Privacy Policy

This privacy policy explains which personal data bonolinitransfer.com collects, why it is collected and what your rights are.

Last updated: 5 October 2026. This English page describes the services in use on this website on that date.

Data Controller

Giovanni Bonolini, Bonolini Transfer
Via Toti 52, 23100 Sondrio (SO), Italy
VAT number 00994160141
Email: info@bonolinitransfer.com

Types of data collected

Among the personal data collected by this website, directly or through third parties, there are:

Trackers and Usage Data;
number of Users and session statistics;
first name, last name, phone number and email address;
data communicated while using the service, such as the details of a transfer request;
the content of messages and emails, the date and time a message was sent and its sender;
the profile picture and answers to questions exchanged on WhatsApp.

Complete details on each type of personal data collected are provided in the dedicated sections of this privacy policy or through specific information shown before the data is collected.

Personal data may be freely provided by the User or, in the case of Usage Data, collected automatically when using this website.

Unless specified otherwise, all data requested by this website is mandatory. If the User refuses to provide it, it may be impossible for this website to provide the Service. Where this website states that some data is optional, Users are free not to provide it, without any consequence for the availability or the functioning of the Service.

Users who are uncertain about which data is mandatory are welcome to contact the Controller.

Any use of Cookies or other Trackers by this website or by the owners of third-party services used by this website serves to provide the Service requested by the User, in addition to the other purposes described in this document and in the Cookie Policy.

Users are responsible for any third-party personal data obtained, published or shared through this website.

Methods and place of processing

Methods of processing

The Controller takes appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of personal data.

Data is processed using computers and IT-enabled tools, following organisational procedures and methods strictly related to the purposes indicated. In addition to the Controller, the data may in some cases be accessible to other persons involved in running this website (administration, sales, marketing, legal, system administration) or to external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies and communications agencies) appointed, if necessary, as Data Processors by the Controller. The updated list of these parties may be requested from the Controller at any time.

Place

Data is processed at the Controller’s operating offices and in any other places where the parties involved in the processing are located. For further information, please contact the Controller.

The User’s personal data may be transferred to a country other than the one in which the User is located. To find out more about the place of processing, the User can refer to the section with the details on the processing of personal data.

Retention time

Unless specified otherwise in this document, personal data is processed and stored for as long as required by the purpose for which it was collected, and may be kept longer because of applicable legal obligations or on the basis of the User’s consent.

Purposes of processing

The User’s data is collected to allow the Controller to provide its Service, comply with its legal obligations, respond to enforcement requests, protect its rights and interests (or those of its Users or third parties), detect any malicious or fraudulent activity, and for the following purposes:

contacting the User and handling requests;
statistics;
advertising conversion tracking;
tag management;
platform services and hosting;
traffic optimisation and distribution;
displaying content from external platforms;
backup saving and management;
managing consent preferences;
creating and managing this website.

Detailed information on the processing

Contacting the User and handling requests

WhatsApp and email. When you contact us on WhatsApp or by email, we process the data you send us (such as first name, last name, phone number, email address, message content, date, time and sender of the message, WhatsApp profile picture, and the details of your transfer request) to answer your request and prepare a quote. WhatsApp is provided by Meta Platforms, Inc. Place of processing: United States. WhatsApp privacy policy.

Request handling and contact attribution. When you click a WhatsApp or email link on this website, the page sends our internal booking management system the landing page, the referring website, any campaign parameters of your visit (UTM parameters and Google click identifiers) and a random visitor identifier stored in your browser, so that your request can be linked to the page or campaign that brought you to us. A short reference code may be added to the pre-filled WhatsApp message for the same reason. The system is hosted by Vercel, Inc. (United States). See the Cookie Policy for the browser storage involved.

Creating and managing this website

WordPress (self-hosted). This website is built and managed by the Controller with a content management system called WordPress. Personal data processed: Usage Data.

Tag management

This type of service helps the Controller manage the tags or scripts needed on this website centrally. As a result, the User’s data may flow through these services and may be retained.

Google Tag Manager. A tag management service provided by Google Ireland Limited. Personal data processed: Usage Data and Trackers. Place of processing: Ireland. For information on how Google uses data, see its partner policy and its Business Data page.

Platform services and hosting

These services host and run key components of this website, so that it can be provided from a single platform.

IONOS. A platform provided by IONOS Group SE that allows the Controller to build, run and host this website. Personal data processed: Usage Data. Place of processing: Germany.

Traffic optimisation and distribution

This type of service allows this website to distribute its content through servers located in different countries and to optimise its performance. Given the distributed nature of these systems, it is difficult to determine where content that may contain the User’s personal data is transferred.

cdnjs. A content delivery service provided by Cloudflare, Inc., used to load the Font Awesome icon library. Personal data processed: Usage Data. Place of processing: United States. Privacy policy.

Statistics

The services in this section allow the Controller to monitor and analyse web traffic and to keep track of User behaviour.

Google Analytics 4. A web analytics service provided by Google Ireland Limited (“Google”). Google uses the data collected to track and examine the use of this website, to prepare reports on its activities and to share them with other Google services. Google may use the data to contextualise and personalise the ads of its own advertising network. In Google Analytics 4, IP addresses are used at collection time and then discarded before the data is stored in any data centre or server. Personal data processed: Usage Data, number of Users, session statistics and Trackers. Place of processing: Ireland. Privacy policy · Opt out.

Google Analytics stores its cookies only if you consent to the “Measurement” purpose. Without consent, Google tags work in Consent Mode: they do not store cookies and may send Google signals without cookies.

Advertising conversion tracking

Google Ads conversion tracking. A service provided by Google Ireland Limited that connects data from the Google Ads advertising network with actions performed on this website, such as a click on the WhatsApp or email contact links, to measure the results of our ads. Personal data processed: Usage Data and Trackers. Place of processing: Ireland. Privacy policy.

Advertising cookies are stored only if you consent to the “Marketing” purpose.

Displaying content from external platforms

This type of service allows you to view content hosted on external platforms directly from the pages of this website. Such services may collect web traffic data for the pages where they are installed, even when Users do not use them.

Google Fonts. A typeface visualisation service provided by Google LLC. Personal data processed: Usage Data and Trackers. Place of processing: United States.

Font Awesome. An icon and typeface visualisation service provided by Fonticons, Inc. Personal data processed: Usage Data and Trackers. Place of processing: United States. Privacy policy.

Shapo. A widget provided by Shapo (shapo.io) that displays customer reviews on some pages of this website. Personal data processed: Usage Data. For the place of processing, see the provider’s privacy policy.

Backup saving and management

Sectigo CodeGuard. A backup service provided by Sectigo Limited that saves backups of this website on external servers. Backups may include the source code, the content and the data provided to this website by the User. Personal data processed: various types of data. Place of processing: United Kingdom.

Managing consent preferences

iubenda Privacy Controls and Cookie Solution. A service provided by iubenda S.r.l. that collects and stores the User’s consent choices for the purposes described in the Cookie Policy. Place of processing: Italy.

Cookie Policy

This website uses Trackers. To learn more, read the Cookie Policy, which also explains how to opt out of interest-based advertising.

Further information for users in the European Union

Legal basis of processing

The Controller may process personal data relating to Users if one of the following applies:

Users have given their consent for one or more specific purposes;
provision of the data is necessary for the performance of an agreement with the User and/or for any pre-contractual obligations thereof;
processing is necessary for compliance with a legal obligation to which the Controller is subject;
processing is related to a task carried out in the public interest or in the exercise of official authority vested in the Controller;
processing is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party.

In any case, the Controller will gladly help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract.

Further information about retention time

personal data collected for purposes related to the performance of a contract between the Controller and the User is retained until that contract has been fully performed;
personal data collected for the purposes of the Controller’s legitimate interests is retained as long as needed to fulfil those purposes. Users can find more information about the legitimate interests pursued by the Controller in the relevant sections of this document or by contacting the Controller.

The Controller may keep personal data for a longer period whenever the User has given consent to such processing, as long as that consent is not withdrawn. The Controller may also be obliged to retain personal data for a longer period to comply with a legal obligation or upon the order of an authority.

Once the retention period expires, personal data is deleted. Therefore, the rights of access, erasure, rectification and data portability cannot be enforced after the retention period has expired.

Your rights under the General Data Protection Regulation (GDPR)

Users may exercise certain rights regarding their data processed by the Controller. In particular, to the extent permitted by law, Users have the right to:

withdraw their consent at any time, where they have previously given consent to the processing of their personal data;
object to the processing of their data, if the processing is carried out on a legal basis other than consent;
access their data, obtain information on the data processed by the Controller and on certain aspects of the processing, and receive a copy of the data;
verify and seek rectification of their data, by checking its accuracy and asking for it to be updated or corrected;
restrict the processing of their data, in which case the Controller will not process the data for any purpose other than storing it;
have their personal data deleted or otherwise removed by the Controller;
receive their data and have it transferred to another controller, in a structured, commonly used and machine-readable format and, where technically feasible, without any hindrance;
lodge a complaint with the competent data protection supervisory authority or take legal action.

Users are also entitled to learn about the legal basis for data transfers abroad, including to any international organisation governed by public international law or set up by two or more countries, such as the UN, and about the security measures taken by the Controller to safeguard their data.

Details about the right to object to processing

Where personal data is processed for a public interest, in the exercise of an official authority vested in the Controller, or for the purposes of the legitimate interests pursued by the Controller, Users may object to such processing on grounds related to their particular situation.

Users should know that, if their personal data is processed for direct marketing purposes, they can object to that processing at any time, free of charge and without providing any justification. Where the User objects to processing for direct marketing purposes, the personal data will no longer be processed for those purposes.

How to exercise these rights

Requests to exercise User rights can be sent to the Controller using the contact details provided in this document. Requests are free of charge and will be answered by the Controller as soon as possible and always within one month, providing Users with the information required by law. Any rectification, erasure or restriction of processing will be communicated by the Controller to each recipient, if any, to whom the personal data has been disclosed, unless this proves impossible or involves disproportionate effort. At the User’s request, the Controller will inform them about those recipients.

Further information for users in Switzerland

This section applies to Users in Switzerland and, for such Users, supersedes any other possibly divergent or conflicting information contained in this privacy policy. Further details on the categories of data processed, the purposes of processing, the categories of recipients, the retention period and other information about personal data can be found in the section “Detailed information on the processing” of this document.

Your rights under the Swiss Federal Act on Data Protection

Users may exercise certain rights regarding their data within the limits of the law, including:

the right of access to personal data;
the right to object to the processing of their personal data (which also allows Users to request the restriction of processing, the deletion or destruction of personal data, and a ban on disclosing personal data to third parties);
the right to receive their personal data and have it transferred to another controller (data portability);
the right to ask for incorrect personal data to be corrected.

Requests can be sent to the Controller using the contact details provided in this document. They are free of charge and will be answered as soon as possible, with the information required by law.

Further information for users in the United States

This section supplements the rest of this privacy policy for Users who reside in California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Nevada, Delaware, Iowa, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island and Montana. For such Users, it supersedes any other possibly divergent or conflicting provisions of this privacy policy.

Categories of Personal Information collected

Identifiers, such as email address and device information;
internet or other electronic network activity information, such as Usage Data and session statistics;
audio, electronic, visual or similar information contained in the messages you send us;
inferences drawn from other personal information.

The content of messages and emails is treated as Sensitive Personal Information. Personal Information is kept for the time necessary to fulfil the purposes described in this document. We will not process your information for unexpected purposes, or for purposes that are not reasonably necessary to and compatible with the purposes originally disclosed, without your consent.

Sources of the Personal Information we collect

We collect the categories of Personal Information above directly from you when you contact us, and indirectly when you navigate this website, as some information is observed and collected automatically. We may also receive Personal Information from third parties that work with us in connection with the Service or with the functioning of this website.

Your privacy rights under US state laws

To the extent permitted by applicable law, you have the right to know and access the Personal Information we process about you, to correct inaccurate Personal Information, to request its deletion, to obtain a copy in a portable format, to opt out of the Sale of your Personal Information and to non-discrimination for exercising your rights. Depending on your state of residence, you may also have the right to opt out of the Sharing of Personal Information for cross-context behavioural advertising, of Targeted Advertising and of profiling, and to limit the use of your Sensitive Personal Information.

How to exercise your rights

Send your request using the contact details provided in this document. We must be able to verify your identity before responding, and you do not need an account to submit a request. If you are an adult, you can make a request on behalf of a child under your parental authority. You can also opt out of Sale, Sharing and Targeted Advertising through the consent preferences on this website or through a user-enabled global privacy control such as the Global Privacy Control (GPC), which we will honour.

We will respond without undue delay and in any case within the timeframe required by law. If we need more time or deny your request, we will explain why. We do not charge a fee unless a request is manifestly unfounded or excessive, in which case we may charge a reasonable fee or refuse to act, and we will explain our decision.

Additional information about processing

Legal action

The User’s personal data may be used for legal purposes by the Controller in court or in the stages leading to possible legal action arising from improper use of this website or the related Services. The User declares to be aware that the Controller may be required to reveal personal data upon request of public authorities.

Additional information about the User’s personal data

In addition to the information in this privacy policy, this website may provide the User, on request, with additional and contextual information about particular Services or the collection and processing of personal data.

System logs and maintenance

For operation and maintenance purposes, this website and any third-party services it uses may collect files that record interactions with this website (system logs) or use other personal data, such as the IP address.

Information not contained in this policy

More details about the collection or processing of personal data may be requested from the Controller at any time using the contact details above.

Changes to this privacy policy

The Controller reserves the right to make changes to this privacy policy at any time by notifying its Users on this page and, where possible, within this website and/or, as far as technically and legally feasible, by sending a notice to Users through any contact information available to the Controller. Please check this page often, referring to the date of the last modification shown at the top.

Definitions and legal references

Personal Data (or Data). Any information that, directly, indirectly or in connection with other information, including a personal identification number, allows the identification of a natural person.

Usage Data. Information collected automatically through this website or the third-party services it uses, such as the IP address or domain name of the computer used, the URIs of requested resources, the time of the request, the browser and operating system, and details of the path followed within the website.

User. The individual using this website who, unless otherwise specified, coincides with the Data Subject.

Data Subject. The natural person to whom the personal data refers.

Data Processor. The natural or legal person, public authority, agency or other body that processes personal data on behalf of the Controller, as described in this privacy policy.

Data Controller. The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data, including the security measures concerning the operation and use of this website.

This website. The means by which the personal data of the User is collected and processed: bonolinitransfer.com.

Service. The service provided by this website as described in the relative terms and on this site.

European Union (or EU). Unless otherwise specified, all references to the European Union in this document include all current member states of the European Union and the European Economic Area.

Cookie. A Tracker consisting of a small set of data stored in the User’s browser.

Tracker. Any technology, such as Cookies, unique identifiers, web beacons, embedded scripts, e-tags and fingerprinting, that enables the tracking of Users, for example by accessing or storing information on the User’s device.

Legal references. This privacy policy is prepared on the basis of the provisions of multiple legislations. Unless stated otherwise, it applies only to this website.