In compliance with the provisions of EU Regulation No. 2016/679 (“GDPR”), we inform you that the personal data provided by you and obtained by our company will be processed in accordance with the principles of correctness, lawfulness and transparency, in compliance with current regulations. Therefore, pursuant to Art. 13 of the above-mentioned GDPR, we are providing you with the following information.
1.1 The Data Controller is Bios Line S.p.A., with registered office in Ponte San Nicolò (PD), Viale Finlandia No. 4, VAT No. 02501890285.
E-mail: [email protected], certified email address: [email protected].
1.2 According to art. 37 of the GDPR 679/2016, the Data Controller has appointed a Personal Data Protection Officer, who can be contacted by e-mail at the following address: [email protected].
Your personal data are processed:
The legal basis of processing is the fulfilment of obligations which must be fulfilled prior to conclusion of the contract and/or fulfilment of contractual obligations.
With reference to the specific marketing purpose referred to in Art. 2, point B) above, the legal basis of the processing is the specific consent given by you.
The personal data collected may be disclosed by us to employees and collaborators of the Data Controller, in their capacity as authorised data processors, and to the third parties indicated below:
The Data Controller does not intend to transfer the data collected to a third country or to an international organisation.
The data collected will be stored as follows.
Data necessary for the purposes of the relationship prior to commencement of the contract: for the time strictly necessary for the conclusion of the contractual relationship and, in any case, for a period of time not exceeding one year after collection.
Data necessary for the performance of the contractual relationship: for the whole term of the contractual relationship and any warranty obligations required by law and/or the contract.
Accounting records, invoices and correspondence: ten years, as required by law.
Data required for marketing purposes: for the duration of the contractual relationship, if existing, or, in the absence of a contractual relationship, for one year from the date on which you gave consent for processing for marketing purposes and, in any case, until withdrawal of consent. Any longer storage periods remain unaffected, in the event that they are required due to legal, accounting and/or fiscal obligations.
After the storage period, as described above, the data you have provided will be erased.
Data subjects have the right to:
The above rights may be exercised by sending a request by email to the following address: [email protected].
The provision of personal data by the data subject, for the purposes referred to in point 2. A) is necessary, as failure to provide the data prevents the existence of a legal relationship and processing of your data.
On the other hand, providing personal data for the purposes referred to in point 2. B) is optional. You may therefore decide not to comply with the request.
The data provided will not be processed by automated decision-making processes, including profiling.
Processing shall be carried out both with manual and computerised (including portable devices) tools, with logics of organisation and processing strictly related to the same purposes and, in any case, in order to ensure the security, integrity and confidentiality of the data itself, in accordance with the organisational, physical and logical measures envisaged by the provisions in force.
Processing is carried out by the data controller and by the persons in charge, authorised by the data controller.