Privacy Policy
Pursuant to Regulation (EU) 2016/679 on the protection of personal data (“G.D.P.R.”)
Dear Customer/User, in accordance with the obligations imposed by Regulation (EU) 679/2016 (General Data Protection Regulation – also GDPR), BFC Srl (hereinafter, the “COMPANY”), intends to inform you about how your personal data is processed, request your consent where necessary and make you aware of your rights and how to exercise them easily.
Data controller and contact details
The data controller is BFC Srl with registered office in via Bachelet number 10 in GAZZO (PD), Tax Code and VAT number 03149650164, REA PD-349585, info@ducadisangiusto.it
Type of data processed
The COMPANY, in order to provide you with what you have requested and to pursue the purposes better described in the specific dedicated paragraph, also in accordance with any consent given, processes various types of personal data (for example personal data, address, telephone numbers, e-mail addresses, etc.).
Sources of collection of personal data
The COMPANY collects personal data concerning you only and directly from you, including in its own stores. You can provide us with your personal data when requesting information, quotes, during negotiations, when signing contracts or during their performance, when visiting our store, when purchasing our products and, in general, when requesting the provision of services, however qualified or named.
Methods of processing
Your personal data is processed both manually, in paper format and through electronic and IT tools, with logic strictly related to the indicated purposes. Your personal data may be entered into our management systems and a Customer Relationship Management (“C.R.M.”) system, where your personal and contact data are entered in any case. In any case, your personal data is protected by adequate technical and organizational measures, in order to guarantee their security and confidentiality, in compliance with current regulations.
Purposes of processing and legal bases
The COMPANY processes personal data for multiple purposes, some of which require your specific and optional consent. To facilitate your understanding and ensure greater clarity, we deemed it appropriate to explicitly distinguish the individual purposes. The aforementioned processing is lawful as it is necessary for the performance of a contract to which you are a party or for the performance of pre-contractual measures adopted at your request, to allow the COMPANY to fulfill a legal obligation to which it is subject or, finally, for its legitimate interest.
Withdrawal of consent
If you have given consent to authorize a specific processing, we inform you that you can withdraw it at any time by contacting the Data Controller with the methods indicated in the following paragraph “Rights of the Data Subject”. This withdrawal, in any case, does not affect the lawfulness of the processing based on the consent given before the withdrawal. In the event of withdrawal of consent, personal data may still be processed if there is a different legal basis that legitimizes the processing.
Provision of data and consequences of refusal
The provision of your personal data is always left to your free will. However, the provision of personal data for Primary Purposes, including those of a special nature where necessary, is necessary and essential to allow the Company to fulfill your requests. The failure to provide personal data may therefore result in the impossibility for the COMPANY to initiate pre-contractual negotiations/relationships, to establish contractual relationships, to manage the post-contractual phase and/or, in any case, to provide you with the services or performances requested.
Data awareness and communication
Your personal data is processed by subjects specifically authorized or designated by the Data Controller within its structure (employees and collaborators however named), due to the performance of the tasks and duties assigned to each. Your personal data may also be processed by other external subjects operating on behalf of the COMPANY by virtue of specific contractual obligations or, in any case, duly authorized or appointed as data processors. Your personal data is not sold and is not subject to disclosure.
Transfer of data abroad
The COMPANY mainly processes its data within its own headquarters or, in any case, within the EU and/or European Economic Area. Also by virtue of the IT applications used, if necessary the COMPANY may transfer your personal data to third countries. In any case, we assure you that the transfer and processing of your personal data takes place in compliance with the conditions imposed by the G.D.P.R. (art. 44 et seq.), such as the Commission’s adequacy decisions, standard contractual clauses or other guarantees considered adequate.
Duration of processing
In accordance with the legal provisions that impose obligations to retain documents for accounting purposes and the general rules relating to the ordinary limitation period for contractual actions, we will delete your personal data relating to the Primary Purposes after the term of ten years, starting from the time of termination of the contract or from the formulation of the offer. Personal data processed for additional optional purposes (Marketing Purposes) will be deleted after the term of 10 years, a term considered appropriate and considering industry statistics.
Rights of the data subject
In application of the G.D.P.R., as a “Data Subject” you may at any time exercise the following rights: obtain confirmation as to whether or not processing of personal data concerning you is underway; obtain the rectification of inaccurate personal data; obtain the deletion of personal data; obtain the limitation of processing; data portability; not to be subject to a decision based solely on automated processing. To exercise the above rights, you may contact the COMPANY at any time by writing via registered mail or by sending an email to: info@ducadisangiusto.it
Right to object
In accordance with the requirements of art. 21, paragraph 4 of the G.D.P.R., the Company brings to your attention your right to object. In particular, you will have the right to object at any time, for reasons related to your particular situation, to the processing of personal data concerning you. In this case, the COMPANY will refrain from further processing the personal data unless there are compelling legitimate grounds for processing. You may also object to the processing of personal data carried out for direct marketing purposes.
Right to lodge a complaint and amendments
If you believe that the processing of data carried out by the Company is unlawful, you may lodge a complaint with the competent supervisory authority. As the regulatory framework is constantly evolving, we will take care to communicate any changes or updates to this information through the same channels used to contact you. We trust that you will appreciate our commitment to transparency and our willingness to make you fully aware of what we do with your personal data.