Privacy disclaimer (pursuant to art.13 of the European Regulation n.2016 / 679)
B&B Belvedere, with registered office in via Imera n. 4 - 90010 Campofelice di Roccella, Tax Code and VAT number 05722290821, (hereinafter, "B&B"), as Data Controller, pursuant to and for the purposes of art. 13 EU Regulation no. 2016/679 (hereinafter "GDPR"), informs you - in your capacity as an interested party (as defined in art. 4 of the GDPR) - that your personal data (hereinafter the "Personal Data" or simply the " Data ") will be processed in full compliance with current legislation on the protection of personal data and with the implementation of all security, technical and organizational measures deemed suitable for the protection of the aforementioned data.
1. Data object of the treatment
The data subject to this treatment are the following data referring to you: name, surname, e-mail address, home / residence address, telephone number, profession, behavior data, purchase choices / preferences, company of belonging. For the purpose of a better understanding of what has just been indicated, please note that Personal Data are defined by current European legislation as "any information concerning an identified or identifiable (" interested ") natural person; the natural person who can be identified, directly or indirectly, with particular reference to an identifier such as the name, an identification number, location data, an online identifier or one or more characteristic elements of his physical identity is considered identifiable, physiological, genetic, psychic, economic, cultural or social ".
The processing of your data is carried out by means of the operations indicated in art. 4 no. 2) of the GDPR and precisely, by way of example: collection, registration, organization, structuring, storage, adaptation, modification, extraction, consultation, use, communication by transmission, diffusion or any other form of making available, comparison or interconnection, limitation cancellation, destruction. .
3. Purpose and Legal Basis of the Treatment
Your data will be processed for the following purposes: a. without your express consent (art.6 of the GDPR) - since the processing in question is necessary to be able to respond to your express request - for the following purposes: (I) to fulfill the requests for information you have advanced (II) allow and manage your Registration on the Site, as well as the performance of the activities reserved to you by virtue of Registration on the Site. b. Only with your informed, specific and distinct consent (art. 130 of Legislative Decree 30.6.2003 n. 196 as subsequently amended by Legislative Decree 10 August 2018, n.101, hereinafter "Privacy Code" and art. 6 and 7 of the GDPR) - since it is necessary to acquire your consent to carry out the processing in question - for the following purposes: (I) to carry out profiling activities, such as the analysis of consumption habits and choices, mainly dealing with: the data entered during the phase of Registration on the Site, the Purchase Data, the Data provided by you during market surveys and research; (II) send information and promotional communications, including commercial ones, newsletters, advertising material and / or offers of products and services, including customized ones, and carry out studies and statistical and / or market research both with traditional contact methods (paper mail, calls via operator) that automated (e-mail, fax, sms, mms, call without operator) from Italy or from abroad (also from countries not belonging to the European Community) by B&B; (III) send information and promotional communications, including commercial ones, newsletters, advertising material and / or offers of products and services, including customized ones, and carry out studies and statistical and / or market research both with traditional contact methods (paper mail, calls via operator) that automated (e-mail, fax, sms, mms, call without operator) from Italy or from abroad (also from countries not belonging to the European Union) by parent companies, controlled and / or participated by B&B, as well as by entities contractually linked to B&B that manage the distribution and sale of B&B products and services (including any B&B distributors)
4.Nature of the Contribution and consequences of the refusal
The provision of data for the purposes referred to in lett. a., point (I), of the previous article 3), although optional, it is necessary to be able to correctly fulfill your requests and therefore failure to provide will preclude the possibility of providing you with adequate feedback. The provision of data for the purposes referred to in lett. a., point (II), of the previous article 3) although optional, it is necessary to be able to correctly fulfill your request for registration on the site and therefore failure to provide it will preclude the possibility for you to correctly conclude the procedure for registering on the site. provision of data as well as the related consent to the processing of the same for the purposes referred to in letter b), points (I), (II) and (III), of the previous art. 3 is optional. However, your refusal and / or the provision of incorrect and / or incomplete information could prevent the processing of profiles, the analysis of your preferences and also prevent the performance of the so-called marketing activities including the carrying out of studies and research. market and / or statistics. In the event of giving consent, you have the right, at any time, to withdraw it. We remind you that the withdrawal of consent, pursuant to and for the purposes of art. 7 of the GDPR, cannot affect the lawfulness of the treatment based on the consent you gave before the revocation.
5. Methods of Treatment
6. Data retention
The Data will be stored at / through Server / Cloud System located within the European Union. Your personal and contact data will be used and stored for the purposes referred to in the previous art. 3) for a period not exceeding 5 (five) years, without prejudice to a different timing as defined by the sector legislation in force for the fulfillment by the Data Controller of specific legislative obligations as well as in the event of the establishment of any dispute (e.g. : legal disputes). Your purchase data will be used and stored for the purposes referred to in the previous art. 3) for a period not exceeding 2 (two) years. In order to guarantee the updating and correctness of the data as well as any consents expressed by you, B&B will send you a special communication every 12 months in which you will be again indicated the methods and contacts - specified in the following articles 11), 12 ) and 13) - through which you can manage your Registration. At the end of the retention period, the Data will be deleted and eliminated from any paper and / or IT support in a secure manner and in full compliance with the legislation in force from time to time regarding the protection of Personal Data or will be made anonymous by B&B for the sole purpose to carry out statistical and / or historical analyzes, therefore without any possibility for B & Bs and / or third parties to identify data subjects.
7. Security Measures
We care about the protection of your information. We therefore undertake to take all appropriate and reasonable measures to protect the personal information we keep from misuse, loss or unauthorized access. To this end, we have implemented a series of specific technical and organizational measures. Measures to deal with any suspected data breach are included.
8. Subjects authorized to process the data
For the correct completion of the treatments referred to in this statement, the following will have access to your data: a. The employees and collaborators of the corporate functions of B&B Belvedere appointed to pursue the aforementioned purposes who have been previously authorized for processing and who have received adequate operating instructions. b. The Consultants of B&B Belvedere, who provide assistance with reference to legal, tax, accounting and organizational aspects. These consultants operate by virtue of specific agreements for the processing of data, signed with B&B Belvedere. pursuant to and for the purposes of art. 28 of the GDPR. A list of such third parties is always available at the headquarters of the owner. c. Controlling, controlled, investee and / or associated companies as well as entities contractually linked to B & B that manage the distribution and sale of B & B products and services (including any B&B distributors) for the purposes described in letter b), point (III), of the previous art. 3..
9. Communication and Dissemination of Data
The Data Controller may communicate your Data to Supervisory Bodies and / or judicial Authorities as well as to all the other subjects to whom the communication is mandatory by law for the accomplishment of said purposes. Your data will not otherwise be disclosed and / or communicated.
The management and storage of Personal Data will take place on / through Server / Cloud System located within the European Union belonging to the Owner and / or to third-party companies appointed and duly appointed as External Data Processors. In any case, it is understood that a subsequent and possible transfer of Data outside the European Union will take place in accordance with the applicable legal provisions - including articles 44, 45 and 46 of the GDPR - as well as the adequacy decisions adopted by the European Commission and also if necessary and in the absence of adequacy decisions, by entering into agreements that guarantee an adequate level of protection and / or by adopting the standard contractual clauses envisaged by the European Commission. In detail, with regard to a possible and subsequent transfer of data to companies in the United States, the same will happen to those companies that have adhered to the so-called "Privacy Shield", in compliance with the decision of the European Commission which recognized the Agreement called "EU-US Privacy Shield" an adequate level of protection of Personal Data transferred from the European Union to organizations residing in the United States that self-certify in the system and the subsequent Authorization to transfer Data abroad through the agreement called " EU-US Privacy Shield "adopted by the Italian Data Protection Authority on 27 October 2016.
11.Rights of the interested party
In your capacity as an interested party, you are entitled to the rights referred to in articles 13 et seq. of the GDPR. Precisely they compete: a. pursuant to and for the purposes of art. art. 15 and 77 of the GDPR, the right to lodge a complaint with a competent authority; b. pursuant to and for the purposes of art. 15 of the GDPR, the right of access to information related to the processing of data, including: the purposes of the processing; the types of Personal Data processed; the expected time of retention of Personal Data or, if not available, the criteria used to determine it; the recipients or categories to which the Data have been or will be communicated; any transfers of Data to third countries; if the data had not been collected from the data subject, the source information available; the existence of an automated decision-making process, the logic applied to the segmentation of users for profiling activities and the importance of said treatment for the interested party. c. pursuant to and for the purposes of art. 16 of the GDPR, the right to obtain the correction of inaccurate Data and the integration of incomplete Data; d. pursuant to and for the purposes of art. 17 of the GDPR, the right to request cancellation and to obtain it if there are certain reasons, among which: Data are not necessary in relation to the purposes for which they were collected; Personal Data have been unlawfully processed; Personal Data must be deleted as a consequence of a legal obligation established by the law of the European Union or of the Member States and which applies to the data controller; the interested party has withdrawn consent This right will not be exercisable if the Data is necessary for the management of complaints. is. pursuant to and for the purposes of art. 18 of the GDPR, the right to obtain the limitation of the processing in case of certain hypotheses, among which: the Personal Data available to B&B are incorrect; the interested party does not agree with the use of their data but opposes their cancellation and therefore requires a limitation of their use; B&B does not need to keep the Data but the data subject needs it for any complaints. In the event of a request for limitation, the Data will be processed, except for their conservation, only for certain reasons, including: complaints from the interested party; express consent of the interested party; protection of the rights of other natural or legal persons or for reasons of public interest at the level of the European Union or of a specific Member State. f. pursuant to and for the purposes of art. 20 of the GDPR, the right to receive your data in a structured, commonly used and legible format and to transmit it to another data controller in the cases provided for by the indicated legislation. g. pursuant to and for the purposes of art. 21 of the GDPR, the right to object - at any time and for reasons related to your particular situation - to the processing of your Data, including the processing of Data for profiling and direct marketing purposes. In this case B&B will refrain from further processing the Data, subject to the exceptions provided for by the indicated legislation.
12. Data Controller
The data controller is B&B Belvedere, with headquarters in via Imera n. 4 - Campofelice di Roccella (PA), Tax Code and VAT 05722290821.
13. How to exercise your rights
To exercise the rights referred to in the previous art. 11), you can write to the attention of the Data Controller at the following addresses: B&B Belvedere. - Via Imera, n. 4, 90010 - Campofelice di Roccella (PA); email: firstname.lastname@example.org - Fax: 0921.600291.
14. Changes to this Policy
This information for the processing of data may be subject to changes. We therefore recommend that you regularly check this Notice and refer to the most updated version. If you do not accept the changes made, you can cancel your registration on the site at any time or modify and / or revoke the consents previously expressed through the contacts indicated above.