Information on the processing of personal data collected from the data subject/user – and Art. 130 – Unsolicited communications Legislative Decree 196/2003 contractor.
In compliance with the General Data Protection Regulation (EU) 2016/679 we are to provide the necessary information regarding the processing of the personal data. This is an information that is made pursuant to art. 13 of EU Reg. 2016/679 (European Regulation for the protection of personal data – GDPR)
For browsing data and cookies, see the privacy policy in the footer of the site.
1.THE Data CONTROLLER pursuant to art. 4 and 24 of the GDPR, is Boffi spa Via Oberdan, 70 – 20823 Lentate sul Seveso (MB), in the person of its pro tempore legal representative. The contact email of the owner is privacy@boffi.com
2. DATA PROTECTION OFFICER (DPO / RPD-Responsabile della protezione) is identified pursuant to art. 37 – 39 of EU Reg. 2016/679. The contact email of the DPO is dpo.boffi@dpoprofessionalservice.it
3. PURPOSE AND LEGAL BASIS OF PROCESSING, DATA RETENTION
| PURPOSE | LEGAL BASIS OF PROCESSING | DATA RETENTION |
| A) Access to dedicated areas, through user id credentials
|
processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract; (C44)
art. 6 par. 1 letter b) of the GDPR |
Maximum 12 months from the deactivation of the user id credentials |
| B) Direct marketing, for sending advertising or direct sales material or for carrying out market research, satisfaction or commercial communication and newsletters through automated means (e-mail, SMS messages or through social networks and sponsorships) and means traditional (telephone calls via operator and paper mail, also through the Data Processors) of products of the BOFFI, DE PADOVA, MA/U Studio and Adielle brands. The communications may contain third party promotional activities and / or third party logos (partners: non-profit organizations; agriculture, forestry and fishing; manufacturing activities; supply of electricity, gas, steam and air conditioning; construction; wholesale and other detail; repair of motor vehicles and motorcycles, transport and storage; accommodation and restaurant services; information and communication services; financial and insurance activities; real estate activities; professional, scientific and technical activities; rental, travel agencies, support services companies; public administration; education; artistic, sporting, entertainment and amusement activities; other service activities). For complete list, write to privacy@boffi.com
There will be no transfer of personal data to third party partners for this purpose. To compare and possibly improve the results of communications, the Data Controller uses systems for sending newsletters and promotional communications with reports. Thanks to the reports, the Data Controller will be able to know, for example: the number of readers, openings, unique « clickers » and clicks; the devices and operating systems used to read the communication; detail on the activity of individual users; the detail of the emails sent, emails delivered and not, of those forwarded; All these data are used for the purpose of comparing, and possibly improving, the results of communications. |
processing is based on consent to the processing of personal data; (C42, C43)
art. 6 par. 1 letter a) of the GDPR |
Until withdrawal of consent
(Opt-out) |
| C) Profiling: personal data will be entered in the company CRM / platforms, for the purpose of internal analysis and to divide the interested parties into homogeneous groups by specific characteristics of the company activity for better management of services and for sending targeted promotional communications. | processing is based on consent to the processing of personal data; (C42, C43)
art. 6 par. 1 letter a) of the GDPR |
until the withdrawal of consent and in any case maximum 12 months |
4. RECIPIENTS OR CATEGORIES OF RECIPIENTS OF THE DATA
The personal data provided will be communicated to recipients, who will process the data as Data Processor (art.28 of the EU Reg. 2016/679) or as natural persons acting under the authority of the Data Controller or Data Processor (art.29 of EU Reg. 2016/679), or to recipients who hold the role of independent Data Controllers, for the purposes listed above in point 3. Specifically, the data will be communicated to: recipient that provide services for the management of the information system used by Boffi spa and telecommunications networks (including e-mail and platforms); – studies or companies in the context of assistance and consultancy relationships; – social networks platforms; – Boffi group companies, associated, controlled or contractually linked by Boffi spa and / or part of its distribution and sales network (such as branches, importers, distributors, resellers, shippers, etc …), possibly also based in countries not belonging to the European Union; – competent authorities for the fulfillment of legal obligations and / or provisions of public bodies, on request. The list of Data Processor is constantly updated and available on request to privacy@boffi.com or at the headquarters of Boffi spa Via Oberdan, 70, 20823 Lentate sul Seveso.
5. TRANSFER OF DATA TO A THIRD COUNTRY AND / OR AN INTERNATIONAL ORGANIZATION AND SAFEGUARDS
The site is hosted in EU countries. The personal data provided can be transferred to non-EU countries, in order to fulfill related purposes based on the data processing purposes. The data will be transferred according to Article 44 – General principle for the transfer; Article 45 – Transfer based on an adequacy decision; Article 46 – Transfers subject to appropriate safeguards, specifically the data will be transferred. For information about the safeguards regarding the transfer of data outside the EU, write to privacy@boffi.com.
6. NATURE OF DATA PROVISION AND REFUSAL
Users / contractors are free to provide their personal data and their failure to provide it will only make it impossible to obtain the information or services requested and provided through this website. The provision of personal data for purposes B) and / or C) is optional and will not affect the purposes referred to in point A). The marketing activity will be carried out only with the specific consent of the data subject. The insertion of the data in the CRM is optional and will automatically entail the visibility of the same by those who have access to it, i.e. those responsible and authorized to the treatment, present at the points of sale in the world.
7. DATA SUBJECTS’ RIGHTS (natural persons)
You can exercise your rights as expressed in the GDPR by sending an e-mail to Data Controller at privacy@boffi.com or writing or contacting the Data Protection Officer at dpo.boffi@dpoprofessionalservice.it. In particular you can, at any time, ask the Data Controller to access your personal data (art.15), to rectify it (art.16), to erase it (art.17), to restrict the processing (art.18) or to object to processing of your personal data (art.21). You can ask for data portability (art.20). For the processing based on consent, you can withdraw the consent at any time without prejudice to the lawfulness of the processing based on consent before withdrawal. To withdraw consent to non-automated profiling, simply write an e-mail to dpo.boffi@dpoprofessionalservice.it with the subject « no profiling » at any time. The data subject has the right to lodge a complaint with the Autorità Garante Privacy (https://www.garanteprivacy.it), or to appeal to the appropriate judicial offices.
Even for legal persons / contractor, to no longer receive automated direct marketing communications (eg E-mail, sms, social) it will be sufficient to write an e-mail at any time to the address dpo.boffi@dpoprofessionalservice.it with the subject « Delete by automated » or use our automatic cancellation systems intended for e-mail only. To no longer receive traditional direct marketing communications (telephone calls with operator and paper mail), simply write an e-mail to dpo.boffi@dpoprofessionalservice.it at any time with the subject « cancellation from traditional ».
8. CHANGES TO THE PRIVACY POLICY
The Data Controller reserves the right to modify, update, add or remove parts of this privacy statement. The Data subject is required to periodically check for any changes. In order to facilitate this check, the information notice will contain the date to update the information. The use of the site, after the publication of the changes, will constitute the acceptance of the same.
Update date: June 30, 2020