Information notice pursuant to Art. 13 and 14 of EU Regulation 2016/679 (GDPR) — Last updated: March 2026
1. Data Controller
The Data Controller for this website is:
Holzner & Bertagnolli Engineering S.r.l.
Via del Sole 16, I-39011 Lana (BZ), Italy
E: info@h-b.eu
T: +39 0473 56 15 26
VAT No.: IT02692230218
This company does not currently appoint a Data Protection Officer (DPO), as it does not fall within the categories required to do so under Art. 37 GDPR. For any privacy-related requests, please contact us directly at the address above.
2. Data collected and purposes of processing
a) Clients and suppliers
When entering into or managing a business relationship, we may collect: name and surname, email address, postal address, telephone number, tax code / VAT number, and banking details where necessary.
This data is processed to: identify and communicate with clients and suppliers; provide our professional engineering services; issue invoices and manage contractual obligations; handle any legal claims.
Legal basis: Art. 6(1)(b) GDPR — processing necessary for the performance of a contract or pre-contractual measures.
Retention: data is kept for the duration of the business relationship and thereafter for the period required by applicable tax and accounting laws (generally 10 years under Italian law).
b) Website visitors — server logs
When you visit our website, your browser automatically transmits information to our server, which is temporarily stored in log files. This includes: IP address, date and time of access, name and URL of the requested file, referring URL, browser type and version, operating system.
Legal basis: Art. 6(1)(f) GDPR — legitimate interest in ensuring the secure and stable operation of the website.
Retention: log files are deleted automatically after 30 days.
c) Contact form
If you use the contact form on our website, we collect your name, email address, and any information you choose to include in your message. This data is used solely to respond to your enquiry.
Legal basis: Art. 6(1)(a) GDPR — your freely given consent at the time of submission.
Retention: data is deleted once your enquiry has been fully addressed, unless a longer retention period is required by law or by the nature of an ongoing relationship.
d) Job applications (Careers section)
If you submit a job application or spontaneous candidacy via our website or by email, we collect the personal data contained in your CV and cover letter (name, contact details, education, work experience, and any other information you voluntarily provide).
Legal basis: Art. 6(1)(b) GDPR — processing necessary for pre-contractual measures at your request; Art. 6(1)(a) GDPR for any data processed beyond strict necessity.
Retention: application data is retained for a maximum of 12 months after receipt, unless you consent to a longer retention period or a contractual relationship is established. You may withdraw your application at any time by writing to info@h-b.eu.
3. Data sharing and third parties
We do not sell or trade your personal data. We may share your data with third parties only in the following circumstances:
- with technical service providers (e.g. hosting, website maintenance) acting as data processors under Art. 28 GDPR, bound by appropriate data processing agreements;
- when required by law or by order of a competent authority;
- when necessary to establish, exercise or defend legal claims;
- with your explicit prior consent.
4. International data transfers
Where personal data is transferred outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, including: adequacy decisions by the European Commission; Standard Contractual Clauses (SCCs); or other legally recognised transfer mechanisms. Google Analytics data transfers to the USA are covered by the EU–US Data Privacy Framework.
5. Cookies
For detailed information about the cookies used on this website, their purposes, durations and how to manage your preferences, please refer to our Cookie Policy.
6. Your rights under the GDPR
You have the right to:
- Access (Art. 15): obtain confirmation of whether we process your data and receive a copy;
- Rectification (Art. 16): request correction of inaccurate or incomplete data;
- Erasure (Art. 17): request deletion of your data where the legal conditions are met;
- Restriction (Art. 18): request that processing be limited in certain circumstances;
- Data portability (Art. 20): receive your data in a structured, machine-readable format;
- Objection (Art. 21): object to processing based on legitimate interests or for direct marketing purposes;
- Withdrawal of consent (Art. 7(3)): withdraw any consent given at any time, without affecting the lawfulness of prior processing;
- Lodge a complaint (Art. 77): with the supervisory authority of your place of residence or establishment.
In Italy, the supervisory authority is:
Garante per la Protezione dei Dati Personali
Piazza Venezia 11, 00187 Roma — garanteprivacy.it
To exercise any of the above rights, please contact us at info@h-b.eu. We will respond within 30 days of receipt of your request.
7. Data security
This website uses SSL/TLS encryption for all data transmissions. We implement appropriate technical and organisational measures to protect your personal data against accidental loss, destruction, alteration, unauthorised disclosure or access, in accordance with Art. 32 GDPR. These measures are reviewed and updated on an ongoing basis.
8. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, the website, or applicable legislation. The current version is always available at https://www.h-b.eu/privacy-policy/. The date of the last update is indicated at the top of this page.