Customer care
Legal Area
Privacy Policy – BB Skill Introduction
This notice is provided pursuant to Article 13 of EU Regulation 2016/679 on the protection of personal data (hereinafter "GDPR") and in accordance with Legislative Decree 196/03 (the "Privacy Code"), in order to inform users about the processing of their personal data related to browsing and the functionalities of this website. The Data Subject, i.e., the user or visitor of the website, is hereby informed that the GDPR, together with Legislative Decree No. 196/2003 and other applicable legislation, requires personal data to be processed lawfully, fairly, and transparently, with respect for fundamental rights and freedoms and the dignity of the Data Subject, particularly concerning confidentiality, personal identity, and the right to personal data protection. This policy is subject to updates, which will be made public on the Website.
1. Definitions For the purposes of this Policy: "Personal Data": any information relating to an identified or identifiable natural person, directly or indirectly; "Authorized Person": a natural person authorized to perform processing operations by the Controller or Processor; "Data Subject": the natural person to whom the Personal Data refers; "Processor": any natural or legal person, public authority, agency, or other body that processes Personal Data on behalf of the Controller; "Data Protection Officer (DPO)": the person appointed by the Controller under Articles 37– 39 of the GDPR; "Website": https://www.bb-skill.com; "Controller": the natural or legal person, public authority, agency, or other body which determines the purposes and means of the processing of Personal Data; "Processing": any operation or set of operations on Personal Data, whether or not by automated means, such as collection, recording, organization, storage, consultation, use, disclosure, erasure, or destruction; "Disclosure": making Personal Data available to one or more specified persons other than the Data Subject; "Consent": any freely given, specific, informed, and unambiguous indication of the Data Subject’s wishes; "Profiling": any form of automated processing to evaluate certain personal aspects; "Pseudonymization": processing Personal Data in such a way that they cannot be attributed to a specific Data Subject without additional information; "User": any natural person using the Website.
2. Data Controller and Data Protection Officer
2.1 The Data Controller is GMB Finance Solutions S.r.l., managed and coordinated by Terlux S.r.l., headquartered at Viale Liegi 14, Rome 00198, VAT No. 12751211009, represented by Gian Marco Bardelli (hereinafter "Controller" or "Company").
2.2 Requests related to privacy and the rights outlined in Article 9 may be sent to privacy@bb-skill.com. 2.3 The Data Protection Officer (DPO) is Tecla Maria Panatta, reachable at tpanatta@gmbfinance.it.
3. Data Processing Location The processing of Personal Data takes place on servers located within the European Union, currently in Italy. Personal Data are not transferred outside the EU. Should servers be relocated outside the EU, the transfer will be compliant with legal requirements and Article 46 of the GDPR.
4. Purpose and Types of Personal Data 4.1 Browsing Data: Technical data (IP address, domain names, browser information, etc.) may be collected and used only for anonymous statistical purposes and to ensure proper functioning of the website.
4.2 Cookies: See the dedicated "cookie policy" section for details and user consent requirements.
4.3 Newsletter Subscription: Data (e.g., email) collected via forms is used for sending informative and commercial communications. Users can unsubscribe at any time via links or by contacting privacy@bb-skill.com.
4.4 Website Registration: Personal Data (e.g., name, email, phone, birthdate, billing/shipping address, wishlist, order history) are processed for account management and, with consent, for sending newsletters and profiling-based promotional communications.
4.5 Purchases: Data required for processing orders, shipping, and customer management are collected. Payment data is handled by third-party providers and is never accessible by the Controller. Legal bases: contract execution (Art. 6(1)(b)), legal obligations (Art. 6(1)(c)), legitimate interest (Art. 6(1)(f)), soft spam and performance analytics.
4.6 Information Requests and Reports: Personal Data included in forms or messages (e.g., name, email) is processed solely to respond to user requests for up to three years.
4.7 Voluntary Data Submission: Data provided voluntarily (e.g., via email or forms) is processed to prepare or fulfill a requested contract (Art. 6(1)(b) GDPR).
5. Processing Methods and Duration Personal Data are processed lawfully, fairly, transparently, for specified purposes, and with appropriate security measures. Data are retained only as long as needed for processing purposes and in accordance with the law.
6. Optional Nature of Data Provision Except for browsing data, providing Personal Data is optional, but refusal may prevent correct handling of contact requests, account creation, or order processing.
7. Data Recipients
7.1 Personal Data will not be disclosed unless necessary, and only to the extent required to fulfill processing purposes. Authorized service providers and public authorities (for legal obligations) may receive such data.
7.2 Payment service providers act as separate controllers. The Company is not responsible for their processing operations.
8. Data Security
8.1 All data is stored in secure systems accessible only by authorized personnel. The website is monitored to prevent breaches and to protect data from unauthorized access or damage.
8.2 According to Article 32 GDPR, the Controller applies adequate technical and organizational measures, including pseudonymization and encryption, to ensure data protection and rights of Data Subjects.
9. Data Subject Rights 9.1 The Data Subject may exercise the following rights at any time: - Access: obtain information on data processing; - Rectification: correct inaccurate data; - Erasure: request deletion under specific conditions; - Restriction: request limited processing under Article 18 GDPR; - Objection: object to processing unless overridden by legitimate interest; - Portability: receive or transfer data in structured, commonly used, machine-readable format.
9.2 Under Article 7(3) GDPR, consent may be withdrawn at any time without affecting previous processing's lawfulness. Processing based on other legal grounds may continue.
9.3 Rights can be exercised by contacting privacy@bb-skill.com.
9.4 The Data Subject also has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) at www.garanteprivacy.it Please consult our Cookie Policy
This notice is provided pursuant to Article 13 of EU Regulation 2016/679 on the protection of personal data (hereinafter "GDPR") and in accordance with Legislative Decree 196/03 (the "Privacy Code"), in order to inform users about the processing of their personal data related to browsing and the functionalities of this website. The Data Subject, i.e., the user or visitor of the website, is hereby informed that the GDPR, together with Legislative Decree No. 196/2003 and other applicable legislation, requires personal data to be processed lawfully, fairly, and transparently, with respect for fundamental rights and freedoms and the dignity of the Data Subject, particularly concerning confidentiality, personal identity, and the right to personal data protection. This policy is subject to updates, which will be made public on the Website.
1. Definitions For the purposes of this Policy: "Personal Data": any information relating to an identified or identifiable natural person, directly or indirectly; "Authorized Person": a natural person authorized to perform processing operations by the Controller or Processor; "Data Subject": the natural person to whom the Personal Data refers; "Processor": any natural or legal person, public authority, agency, or other body that processes Personal Data on behalf of the Controller; "Data Protection Officer (DPO)": the person appointed by the Controller under Articles 37– 39 of the GDPR; "Website": https://www.bb-skill.com; "Controller": the natural or legal person, public authority, agency, or other body which determines the purposes and means of the processing of Personal Data; "Processing": any operation or set of operations on Personal Data, whether or not by automated means, such as collection, recording, organization, storage, consultation, use, disclosure, erasure, or destruction; "Disclosure": making Personal Data available to one or more specified persons other than the Data Subject; "Consent": any freely given, specific, informed, and unambiguous indication of the Data Subject’s wishes; "Profiling": any form of automated processing to evaluate certain personal aspects; "Pseudonymization": processing Personal Data in such a way that they cannot be attributed to a specific Data Subject without additional information; "User": any natural person using the Website.
2. Data Controller and Data Protection Officer
2.1 The Data Controller is GMB Finance Solutions S.r.l., managed and coordinated by Terlux S.r.l., headquartered at Viale Liegi 14, Rome 00198, VAT No. 12751211009, represented by Gian Marco Bardelli (hereinafter "Controller" or "Company").
2.2 Requests related to privacy and the rights outlined in Article 9 may be sent to privacy@bb-skill.com. 2.3 The Data Protection Officer (DPO) is Tecla Maria Panatta, reachable at tpanatta@gmbfinance.it.
3. Data Processing Location The processing of Personal Data takes place on servers located within the European Union, currently in Italy. Personal Data are not transferred outside the EU. Should servers be relocated outside the EU, the transfer will be compliant with legal requirements and Article 46 of the GDPR.
4. Purpose and Types of Personal Data 4.1 Browsing Data: Technical data (IP address, domain names, browser information, etc.) may be collected and used only for anonymous statistical purposes and to ensure proper functioning of the website.
4.2 Cookies: See the dedicated "cookie policy" section for details and user consent requirements.
4.3 Newsletter Subscription: Data (e.g., email) collected via forms is used for sending informative and commercial communications. Users can unsubscribe at any time via links or by contacting privacy@bb-skill.com.
4.4 Website Registration: Personal Data (e.g., name, email, phone, birthdate, billing/shipping address, wishlist, order history) are processed for account management and, with consent, for sending newsletters and profiling-based promotional communications.
4.5 Purchases: Data required for processing orders, shipping, and customer management are collected. Payment data is handled by third-party providers and is never accessible by the Controller. Legal bases: contract execution (Art. 6(1)(b)), legal obligations (Art. 6(1)(c)), legitimate interest (Art. 6(1)(f)), soft spam and performance analytics.
4.6 Information Requests and Reports: Personal Data included in forms or messages (e.g., name, email) is processed solely to respond to user requests for up to three years.
4.7 Voluntary Data Submission: Data provided voluntarily (e.g., via email or forms) is processed to prepare or fulfill a requested contract (Art. 6(1)(b) GDPR).
5. Processing Methods and Duration Personal Data are processed lawfully, fairly, transparently, for specified purposes, and with appropriate security measures. Data are retained only as long as needed for processing purposes and in accordance with the law.
6. Optional Nature of Data Provision Except for browsing data, providing Personal Data is optional, but refusal may prevent correct handling of contact requests, account creation, or order processing.
7. Data Recipients
7.1 Personal Data will not be disclosed unless necessary, and only to the extent required to fulfill processing purposes. Authorized service providers and public authorities (for legal obligations) may receive such data.
7.2 Payment service providers act as separate controllers. The Company is not responsible for their processing operations.
8. Data Security
8.1 All data is stored in secure systems accessible only by authorized personnel. The website is monitored to prevent breaches and to protect data from unauthorized access or damage.
8.2 According to Article 32 GDPR, the Controller applies adequate technical and organizational measures, including pseudonymization and encryption, to ensure data protection and rights of Data Subjects.
9. Data Subject Rights 9.1 The Data Subject may exercise the following rights at any time: - Access: obtain information on data processing; - Rectification: correct inaccurate data; - Erasure: request deletion under specific conditions; - Restriction: request limited processing under Article 18 GDPR; - Objection: object to processing unless overridden by legitimate interest; - Portability: receive or transfer data in structured, commonly used, machine-readable format.
9.2 Under Article 7(3) GDPR, consent may be withdrawn at any time without affecting previous processing's lawfulness. Processing based on other legal grounds may continue.
9.3 Rights can be exercised by contacting privacy@bb-skill.com.
9.4 The Data Subject also has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) at www.garanteprivacy.it Please consult our Cookie Policy