Privacy policy
INFORMATION ON THE PROCESSING OF PERSONAL DATA
Pursuant to Art. 13 of EU Regulation 2016/679 we invite you to take note of the following information:
1. Data Controller
The Data Controller is BICASA S.r.l. – Viale delle Industrie, 33 – 20881 Bernareggio MB (VAT No. and Tax Code 00815640156) in the person of its pro-tempore legal representative.
Internal controller
Internal Data Processor on behalf of the Data Controller is: Silvano Garletti, administrative and financial director of BICASA Srl, CF GRLSVN64L05B157G domiciled for this purpose in Viale delle Industrie, 33 – 20881 Bernareggio (MB).
List of personal data processors
The complete list of external data processors and persons authorised to process data is kept and can be consulted by the Internal Data Processor.
2. Purpose of processing
The personal data provided are processed for the following purposes:
a) contract management and execution (e.g. relations with clients, suppliers, commercial agents, etc.)
b) any external professional collaboration for the fulfilment of legal obligations
c) protection of contractual rights
d) internal statistical analysis
e) marketing activities by sending promotional and advertising material concerning products or services similar to those of the business activities.
The legal basis for the processing is the contract, as well as explicit consent.
3. Processing methods
Personal data will be processed in hard copy, digital and online form and entered into the relevant databases, which may be accessed by persons authorised to process data in accordance with internal procedures.
The processing may also be carried out by third parties who provide specific processing, administrative or instrumental services necessary for the achievement of the above purposes.
All data processing operations are carried out in such a way as to ensure the integrity, confidentiality and availability of personal data.
4. Period of data retention
The data are processed and stored for the time required by the purposes for which they were collected, unless the Controller is obliged to store them for a longer period, in compliance with a legal obligation or by order of an Authority.
5. Scope of data communication and dissemination
In relation to the purposes indicated in point 2, the data may be communicated to the following subjects:
a) financial institutions for the management of receipts and payments;
b) financial administrations or public institutions in fulfilment of regulatory obligations;
c) external professionals involved in the performance of the contract;
d) companies and law firms for the protection of contractual rights;
e) suppliers, clients and end-users in the context of procurement/subcontracting/supply contracts;
6. Rights under Articles 15, 16, 17 18, 20, 21 and 22 of EU Regulation 2016/679
We inform you that as a data subject you have, in addition to the right to lodge a complaint with the Supervisory Authority, the other rights listed below, which you may assert by making a specific request to the Data Controller and/or Data Processor, as indicated in point 1:
Article 15 – Right of access
The data subject has the right to obtain from the Controller confirmation as to whether or not personal data relating to him are being processed and, if so, to obtain access to the personal data and information concerning the processing.
Article 16 – Right of rectification
The data subject shall have the right to obtain from the Controller the rectification of inaccurate personal data concerning him/her without undue delay. Taking into account the purposes of the processing, the data subject has the right to obtain the integration of incomplete personal data, also by providing a supplementary declaration.
Article 17 – Right to erasure (right to be forgotten)
The data subject has the right to obtain from the Data Controller the erasure of personal data concerning him/her without undue delay and the Data Controller is obliged to act accordingly without undue delay.
Article 18 – Right to restriction of processing
The data subject has the right to obtain from the Data Controller the restriction of processing when one of the following cases occurs:
a)the data subject contests the accuracy of the personal data, for as long as it takes the Data Controller to verify the accuracy of such data;
(b) the processing is unlawful and the data subject objects to the erasure of the personal data and requests instead that their use be restricted;
(c) although the controller no longer needs the data for the purposes of processing, the personal data are necessary for the establishment, exercise or defence of legal claims;
d)the data subject has objected to the processing pursuant to Article 21(1) of the Regulation, pending verification of whether the legitimate reasons of the Data Controller prevail over those of the data subject.
Article 20 – Right to data portability
The data subject shall have the right to receive in a structured, commonly used and electronically readable format the personal data concerning him/her that he/she has provided to a Data Controller and shall have the right to transmit such data to another Data Controller without hindrance from the Data Controller to whom he/she has provided them.
When exercising his or her data portability rights pursuant to paragraph 1, the data subject shall have the right to obtain the direct transmission of personal data from one Data Controller to another, if technically feasible.
Article 21 – Right of opposition
The data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her pursuant to Article 6(1)(e) or (f) of the Regulation, including profiling on the basis of those provisions.
Article 22 – Right not to be subject to automated decision-making, including profiling
The data subject shall have the right not to be subject to a decision which is based solely on automated processing, including profiling, and which produces legal effects concerning him or her or significantly affects him or her in a similar way.
7. Withdrawal of consent to processing
Please note that, pursuant to Article 7 of the Regulation, you have the right to withdraw your consent to the processing of your personal data in writing:
You may exercise your rights at any time by sending a communication:
· by e-mail to privacy@bicasa.it
· via AR mail to: BICASA S.r.l. – Viale delle Industrie, 33 – 20881 Bernareggio MB (Italy)
Bernareggio, 25/05/2021 Data Controller
