Privacy Policy BMP

Last updated: 8 May 2026

Welcome to the bmpdoors.com website. Your privacy is important to us. This Privacy Notice explains how we collect, use and protect your personal data when you browse our website, subscribe to our newsletter or use our online services.

This Privacy Notice describes how personal data is processed in relation to users who visit the website, subscribe to our newsletter or make use of the services available through it.

The Data Controller is:

BMPEUROPE SRL –  Registered Office: Corso Vittorio Emanuele II, 52 –  VAT Number and Tax Code: 03389280045 –  Email:  [email protected]  Phone Number: +39 0141 948843

(hereinafter referred to as the “Data Controller” or the “Company”).

The Data Controller processes the following categories of personal data (hereinafter referred to as the “Personal Data”):

a) Browsing Data: The computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is inherent in the use of Internet communication protocols. This category of data includes IP addresses, the domain names of the computers and devices used by users, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file returned in response, the numerical status code indicating the outcome of the server’s response (successful, error, etc.), and other parameters relating to the user’s operating system and IT environment.

b) Data Voluntarily Provided by the User: The optional, explicit and voluntary sending of messages to the Data Controller’s contact addresses, as well as the completion and submission of the forms available on this website (e.g. contact forms, quotation request forms and newsletter subscription forms), results in the collection of the sender’s contact details, which are necessary to respond to the request, together with any personal data included in the communication. Such data may include, but are not limited to:

• First and last name
• Email address
• Telephone number
• Company name
• Any other information voluntarily provided in the body of the message.

c) Cookies and Other Tracking Technologies: Our website uses cookies and other tracking technologies. For detailed information, please refer to the Cookie Policy set out in Section 11 of this Privacy Notice.

Your Personal Data are processed for the following purposes and on the basis of the following legal grounds:

The provision of Personal Data for the purposes set out in Sections 3.1 and 3.2 is mandatory. Failure to provide such data will make it impossible to process your requests or to comply with applicable legal obligations. The provision of Personal Data for the purposes of Direct Marketing (Section 3.3) and Profiling (Section 3.4) is voluntary. Refusal to provide consent will not affect your ability to use the services available on this website. However, it will prevent the Data Controller from sending you personalised or general marketing communications.

Personal Data are collected for the following purposes using the services described below:

Contacting the User
Mailing List or Newsletter (EmailOctopus)
By subscribing to the mailing list or newsletter, the User’s email address is automatically added to a contact list that may receive email communications containing information, including commercial and promotional content, relating to the services offered by the Data Controller.

The User’s email address may also be added to this mailing list following registration on the website or after submitting requests through the contact forms available on the website.
Personal Data collected: email address, first name, last name, company name.

To unsubscribe from the newsletter, Users may use the dedicated unsubscribe link included in every email communication or send a request to [email protected] specifying “Newsletter Unsubscribe” in the subject line.

Contact Form
By completing the contact form with their Personal Data, the User consents to the processing of such data for the purpose of responding to requests for information, quotations or any other request specified in the relevant form.
Personal Data collected: city, last name, email address, first name, telephone number, province/state and company name.

Google Analytics
Google Analytics is a web analytics service provided by Google LLC (“Google”). Google uses the Personal Data collected to monitor and analyse the use of this website, prepare reports on website activity and share such information with other Google services.

Google may also use the Personal Data collected to contextualise and personalise advertisements within its advertising network.
Personal Data collected: analytics cookies, IP address, device and browser information, website browsing data, pages visited, session duration and interactions with the website content.

Google Ads and Remarketing
This website uses advertising, remarketing and conversion tracking services provided by Google LLC. These services enable the display of personalised advertisements based on the User’s browsing behaviour and allow the effectiveness of advertising campaigns to be measured.
Personal Data collected: advertising and profiling cookies, online identifiers, website usage data, device and browser information, interactions with advertisements and conversion-related data.

Google Tag Manager
Google Tag Manager is a tag management service provided by Google LLC that enables the centralised management of scripts and third-party tools used on the website. Google Tag Manager does not directly collect Users’ Personal Data but may activate other services that process Personal Data as described in this Privacy Notice.
Personal Data collected: none directly by Google Tag Manager; any Personal Data are processed by the services deployed through the tag management system.

Display of Content from External Platforms
This website may incorporate content hosted on external platforms, such as YouTube videos, Google Maps and Google Fonts. These services may collect traffic data relating to the pages on which they are installed, even if the User does not directly interact with the relevant service.
Personal Data collected: cookies, IP address, device and browser information, usage data and information relating to interactions with embedded content.

Your Personal Data are processed by means of the operations referred to in Article 4(2) of the GDPR, including collection, recording, organisation, structuring, storage, consultation, processing, adaptation or alteration, retrieval, comparison, use, disclosure by transmission, dissemination or otherwise making available, restriction, erasure and destruction.

Your Personal Data are processed using both paper-based and electronic and/or automated means. The Data Controller has implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risks involved and to prevent accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, Personal Data.

The Data Controller will process your Personal Data only for as long as necessary to achieve the purposes for which they were collected and, in any event, no longer than the retention periods specified below:

• Service Provision and Request Management (4.1): Personal Data will be retained for the time necessary to process your request. Where the request results in the conclusion of a contract, the Personal Data will be retained for the entire duration of the contractual relationship and, thereafter, for 10 years in order to comply with legal obligations (ordinary limitation period).
• Compliance with Legal Obligations (4.2): Personal Data will be retained for the period required under the applicable legislation (e.g. 10 years for accounting records).
• Direct Marketing (4.3): Personal Data will be retained for a maximum period of 24 months from the date consent is given, or until such consent is withdrawn.
• Profiling (4.4): Personal Data will be retained for a maximum period of 12 months from the date consent is given, or until such consent is withdrawn.
• Technical Operation and Statistical Analysis (4.5) and Protection of Legal Rights (4.6): Browsing Data are retained for no longer than seven days, except where longer retention is necessary for the investigation of criminal offences by the competent judicial authorities.

Upon expiry of the above retention periods, the Personal Data will be permanently deleted or irreversibly anonymised.

Your Personal Data may be disclosed, for the purposes described above, to:

• • Employees and authorised personnel of the Data Controller, acting in their capacity as persons authorised to process Personal Data.
  • Third-party companies or other entities providing outsourced services on behalf of the Data Controller, acting as Data Processors pursuant to Article 28 of the GDPR. An up-to-date list of the Data Processors is available at the registered office of the Data Controller. These may include, by way of example:
    • Technical service providers (e.g. hosting providers and IT maintenance companies); marketing and communication agencies; professional firms and consultancy companies (legal, tax and administrative); newsletter and marketing communication platforms (EmailOctopus Ltd.); technical and infrastructure service providers, including website hosting and maintenance providers; Google LLC for Analytics, Ads, Tag Manager, Maps and YouTube services; and Usercentrics A/S for consent management through Cookiebot.
    • Supervisory authorities, judicial authorities and any other public bodies or entities where disclosure is required by applicable law. Such recipients will process the Personal Data in their capacity as independent Data Controllers.

     

Your Personal Data will not be disclosed to the public.

Personal Data collected through this website will not be disclosed to the public. However, in order to provide certain services (e.g. hosting, cloud services, and analytics and marketing tools such as Google Analytics), Personal Data may be transferred to third countries outside the European Economic Area (EEA), in particular to the United States of America.

The Data Controller ensures that any transfer of Personal Data outside the EEA is carried out in full compliance with the provisions set out in Chapter V of Regulation (EU) 2016/679 (GDPR). Such transfers are based on one of the following legal mechanisms:

• • Adequacy Decisions (Article 45 GDPR): Personal Data may be transferred to organisations certified under the EU–U.S. Data Privacy Framework (European Commission Implementing Decision of 10 July 2023), which ensures a level of protection essentially equivalent to that guaranteed within the European Union.
  • Standard Contractual Clauses (SCCs) (Article 46 GDPR): Where an adequacy decision does not apply, transfers are governed by the Standard Contractual Clauses adopted by the European Commission. In accordance with the recommendations of the European Data Protection Board (EDPB), these clauses are supplemented by appropriate technical and organisational safeguards, including:
    • Encryption of Personal Data in transit using TLS/HTTPS protocols;
    • Pseudonymisation or truncation of IP addresses before transmission to servers located outside the EEA;
    • Contractual restrictions on access to Personal Data by foreign governmental authorities.

     

As a Data Subject, you are entitled to exercise the rights provided for under Articles 15–22 of the GDPR, including the following:

• Right of Access (Article 15): to obtain confirmation as to whether or not your Personal Data are being processed and, where that is the case, to access such Personal Data.
• Right to Rectification (Article 16): to obtain the rectification of inaccurate Personal Data and the completion of incomplete Personal Data.
• Right to Erasure (“Right to be Forgotten”) (Article 17): to obtain the erasure of your Personal Data in the circumstances provided for by applicable law.
• Right to Restriction of Processing (Article 18): to obtain the restriction of processing in the circumstances provided for by applicable law.
• Right to Data Portability (Article 20): to receive the Personal Data you have provided in a structured, commonly used and machine-readable format and to transmit those data to another Data Controller.
• Right to Object (Article 21): to object, at any time, on grounds relating to your particular situation, to the processing of your Personal Data based on the Data Controller’s legitimate interests. You also have the right to object at any time to the processing of your Personal Data for direct marketing purposes, including profiling.
• Right to Withdraw Consent: to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
• Right to Lodge a Complaint (Article 77): to lodge a complaint with the competent supervisory authority (in Italy, the Italian Data Protection Authority – Garante per la Protezione dei Dati Personali: www.garanteprivacy.it).

You may exercise your rights at any time by sending:

• A registered letter with acknowledgement of receipt to: BMPEUROPE SRL, Strada della Freisa No. 1, 14019 Villanova d’Asti (AT), Italy.
• An email to: [email protected]

If you no longer wish to receive direct marketing communications, you may also use the dedicated “unsubscribe” link included at the bottom of every marketing email.

For information regarding the use of cookies, tracking technologies and the consent preferences adopted by this website, please refer to the Cookie Policy available at the following link:
https://www.bmpdoors.com/cookie-policy/

How to disable cookies through your browser settings

If you would like to learn more about how your browser stores cookies while you browse the web, please refer to the following support pages provided by the respective browser vendors:

• Google Chrome
• Mozilla Firefox
• Microsoft Edge
• Safari

If your browser is not included in the list above, you may request further information by sending an email to [email protected]. We will be pleased to provide you with the information you need to browse the website anonymously and securely.

This Privacy Notice may be updated from time to time. You are therefore encouraged to review this page periodically and to refer to the “Last updated” date displayed at the top of this Privacy Notice.