Personal Data Protection Code

Privacy Policy

In compliance with EU Regulation 2016/679 (General Data Protection Regulation, hereinafter referred to as “GDPR”) and with applicable national legislation on the protection of personal data, we wish to provide users with some information on the processing of personal data communicated by the user at the time of his application through the website of AB Holding S.p.A. (hereinafter also only referred to as “AB”), (hereinafter referred to as the “Website”), in a capacity of Website Owner and Data Controller.

The processing of personal data is and shall be based on the principles of lawfulness, fairness, transparency and protection of the user’s rights.

Purposes of the data processing

Users’ personal data will be processed for the purpose of (i) allowing applications through the Site and processing applications; and (ii) managing and maintaining the Site.

The computer systems and software used on the Website shall collect, during the normal browsing thereof, data related to the use of Internet communication protocols, for the purposes of obtaining statistical information on the use of the Website or to check that the Website operates correctly. For additional information on the types of cookies used by this Website, please consult the specific detailed Cookie Policy.

Data processing methods

The processing of users’ personal data may include any type of operation, including the collection, recording, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion and destruction thereof. Users’ personal data shall be processed using tools and procedures designed to ensure the security and confidentiality of such data, through IT and electronic tools, as well as through paper-based media and archives.

Mandatory or optional provision of personal data

The provision of personal data (including data collected from publicly accessible sources) is required to allow the data subject to submit his request for contact / application. Without these data it would not be possible to process the request for contact/application of the data.

Data Retention

All personal data will be stored for the period of time necessary to respond to the request for contact / application of the data subject and fulfil the above purposes and, in any case, for no more than 24 months from collection.

Disclosure, dissemination and transfer of personal data

Notwithstanding the disclosure of personal data carried out in order to fulfil legal obligations, personal data collected and subsequently processed may be shared with: (a) adequately trained resources within AB offices, operating as authorised personnel for the processing of personal data and/or (b) other AB subsidiaries and/or affiliates (c) third parties operating in collaboration with AB in the provision of services, duly appointed as data controllers or data processors (e.g. companies that perform IT system management and maintenance services).

Moreover, for all the purposes specified in this Privacy Policy, personal data may be communicated abroad, either within or outside the European Union, in compliance with the rights and guarantees provided for by applicable law and subject to the verification of adequacy of the level of protection guaranteed by the third country.

Users’ personal data shall not in any way be transferred to third parties or disseminated.

Rights of the Data Subject

The Data Subject may exercise, with regard to the processing of the personal data described here, the rights provided for by Articles 15-21 of the GDPR and in particular:

In order to exercise these rights, the Data Subject may contact the Data Controller by sending an email to or sending a registered letter to the address specified in Article VII of this Privacy Policy.

Data Controller

The Data Controller is AB Holding S.p.A., with registered office in Orzinuovi (BS), Italy, in Via Caduti del Lavoro 13 – email: in the person of its Legal Representative.