THE PURPOSE OF THE INFORMATION SHEET
The purpose of this page is to describe the manner in which the site is managed with reference to processing the personal data of the users that consult it, which data will be processed in accordance with principles of lawfulness, fairness and relevancy and will not be excessive.
This information is provided pursuant to Article 13 of Legislative Decree no. 196/2003 – the Code on the Protection of Personal Data – to anyone interacting with BBB SpA’s web services, which are accessible via Internet.
The information is only provided for BBB SpA’s sites and not for any other websites that can be consulted by the user through links.
The information is also based on Recommendation no. 2/2001 which the European authorities for the protection of personal data, meeting in a Group created pursuant to Article 29 of Directive no. 95/46/EC, approved on 17 May 2001 in order to identify some minimum requirements for the collection of personal data on-line, in particular the manner, timing and nature of the information that data controllers must provide to users when they connect to web pages, independently from the purposes of the connection, as well as what is set forth in Directive 2002/58/EC, as updated by Directive 2009/136/EC on Cookies.
THE ‘DATA CONTROLLER’
After consultation of this site, the data of persons who have been identified or who are identifiable can be processed.
The ‘Data Controller’ is BBB SpA, having its registered office in Via Lancetti, 2-20158 (MI) Italy.
PLACE WHERE DATA IS PROCESSED
The data processing is done at the administrative office of the Data Controller in Via Borsa, 23 – 20900 Monza (MB) and care of specific third parties, for example third parties used for maintenance and hosting.
The personal data provided by users who request that information materials be sent to them (newsletters, requests for information, catalogues, Cd-rom, etc.) is used for the sole purpose of providing the requested service and is communicated to third parties only if necessary for such purpose (BBB SpA’s shipping services).
TYPES OF DATA THAT IS PROCESSED
Personal data and identification
Personal data, any information related to individuals who are identified or identifiable, even indirectly, through reference to any other information, inclusive of a personal identification number (such as, for example, name, last name, date of birth, address, e-mail address, telephone number, etc…).
Identifying data and personal data that allow the direct identification of the data subject.
The computer systems and software procedures used for the functioning of this website acquire some personal data (log files) during the course of normal performance, the transmission of which is implicit in the use of Internet communication protocols.
This information is not collected to be associated with identified parties, but which might due to its nature, through processing and associations with data stored by third parties, allow users to be identified.
This category of data includes IP addresses or the domain names of the computers used by users who connect to the site, URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to make the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response from the server (successful, error, etc.) and other parameters related to the user’s operating system and computer.
This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to control that it functions properly.
The data might be used to determine responsibility in the case of theoretical computer crimes against the site and can be shown to the Judicial Authority upon its explicit request.
Data voluntarily provided by the user
The optional, explicit and voluntary sending of e-mail to the addresses indicated in this site and/or the compilation of data collection forms results in the subsequent acquisition of the sender’s address, which is necessary to respond to requests, as well as any other personal data included in the letter.
Specific summary information will be progressively reported or visualized in the pages of the site prepared for specific services upon request.
See the cookies policy at the following link.
PURPOSES OF THE DATA PROCESSING
Personal data voluntarily provided by filling out data collection forms, and/or by sending e-mails, will be subject to data processing for the following purposes:
A) Data processing related to:
– navigation in this Internet site;
– any request for contact;
– data collection for provision of the Data Controller’s services;
B) The personal data provided will be used, upon consent until the user objects, for direct marketing activity, market research or other sample surveys and direct sales in order to receive – using automated means: electronic mail, telefaxes, messages such as Mms (Multimedia Messaging Service) or Sms (Short Message Service) or other means, as well as by telephone and mail – information materials for measuring the level of satisfaction, as well as promotional, commercial and advertising materials or materials related to BBB spa’s events and initiatives.
C)The personal data provided will be used, upon consent until the user objects, for profiling, which analyzes consumer habits and choices in order to improve the commercial offer and services proposed.
SCOPE OF COMMUNICATION AND DISSEMINATION
Processed data will not be disseminated but can be disclosed to companies contractually tied to BBB spa, including within the European Union, subject to and within the limits set forth in Art. 42 of Legislative Decree no. 196/2003. Personal data can be transferred abroad outside of EU countries within the scope and limits set forth in Legislative Decree no. 196/2003. The data can be disclosed to third parties belonging to the following categories:
- parties that provide services to manage the computer system used by BBB Spa and its telecommunications networks (inclusive of email, site hosting and management of the mailing list Data Base);
- offices or companies within the context of assistance and consulting services;
- the competent authorities for compliance with legal obligations and/or measures of public bodies, upon request;
The parties belonging to the above categories act as Data Processors, or act in total autonomy as distinct Data Controllers. The list of data processors is constantly updated and available at BBB spa’s office – Via Borsa 23 – 20900 Monza or by writing to firstname.lastname@example.org
OPTIONAL NATURE OF THE PROVISIONS OF DATA
Aside from what is specified for navigation data, the user is free to provide the personal data set forth in the request forms sent to BBB SpA. Providing data for the purposes indicated in clause A) is optional but necessary. The refusal to provide the necessary data with respect to clause A) results in the impossibility of performing strictly related and instrumental activity, for example obtaining what was requested or using the Data Controller’s services.
The provision of data and consent to data processing for the purposes indicated in clauses B) and C) is optional and will have no negative consequences with respect to the purposes indicated in clause A).
For the sake of completeness, it is noted that in some cases (that are not the object of the ordinary management of this site), the Authority can request news and information in accordance with Article 157 of Legislative Decree no. 196/2003, n order to control the processing of personal data. In these cases the response is mandatory, upon penalty of administrative sanction.
DATA PROCESSING PROCEDURES
Personal data is processed using automated instruments for the time strictly required to achieve the objectives for which it was collected.
Specific security measures are complied with to prevent the loss of data, illicit or improper use or unauthorized access.
THE DATA SUBJECT’S RIGHTS
The subjects to whom the personal data refers can enforce their rights set forth in Articles 7, 8, 9 and 10 of Legislative Decree no. 196 of 30 June 2003 upon request to the Data Controller, by contacting its office or by sending an email to the address email@example.com. They have the right, at any time, to obtain confirmation of the existence or lack thereof of data and to know its content and origin, control its accuracy and request that it be supplemented or updated, or ask that it be corrected (Article 7 of the Data Protection Code ). In accordance with such Article, they have the right to request the cancellation, transformation in anonymous form or the blockage of data processed in violation of law, as well to object in any case, on legitimate grounds, to the data being processed. If contacted, the Data Controller and the above parties must be provided the e-mail address, name, address and/or telephone numbers required to allow the request to be properly managed.
In order not to receive any more automated direct marketing communications (e-mail, SMS, MMS, fax), it is sufficient to send an e-mail at any time to the address firstname.lastname@example.org with the object “cancellation from automated communications” or to use our automatic cancellation systems provided just for email.
In order not to receive any more traditional direct marketing communications (telephone calls with an operator, paper mail), it is sufficient to send an email at any time to the address email@example.com with the object ” cancellation from traditional communications“.
In order not to receive any more direct marketing communications it is sufficient to send an email at any time to the address firstname.lastname@example.org the object “cancellation marketing“.
MODIFICATIONS TO THE INFORMATON SHEET ON PRIVACY
The Data Controller reserves the right to modify, update, add or remove parts of this information sheet on privacy at its discretion and at any time. The interested person must periodically verify any modifications. In order to facilitate such control, the information sheet will contain an indication of the date of the update. After the publication of modifications, the use of the site will mean that they have been accepted.
Updated on: 18/12/2015