INFORMATION ON THE PROCESSING OF PERSONAL DATA
pursuant to and for the purposes of art. 13-14, EU Reg 2016/679
(European regulation on the protection of personal data)
This is to inform you that the EU Reg. 2016/679 (“European Regulation on the protection of personal data”) provides for the protection of persons and other subjects and respect for the processing of personal data.
According to Articles 13 and 14, we therefore provide you with the following information:
1. Purpose, legal basis of the processing for which the data are intended
The Data Controller processes your personal data if one of the following conditions exists:
• processing is necessary for the execution of a contract and / or the execution of pre-contractual measures;
• processing is necessary to fulfill a legal, accounting, tax obligation, to which the Data Controller is subject;
• processing is necessary for the pursuit of the legitimate interest of the owner or third parties.
• subject to your consent, allow you to send commercial and / or promotional communications on its products and services, as well as perform market research;
2. Source from which personal data originate
The personal data processed are those provided by the interested party on the occasion of:
• interactions through the website;
• requests for information, including by e-mail and telephone, meetings in their respective offices or on the occasion of events (conventions, fairs, events, etc.);
• previous commercial transactions or contractual relationships
3. Methods of processing
In relation to the aforementioned purposes, your data are processed electronically and / or on paper. The processing operations are carried out in such a way as to guarantee the logical, physical security and confidentiality of your personal data, in compliance with the security measures provided for by art. 32 GDPR.
The treatment remains within the EU (Article 13, paragraph 1, letter f), no automated profiling activity is performed (Article 13, paragraph 2, letter f) and the interested party has the right to lodge a complaint with supervisory authority (Article 13, paragraph 2, letter d).
4. Nature of personal data
Your personal data concerning the performance of the requested service are processed.
The consent to the conferment of your personal data is mandatory in order to execute the contract in place or the services requested and fulfill the obligations deriving from it, including the legal obligations.
5. Communication and dissemination of data
Your data may be communicated to:
• all the subjects to whom access to such data is recognized by virtue of regulatory provisions (legal obligations);
• to our collaborators, employees, as part of their duties with the confidentiality precautions required by law;
• to all those natural and / or legal persons, public and / or private, when the communication is necessary and / or connatural to the conduct of our business and in the manner and for the purposes described above;
6. Mode and duration of personal data retention.
The Data Controller will process personal data only for the time necessary to fulfill the aforementioned purposes and, in any case, for no longer than 10 years from termination of the relationship where foreseen or made necessary by current regulations, except for longer prescription terms.
7. Rights of the interested party
7.1 Article 15 (right of access), 16 (right of rectification) of EU Reg. 2016/679
The interested party has the right to obtain from the data controller confirmation that it is or is not undergoing the processing of personal data concerning him and in this case, to obtain access to personal data and the following information:
a) the purposes of the processing;
b) the categories of personal data in question;
c) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if recipients of third countries or international organizations;
d) the retention period of the personal data provided or, if not possible, the criteria used to determine this period;
e) the existence of the right of the interested party to request the data controller to rectify or delete personal data or limit the processing of personal data concerning him or to oppose their treatment;
f) the right to lodge a complaint with a supervisory authority;
g) the existence of an automated decision-making process, including profiling and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the data subject.
7.2 Right pursuant to art. 17 of EU Reg. 2016/679 – right to cancellation (“right to be forgotten”)
The data subject has the right to obtain from the data controller the deletion of personal data concerning him without undue delay and the data controller is obliged to cancel the personal data without undue delay if one of the following reasons exists:
a) personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed;
(b) the data subject revokes the consent on which the processing is based in accordance with Article 6 (1) (a) or Article 9 (2) (a) and whether there is no other legal basis for the processing ;
(c) the data subject opposes the processing pursuant to Article 21 (1) and there is no legitimate overriding reason to proceed with the processing, or opposes the processing pursuant to Article 21 (2);
d) personal data have been processed unlawfully;
e) personal data must be deleted to fulfill a legal obligation under Union or Member State law to which the controller is subject;
f) personal data have been collected in relation to the information society service offer referred to in Article 8, paragraph 1 of EU Reg. 2016/679
7.3 Right referred to in art. 18 Right of limitation of treatment
The interested party has the right to obtain from the data controller the limitation of processing when one of the following hypotheses occurs:
a) the interested party disputes the accuracy of personal data for the period necessary for the data controller to verify the accuracy of such personal data;
b) the processing is illegal and the interested party opposes the cancellation of personal data and asks instead that its use is limited;
c) although the data controller no longer needs it for processing purposes, personal data are necessary for the data subject to verify, exercise or defend a right in court;
d) the interested party has opposed the treatment pursuant to article 21, paragraph 1, Reg EU 2016/679 pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.
7.4 Right referred to in Article 20 Right to data portability
The data subject has the right to receive, in a structured, commonly used and automatically readable form, the personal data concerning him / her provided to a data controller and has the right to transmit such data to another data controller without impediments from part of the data controller
8. Revocation of consent to treatment
The interested party has the right to withdraw consent to the processing of your personal data by contacting the Data Controller.
Owner of the processing of personal data BOHEMI CHEMICALS SRL
Address: VIA DURINI 27 – 20122 MILAN
P. IVA 12579770152