BUSI GIOVANNI S.R.L, with registered office at Via Busi Giovanni 14, 25082 Botticino Sera (Brescia, Italy), Tax Code and VAT No. 02057080174 represented by its Legal Representative Ms. Catina Busi, (hereinafter, the "Data Controller), pursuant to EU Regulation no. 2016/679 (hereinafter, the "Regulation") is required to provide you with some information regarding the use of personal data.
This information is intended for the site www.busigiovanni.com (hereinafter, the "Site"), and not for other websites that may be accessed by the user via links, and is an integral part of the Site and the services we offer. The information is provided pursuant to art. 13 of the Regulation to those who interact with the services of the Site.Your personal data will be processed in accordance with the legislative provisions of the above mentioned Regulation and the confidentiality obligations provided for therein. The processing of your personal data, therefore, will be based on principles of correctness, lawfulness, transparency, purpose and storage limitations, minimisation and accuracy, integrity and confidentiality, as well as the principle of accountability under art. 5 of the Regulation.
DATA CONTROLLER AND DATA PROCESSORS
The Data Controller is the company BUSI GIOVANNI S.R.L, as identified above. The updated list of Data Processors can be requested from the following e-mail address firstname.lastname@example.org.
TYPE OF DATA PROCESSED
During their normal operation, the IT systems and software procedures which operate this website acquire some personal data, the transmission of which is implicit in the use of Internet communications protocols. This information is not collected in order to be associated with identified interested parties, but because of its nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by the users who connect to the website, the URI (Uniform Resource Identifier) addresses of the resources required, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the computer environment of the user. At present, anonymous web data are not retained for more than seven days.
Data supplied voluntarily by the user
The optional, explicit and voluntary sending of your e-mail address in the "Newsletter" section entails, with your explicit consent to subscribe (art. 6 paragraph 1 a. of the Regulation), the inclusion of the e-mail address itself in the mailing list of our commercial newsletter and will allow you to receive our periodic Newsletter to inform you about products, services and business initiatives offered by the Data Controller (please refer to the specific information provided).
The optional, explicit or voluntary sending of electronic mail to the addresses provided on this site entails the subsequent acquisition of the sender’s address as well as any other personal data included in the message, necessary in order to reply to any enquiries specifically addressed to the Data Controller.
No personal data of users is deliberately acquired by the website. Cookies are not used for the transmission of personal data, nor are used the so-called "persistent" cookies of any kind, or systems for tracking users. Use of “session” cookies (which are not stored permanently on the user's computer and which are deleted when the browser is closed) is strictly limited to the submission of session identification details (comprising random numbers generated by the server) required to allow for the secure and efficient browsing of the website. The session cookies used on this website avoid the use of any other IT techniques that may potentially compromise the confidentiality of a user’s browsing and do not enable the acquisition of any personal data that identifies the user.
PURPOSES AND LEGAL BASIS OF THE PROCESSING
Personal data are processed for the following purposes:
- Operational management and purposes strictly related to it for access to the website;
Legal basis for processing: consent and performance of a contract.
- Processing for statistical purposes in anonymous and aggregated form on the use of the site and control over its proper functioning;
Legal basis of the processing: Consent and legitimate interest of the Data Controller.
- Fulfilment of any obligations provided for by the laws in force, by regulations or by EU legislation, fulfilment of requests from authorities;
Legal basis for the processing: compliance with a legal obligation.
- Purposes functional to the marketing activities of the Data Controller, in particular: sending of our commercial newsletter;
Legal basis of the processing: consent of the data subject.
NATURE OF THE SUPPLYING OF DATA AND CONSEQUENCES OF REFUSAL
The supplying of personal data, although not mandatory, may be essential to enable the provision of our services.
In particular, for the purposes referred to in point d., the provision of personal data is always optional. You may therefore decide not to provide any data or subsequently deny the possibility of processing data already provided, by withdrawing your consent at any time (by using the specific deletion function included in our newsletter, or by sending a specific request to the Data Controller by the means described in this statement). However, denying your consent may make it impossible to acquire your data and to receive our newsletter.
Your personal data will be processed with the help of paper and/or automated computer tools, by Data Processors appointed pursuant to art. 28 of (EU) Reg. 2016/679 or by persons authorised to process them for the time necessary to achieve the purposes for which they were collected or for any other legitimate purpose related thereto (without prejudice to the possibility of your withdrawal of your consent). At the end of this period, the data will be stored to comply with specific legal or contractual obligations, as well as for administrative purposes and/or to assert or defend the rights of interested parties in case of litigation and pre-litigation.
In any case, the Data Controller undertakes to adopt adequate technical and organisational security measures to prevent the destruction or loss of data, any unauthorised use and any unauthorised access, pursuant to art. 32 of (EU) Regulation 2016/679.
Your data will not be disclosed in any way but may be disclosed to third parties whose activities are necessary and related to the accomplishment of the aforementioned purposes (such as, by way of example: professionals, administrative and judicial authorities, professional law firms, national and/or international public authorities who have the right).
No automated decision-making processes, including profiling pursuant to Article 22 (1) and (4) of EU Reg. 2016/679, are foreseen in the processing.
TRANSFER OF PERSONAL DATA
The personal data processed by this Site are not transferred outside the European Economic Area. In any case, it is understood that the Data Controller, if necessary, will have the right to move the location of servers to countries outside the EU. In such a case, the Data Controller hereby guarantees that the data will be transferred in accordance with the applicable legal provisions and, if necessary, by means of agreements guaranteeing an adequate level of protection.
RIGHTS OF THE DATA SUBJECT
As a data subject, you may contact the Data Controller to assert your rights, as set out in Articles 15 to 22 of EU Regulation 2016/679, which are set out below:
- right to apply to the data controller for access to your personal data (art. 15);
- right to apply to the data controller for correction of your personal data (art. 16);
- right to apply to the data controller for deletion of your personal data (art. 17);
- right to apply to the data controller for restriction of data processing that concerns you (art. 18);
- right to the portability of the data (art. 20);
- right to object to the processing (art. 21)
- right with regard to automated decision-making processes (art. 22).
If the processing is based on article 6, paragraph 1 (a), you have the right to withdraw consent at any moment, without prejudice to the lawfulness of the data processing based on the consent given prior to the withdrawal.
You also have the right to lodge a complaint with the Personal Data Protection Authority.
To exercise your rights, you may send a registered letter with acknowledgement of receipt to the company BUSI GIOVANNI S.R.L., in Via Busi Giovanni 4, 25082 Botticino Sera (BS), or an email to email@example.com.