have entered into a mandate of any kind;
b) “personal data”: any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, with particular reference to an identifier such as a name, an identification number, location data, an online identifier or one or more characteristic elements of his physical identity, physiological, genetic, psychic, economic, cultural or social;
c) “data worthy of particular protection” or “special data”: sensitive information such as that relating to the intimate sphere, social assistance measures, racial and ethnic origin, political opinions, religious or philosophical beliefs, union membership, biometric or health data;
d) «data relating to criminal convictions and crimes or related security measures»: personal data capable of revealing measures relating to criminal records, the register of administrative sanctions dependent on crimes and the related pending charges, or the status of defendant or as a suspect pursuant to the criminal procedure code;
e) “treatment”: any operation or set of operations, performed with or without the aid of automated processes and applied to personal data or sets of personal data, such as the collection, registration, organization, structuring, conservation , adaptation or modification, extraction, consultation, use, communication by transmission, diffusion or any other form of making available, comparison or interconnection, limitation, cancellation or destruction;
f) “data controller”: La Bottega del Pianoforte SA – via Cantonale, 65 – Bironico – 6804

2. Categories of personal data processed
As part of its activities, the Company processes the following categories of personal data:

a) ordinary personal data, with particular reference to: personal and contact data (in particular: name and surname, date of birth, citizenship, private and professional addresses, telephone numbers, professional, both landline and mobile, e-mail addresses, profession , employer), billing data, accounting data;
3. Purposes and legal bases of data processing
Personal data is processed by the Company for the following purposes:
3.1. Purposes deriving from legal obligations
The acquisition of certain personal data (in particular: name, surname, address, place and date of birth) is carried out in implementation of obligations established by laws, regulations and sector regulations.
The aims pursued are:
a) manage the administrative-accounting and tax obligations.
For treatments that meet these purposes, the retention period of personal data is 10 years starting from the termination of the contractual relationship.
The provision of personal data necessary for this purpose is not mandatory. The interested party therefore has the right not to provide them, but this refusal may jeopardize the management and/or continuation of the contractual relationship or the execution of the operations ordered by the same.
The aims pursued are:
a) establish a contractual relationship with the Company and ensure the correct execution of the related operation;
c) manage the billing relationship for the services provided to the interested party and related expenses;
d) provide customer support activities
For treatments that meet these purposes, the personal data retention period is 10 years from the termination of the contractual relationship (in line with the ordinary limitation period).

3.2. Purposes pursued on the basis of the consent of the interested party and duration
Subject to consent and up to opposition, the Company reserves the right to carry out personal data processing for its customers for direct marketing purposes, in particular in relation to newsletters, information material, surveys on the degree of satisfaction, commercial and advertising material or inherent events and initiatives. The Company does not carry out these activities in relation to interested parties possibly subject to profiling following behavior monitoring, whose data, where collected, is used only for general analyzes on the origin of the contacts and the type of services of interest.
The processing is carried out by automated means, e-mail, telephone calls via operator, text messages, and paper mail, using the following personal data: name, surname, private address, telephone number, fax number, e-mail address.
For treatments that meet these purposes, the retention period of personal data continues for the duration of the mandate and ceases at the latest within 3 years following the termination of the relationship
main contract or the requested service (for example: newsletter).
The provision of data is optional even if it is necessary to implement this purpose. Failure to provide data therefore makes it impossible for the data subject to be contacted for direct marketing initiatives.

4. Categories of recipients to whom the data may be communicated
In any case, the following is specified:
a) the Company does not transmit personal data outside Switzerland, except by virtue of a legal obligation or if this is necessary to fulfill a possible contract stipulated with the interested party, respectively on his instruction;
b) no form of dissemination of the collected data to indeterminate subjects is envisaged.

5. Methods of data processing
The data provided by the interested party may be processed automatically, manually or with the use of electronic or telematic tools, in any case equipped with procedures and systems suitable for guaranteeing security and confidentiality according to the applicable regulations.
The data in question may also be archived and stored both in paper and electronic form. Always in full compliance with the guarantees of security and confidentiality, personal data may be stored on servers located in Switzerland in accordance with current legal provisions.
A copy of the data can be obtained by writing to the Data Controller by writing to the email address bottegapianoforte@bluewin.ch or by writing to the registered office of the Company.

6. Transfer of personal data to countries outside the European Union or the European Economic Area
It is assumed that the data is transferred abroad exclusively by virtue of a legal obligation or if this is necessary to fulfill a possible contract concluded with the interested party, respectively on his instructions.
In particular, the data may be transferred where necessary for the execution of a contract concluded between the interested party and the data controller, or for the execution of pre-contractual measures adopted at the request of the interested party; or where the transfer is necessary for the conclusion or execution of a contract stipulated between the data controller and another natural or legal person in favor of the interested party; or the transfer is necessary for important reasons of public interest; or the transfer is necessary for the establishment, exercise or defense of legal claims; or the transfer is necessary to protect the vital interests of the data subject or of other persons, if the data subject is physically or legally unable to give consent; or the transfer is made from a register which, under Union or Member State law, aims to provide information to the public and can be consulted both by the general public and by anyone able to demonstrate a legitimate interest , only on condition that the requirements for consultation foreseen by the law of the Union or of the Member States are met.

7. Rights of the interested party
Just the art. 8 LPD, the interested parties have the right to verify the accuracy of their personal data, as well as to have them modified, corrected and/or updated. Upon written request, interested parties have the right to be informed if, and in what manner, personal information concerning them is being processed. Interested parties also have the right to withdraw their consent to the processing of personal data. In some particular cases, if so prescribed by law, access to data can be denied.
Data subjects have the right to obtain advice on data protection from the Federal Data Protection Commissioner (“Federal Commissioner”), as well as to report unlawful processing for the purpose of intervention when: a. there are methods of treatment which can affect the personality of a considerable number of people (system error); b. data files must be registered (Art. 11a FADP); c. there is an obligation to inform according to art. 6 para. 3 FADP.
In the event of subjecting the processing of personal data to the GDPR following profiling created on monitoring pursuant to art. 3 para. 2 lit. b GDPR, the interested party can assert his rights as expressed by the articles 15, 16, 17, 18, 19, 20, 21, 22 GDPR. Interested parties have the right to ask the Data Controller, to the extent established by law, for free access to data concerning them, their cancellation, correction of inaccurate data, integration of incomplete data, limitation of processing to conservation only, as well as the opposition to the treatment, the cancellation (right to be forgotten) and the portability of the data referred to them. The interested parties, in the event that the treatment is based on consent or on the contract and is carried out with automated tools, have the right to receive the data free of charge in a structured format, commonly used and readable by an automatic device, as well as, if technically feasible , to transmit them to another holder without impediments.
Interested parties have the right to revoke the consent given pursuant to art. 6, paragraph 1, letter a) or of the art. 9, paragraph 2, letter a) of the GDPR, without this revocation affecting the lawfulness of the treatment based on the same consent given before the revocation. Interested parties have the right to lodge a complaint with the competent Supervisory Authority in the Member State in which they usually reside or work or in the State in which the alleged violation occurred.
Regardless of the reference legislation, the exercise of rights must take place through written communication to the Data Controller, who can be contacted at the e-mail address bottegapianoforte@bluewin.ch or by writing to the address of the company’s registered office.

8. Owner / RDP / Subjects authorized to process
The data controller is La Bottega del Pianoforte SA – via Cantonale, 65 – Bironico – 6804.
Phone: 091 922 91 41
Mail: info@mbdigitalinnovation.ch
Subjects authorized to process data pursuant to art. 29 of the GDPR are the employees and collaborators of the Company who will process the data in compliance with the principles of confidentiality and security imposed by the applicable regulations.

10. Disclaimers
This disclosure was prepared on 24 August 2023. The intent of the same is to illustrate its activities related to data protection but it is not to be considered an exhaustive or binding document with the reservation of modifying the document whenever La Bottega del Pianoforte SA deems it appropriate.