F.I.V. E. Bianchi S.p.A. ("Bianchi", the "Data Controller" or "We") is constantly committed to respecting the privacy of individuals with whom we come into contact, in accordance with Regulation (EU) No. 679/2016 ("GDPR"), Legislative Decree 196/2003 and subsequent amendments, provisions and guidelines of national and European data protection authorities, as well as applicable national and European legislation (collectively, "Applicable Legislation"). Pursuant to Art. 13 GDPR, we hereby provide you with information necessary to illustrate how we will process the personal data you provide when browsing the website merchandising.bianchi.com (the "Website") or using its features.
The Website uses tracking tools to access and/or store information on your device ("Trackers"). For more information on which Trackers we use and how they process your personal data, we invite you to consult our Cookie Policy.
Last updated: April 2026
1. Who We Are – Data Controller
The data controller is F.I.V. E. Bianchi S.p.A., with registered office at Via Delle Battaglie, 5 - 24047 Treviglio (BG), Tax Code and VAT No. 01897810162.
For any request relating to the processing of your personal data, you can send a communication by post to our registered office or by email to privacy@bianchi.com.
2. Purposes, Legal Bases, Categories of Personal Data Processed and Retention Periods
We process your personal data for specific purposes (processing purposes) and only in the presence of the legal bases provided for by law (Art. 6 GDPR).
Below we provide a table summarizing, for each purpose, the legal basis and categories of data processed.
| Processing Purpose | Legal Basis | Data Processed | Retention Period |
|---|---|---|---|
| To enable, also through Trackers, the functioning and operation of the Website and its features, including registration and access to the account on the Website | The processing is based on the necessity to fulfill your request (Art. 6.1.b GDPR) | Navigation Data (IP address, device identifiers, operating system details, Tracker preferences, device characteristics, access date to the Website) Data you provide when using certain Website features such as: - name, contact details - password and other log-in data when you register or access the Website Information about communications you will have with Bianchi | Data will be processed for the period strictly necessary to provide the requested service |
| Manage your orders on the Website | The processing is necessary for the performance of pre-contractual measures adopted at the request of the data subject and for the performance of a contract with the data subject (Art. 6.1.b GDPR) | Identification and contact data Website account data (where applicable) Delivery address Billing information Payment data Purchase details Information about communications you will have with the Data Controller | Data will be retained for up to 10 years from the order |
| To carry out, also through Trackers, statistical analysis on the use of the Website | The processing is necessary for the legitimate interest of the Data Controller (Art. 6.1.f GDPR) in processing statistics to improve the Website and services offered by the Data Controller | Navigation data | Data will be retained according to the periods indicated in our Cookie Policy |
| To enable the Data Controller to send Bianchi's newsletter with promotional content. | The processing is based on your consent (Art. 6.1.a GDPR), which is free and revocable at any time | Identification and contact data Marketing preferences | Data will be processed for up to 24 months from your last interaction with the newsletter or, if earlier, until your consent withdrawal |
| To comply with regulatory provisions and requests from competent authorities | The processing is based on the necessity to comply with legal obligations to which the Data Controller is subject (Art. 6.1.c GDPR) | Any information eventually necessary and/or requested | Data will be processed according to the retention and prescription periods provided by law |
| To enable the performance of any corporate operations (e.g., merger, acquisition, sale, transfer of assets or business units, reorganization, restructuring, due diligence) | The processing is based on the legitimate interest of the Data Controller in carrying out its corporate operations (Art. 6.1.f GDPR) | Any information that may be necessary, according to a criterion of proportionality and data minimization | Data will be promptly deleted at the end of the operation (unless the third party succeeds as data controller). |
| To enable the Data Controller and/or third parties to protect their rights | The processing is based on the legitimate interest of the Data Controller in protecting its own or third parties' rights (Art. 6.1.f GDPR) | Any information that may be necessary, according to a criterion of proportionality and minimization | Data will be processed for the entire duration of the proceedings and until the final judgment of any relevant measure. In case of litigation, the retention periods identified in the previous paragraphs may be extended until the term established here. |
The Data Controller does not collect or process special categories of personal data (Art. 9 GDPR). Therefore, we invite you not to share sensitive data, yours or third parties', with Bianchi.
3. Mandatory or Optional Nature of Data Provision and Consequences of Any Refusal
Depending on the purpose, the provision of personal data constitutes a legal obligation, contractual obligation, or requirement necessary for the conclusion of the contract. In other words, apart from processing that requires your consent – and which, in its absence, will not be carried out precisely because refusing to give consent does not entail any prejudicial consequence in relation to the use of the Website – the requested data are necessary to allow you to use a service or to comply with a legal obligation and, in their absence, it may not be possible to use them.
When we collect data through forms, we indicate mandatory fields with asterisks. If you do not provide data marked with an asterisk, you may not be able to access the functionality requested through the form. In any case, you will be able to continue browsing the Website. No consequence is connected to the case where you decide not to provide information marked as optional.
4. Personal Data and Social Media
Bianchi may also collect and process your personal data through social and public platforms such as Meta (Facebook, Instagram), X (Twitter), Pinterest, TikTok, LinkedIn, and YouTube. For example, if you tag the Data Controller in comments or other content you publish on these platforms, the Data Controller may process information relating to such content. Such processing will take place in accordance with your account settings on that platform and the terms for processing personal data provided by the relevant platform.
When you browse our official pages on these platforms, they collect data to provide aggregate statistics (so-called "insights") on interaction with their content. As administrators of these pages, we only have access to aggregate insights data. For these processing activities, the Data Controller and the platform controllers act as joint controllers. For more information, we invite you to consult the privacy policy of the relevant platform.
5. Categories of Recipients and Data Transfer Outside the EEA
To carry out processing activities, the Data Controller needs the support of third parties, who act as data processors, joint controllers, or data controllers, depending on their nature and agreements with the Data Controller. In particular:
- third parties who carry out activities connected or instrumental to the Data Controller's activity (such as, for example, other companies in the group to which the Data Controller belongs, suppliers entrusted with the management and maintenance of the Website infrastructure, IT and telematic service or hosting companies and, with reference to personal data collected through Trackers, suppliers and managers of cookies and other tracking technologies);
- consultants, lawyers, accountants and other professionals of the Data Controller or of another party involved in a corporate operation, as well as the party involved as potential and/or actual assignee, buyer etc.;
- judicial, administrative, regulatory and public security authorities, in the event of fulfillment of legal obligations incumbent on the Data Controller.
Some sections of the Website include links to third-party services; if you decide to click on such links, your data may be shared with such third parties and/or such third parties may directly collect your data through your interactions with such sites or linked features.
Your personal data may be transferred outside the European Economic Area ("EEA"). If the Data Controller needs to transfer personal data outside the EEA, appropriate transfer tools will be adopted and, if necessary, supplementary measures suitable to ensure that personal data are ensured a level of protection substantially equivalent to that guaranteed in the EU, in accordance with Chapter V of the GDPR.
The complete and updated list of such subjects is available upon request, at the contacts indicated at the beginning of this Privacy Policy.
6. Data Subject Rights
In accordance with the provisions of Applicable Legislation, you may exercise the following rights:
- the right to obtain from Bianchi confirmation of whether or not personal data concerning you are being processed and, in that case, to obtain access to your personal data (right of access, Art. 15 GDPR);
- the right to obtain the rectification of inaccurate personal data concerning you and the integration of incomplete personal data (right to rectification, Art. 16 GDPR);
- the right to obtain the erasure of personal data concerning you (right to be forgotten, Art. 17 GDPR);
- the right to obtain from Bianchi the restriction of processing (right to restriction of processing, Art. 18 GDPR);
- the right to receive in a structured, commonly used and machine-readable format the personal data concerning you provided to Bianchi and the right to transmit such data to another controller without hindrance from Bianchi (right to data portability, Art. 20 GDPR);
- the right to withdraw consent previously given, following the instructions contained in each marketing communication as well as by sending a request to the contacts indicated in this privacy policy.
Furthermore, if you believe that the processing of personal data concerning you violates the principles set forth in Applicable Legislation, you may lodge a complaint with the Judicial Authority or with the supervisory authority for the protection of personal data in the Member State where you habitually reside, work, or where the alleged violation occurred.
The competent Authority in Italy is the Italian Data Protection Authority ("Garante"). More information on how to lodge complaints is available on the Garante's website at http://www.garanteprivacy.it.
7. Changes to the Privacy Policy
Bianchi may integrate and/or update, in whole or in part, this privacy policy. It is understood that any modification, integration or update will be communicated in accordance with Applicable Legislation.