BOMI Group informs you that your personal data are processed in compliance with regulatory requirements related to data protection, according to principles of correctness, lawfulness, proportionality of interests and transparency, as well as to safeguard your privacy and rights, for the purposes, with the modalities and in the terms detailed hereunder.
1. Personal Data
Personal data is any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
2. Purposes, modalities and legal basis for data processing
Your personal data are processed exclusively for the purposes that are related and necessary in relation to the provision of the services provided by the Branches of BOMI Group.
The processing of personal data is performed through the following activities: collection, recording, sorting, retention, review, creation, modification, selection, extraction, comparison, use, interconnection, block, communication, deletion and destruction.
The processing of personal data is performed with the support of software with the supervision of the Controller and processors and other authorized subjects, in compliance with relevant prevention measures that guarantee data security and privacy.
The data won’t be object of profiling or automated decision-making processes.
Personal data are located at the Controller or at the processors identified by the Controller.
In case you provide us your comments and/or personal data to request general information and/or specific services (such as – non exhaustively – request for commercial information, subscribe to our web portal, subscribe to our newsletter, job application or answer to specific job vacancies), is understood that this data are given voluntarily upon request of the service. This web site may process personal data according to the legitimate interest of the Controller.
The data obtained are processed exclusively for the purposes of the provision of services requested and for the time necessary for this purpose.
The information are given voluntarily and consciously by the users, and is understood that this web site is not liable for any eventual breach of law committed by the users by doing so. It is a duty of the user to verify to have the necessary permits to input personal data of third parties or data that are protected under national and/or international law.
Data collected are processed exclusively for the purposes defined hereto and for the time necessary to perform the activities above defined. In any case the personal data won’t be shared and/or disclosed with third parties, unless it is required by the judicial authority or it is required by the law.
3. Nature of data collection and consequences of denied consent
Likewise most web sites, also BOMI Group web site uses log files where information are collected in automated way during visit from users. The information obtained may be related to:
- internet protocol address (IP);
- browser type and parameters of the device used to connect to the site;
- name of internet service provider (ISP);
- date and time of visit;
- previous web page (referral) and exit web page;
- eventual number of clicks.
This information are processed in automated way and are collected only as aggregated data for the purposes of verification of the correct functioning of the web site, security, and legitimate interest of the Controller. For security purposes (anti-spam, firewall, anti-virus), data registered automatically may include also other data such as IP address, that may be used, according to current regulation, to block attempts to damage the web site, damage other users or commit crimes.
4. Time of processing
The Controller, the processors and the subjects authorized process data for the time necessary according to the purposes defined hereto and, in any case, for a time that doesn’t exceed the time required by the law.
Regarding the data provided to receive commercial information and periodical newsletters, the data will be processed until you submit request to unsubscribe.
5. Communication and disclose of data
Your personal data won’t be shared, communicated and disclosed to third parties, unless this is required by the law, to perform the activities defined in a contract and provide requested services, or unless this is according to your explicit request.
6. Right of the data subject
You can call the number +3903962781325 or send an e-mail to firstname.lastname@example.org in order to exercise at any time your rights.
A. Right of access: i.e. the right to obtain confirmation whether personal data is present and that data processing is performed.
B. Right to be informed: i.e. the right to obtain information regarding
- the origin of personal data,
- the purposes and modalities of the treatment,
- the criteria used to process data with the support of electronic system,
- the details of Controller, processors, and those subjects and categories of subjects to whom personal data may be communicated or to that may become aware of the data, considering as processors or authorized subjects,
- the categories of personal data that are processed,
- the retention time of personal data and the criteria considered to determine it,
- the existence of automated decision-making processes,
- the right to obtain copy of personal data processed.
C. Right to rectification: i.e. the update, the rectification and integration of data.
D. Right to erasure (‘right to be forgotten’): i.e. deletion, pseudonymization or block of data processed in breach of the law, included those for which retention isn’t necessary in relation to the purposes related to the their collection and processing and including the right to withdraw the consent at any time.
E. Right to restriction of processing: i.e. the right to obtain from the controller restriction of processing.
F. Right to data portability: i.e. the right to request the transfer of data to other subjects, when the processing is based on the consent or contract and processing is performed with automated means.
G. Right to object: i.e. the right to object at any time, in total or in part, the processing of personal data.
H. Right to restrict automated decision-making in processing activities.
The exercise of the rights hereto can be performed with explicit request forwarded to the Controller through telephone, e-mail and/or registered mail with acknowledgement of receipt. It is the right of the data subject to lodge a complaint with a supervisory authority.
BOMI ITALIA S.p.A.
Via Torri Bianche, 9
ed.Quercia – 12° piano
20871 Vimercate (MB)
9. Data protection officer’s contacts
Pursuant to the art. 37 of General Data Protection Regulation EU 2016:679 (GDPR), BOMI ITALIA SPA (Data Controller), designate Avv. Marco Longoni of “STUDIO ARES SRL” (https://www.studioares.net/) as Data Protection Officer.