Customers Privacy policy

Customers Privacy Policy

Dear Customer,

the Company BIBIELLE S.P.A., with registered office in Via Cuneo, 35 – 12040 Margarita (CN), P.IVA 02179070046, as Data Controller, would like to inform you that your personal data will be processed for the purposes and in the following ways.

1. OBJECT OF THE PROCESS AND SOURCE OF THE DATA PROCESSED
The data subject to the processing are personal, identification data and contact details, spontaneously delivered by the Data Subject during visits to the offices or telephone calls, requests for quotes and/or previous transactions.

2. PURPOSE AND LEGAL BASIS OF THE PROCESS
2.1. The personal data intentionally provided will be subject to the process pursuant to the purposes set forth below:
perform the administrative-accounting activities strictly related and ancillary to the fulfillment of fiscal and administrative obligations and to management of the requested performances;
exchange information, including the pre- and post- contractual activities;
supply goods and services requested and protect the creditors' claims which might derive;
finalize the request of information, set quotas and offers, manage the negotiation and the pre-contractual relationships;
make demands or handle the requests;
prevent and manage possible disputes, make debt disposals, and take legal action in case of need.
The processing operations carried out for the purposes are necessary to carry out pre-contractual measures requested by the data subject and contractual measures pursuant to EU Regulation 2016/679.
2.2. Based on the Legitimate Interest of the Data Controller, the Company may send, by email and with the intervention of operator, newsletters and communications concerning promotional messages concerning products, services and news promoted by BIBIELLE S.P.A. At any time, the Data Subject may object to such processing.
Such processing is lawful even in the absence of consent according to the provisions of art. 130 of the Privacy Code, according to which, in the absence of automated mechanisms and in the presence of an operator, " if the data controller uses, for the purpose of direct sale of his products or services, the e-mail coordinates provided by the data subject in the context of the sale of a product or service, hemay not require the consent of the data subject, provided that they are similar to those subject to the sale and the datasubject, adequately informed, does not refuse such use, initially or in the event of subsequent communications. The data subject, at the time of collection and on the sending of any communication made for the purposes referred to in this paragraph, is informed of the possibility of opposing the processing at any time, in an easy and free way".

3. NATURE OF DATA PROVISION
The data subject cannot refuse to give the Data Controller the personal data necessary to comply with the legal rules governing commercial transactions and taxation, as well as the data necessary to implement pre-contractual/contractual measures.
The provision of data for the purposes referred to in point 2.2. it is optional; the refusal will prevent the sending of commercial communications.

4. COMMUNICATION AND TRANSFER OF DATA
The personal data processed by the Controller will not be circulated or will not be given to any unknown person, in any form, including in the form they have been presented or for simply consultation.
The data are communicated to the recipients to the extent strictly necessary in relation to the above purposes. The personal data might be, instead, circulated to employees of the Controller's company; In particular, depending on work roles, some employees might be entitled to process personal data within the limit of their competences and in line with the Data Controller instructions. The personal data might be also circulated, within strictly necessary limits, to any subject supplying goods and/or executing performance or services upon our request of information and budget. Furthermore, the personal data might be circulated to any subject who is entitled to under laws, regulations, and European provisions for fiscal employment consultancy.
The Data Controller does not transfer personal data to any third country or to any international organization.

5. MODALITIES OF THE PROCESSING AND PROTECTING DATA
The processing of personal data will take place either automatically or manually, by way of modalities and tools ensuring the maximum level of safety and confidentiality, and it will be executed by subjects whose characteristics must be in line with article 4 and with the accountability principle of the G.D.P.R. The Controller stores and processes personal data for the period necessary to achieve the purposes and to perform what requested by the Users. Subsequently, the personal data will be stored, and no longer processed, for the period established by the fiscal and civil provisions in force.

6. RIGHTS OF DATA SUBJECT
Pursuant to G.D.P.R. 679/2016, the concerned person had the right to access (art. 15); the right of ratification (art. 16); right to cancellation (art. 17); right to limit the process of personal data (art. 18); right to portability (art. 20); right to oppose (art. 21); right to oppose to the automatic decisional process (art. 22).
To assert his rights, the data subject can contact the Data Controller specifying the subject matter of his request and the right he intends to exercise at the postal address Via Cuneo, 35 - 12040 Margarita (CN) or to the e-mail address bibielle@bibielle.com.

7. AUTOMATED DECISION-MAKING PROCESSES
The Data Controller does not carry out processing that consists of automated decision-making processes on the data.