PERSONAL DATA PRIVACY
PRIVACY DISCLAIMER
Ex article 13 of EU Regulation 2016/679.
A. Who are we and why are we providing you with this document?
B2 labtech Srl, considers the protection of the personal data of its and / or potential customers and users to be of fundamental importance, ensuring that the processing of personal data, carried out in any manner, both automated and paper, takes place in full compliance with the safeguards and recognized rights. by Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, concerning the protection of individuals with regard to the processing of personal data, as well as the free circulation of such data (hereinafter the "Regulation") and by the additional applicable rules on the protection of personal data. The term personal data refers to the definition contained in Article 4 in point 1) of the Regulation, ie "any information concerning an identified or identifiable natural person; the natural person is considered identifiable who can be identified, directly or indirectly, with particular reference to an identifier such as the name, an identification number, location data, an online identifier or to one or more characteristic elements of his physical identity, physiological, genetic, psychological, economic, cultural or social "(hereinafter the" Personal Data "). The Regulation provides that, before proceeding with the processing of Personal Data - with this term meaning, according to the relevant definition contained in Article 4 at point 2) of the Regulation, "any operation or set of operations, carried out with or without the aid of automated processes applied to personal data or sets of personal data, such as the collection, registration, organization, structuring, storage, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, limitation, cancellation or destruction "(hereinafter the" Treatment ") - it is necessary that the person to whom such Personal Data belong to is informed about the reasons for which such data are requested and how they will be used.
In this regard, this document is intended to provide you, in a simple and intuitive way, with all the useful and necessary information so that you can provide your Personal Data in a conscious and informed manner and, at any time, request and obtain clarifications and / or adjustments. This information, therefore, has been drawn up on the basis of the principle of transparency and all the elements required by Article 13 of the Regulation and is divided into individual sections (hereinafter "Sections" and individually "Section"), each of which deals with one specific topic in order to make your reading faster, easier and easier to understand (hereinafter the "Information"). This Notice is accompanied by a specific form for the release of consent as required by Article 7 of the Regulations.
B. Who will process your Personal Data?
The company that will process your Personal Data for the main purpose referred to in Section D of this Notice and which, therefore, will play the role of data controller according to the relevant definition contained in Article 4 at point 7) of the Regulation, "the natural or legal person, public authority, service or other body which, individually or together with others, determines the purposes and means of the processing of personal data ", is: B2 labtech with legal and administrative headquarters in Via della Roggia 1, 38068 - Rovereto, registered in the Trento Company Register, Tax Code no. 00645360223 and VAT no. 00645360223 (hereinafter the "Data Controller").
C. Who can you contact?
The Data Controller can be contacted through the following channels:
-
by writing to the administrative office of B2 labtech, Via della Roggia 1, 38068 Rovereto (Trento);
-
by sending an e-mail to the e-mail address info@b2labtech.com for the kind attention of the B2 labtech Privacy office;
-
by calling and asking the B2 labtech Privacy office.
As required by article 38 of the Regulations, you can freely contact B2 labtech for all questions relating to the processing of your Personal Data and / or if you wish to exercise your rights as provided for in Section I of this Information, by sending a written communication to e-mail address info@b2labtech.com and / or by writing to B2 labtech, via della Roggia 1, 38068 - Rovereto (TN).
​
D. For what main purposes will your Personal Data be processed?
The website of the Data Controller for which this Information is issued is www.b2labtech.com (hereinafter "Website"). The Data Controller, in order to allow your registration on the Website, if the possibility of registering is foreseen, and / or sending requests for information using the contact forms and / or subscription to the newsletter service, has need to collect some of your Personal Data, as requested in the registration form on the Website or in the other forms on the Website. The processing of your Personal Data will be conducted by the Data Controller to allow you, therefore, to access your profile, participate in initiatives promoted through the Website, receive newsletters, send requests for information and take advantage of all other services, from time to time. in time, offered by the Internet Site you registered and / or within which you are browsing; the processing of your Personal Data will be legally based on the contractual relationship that will be created between you and the Data Controller following your acceptance of the terms and conditions of the Website.
Furthermore, the Data Controller may process your Personal Data to comply with legal obligations and to respond to requests from the competent authorities. In this case, the processing of your Personal Data will be based on the fulfillment of legal obligations to which the Data Controller is subject.
The Data Controller may also communicate or otherwise process your Personal Data in the context of extraordinary transactions, assignments of contracts, companies or branches of businesses, corporate reorganizations and restructuring in order to be able to conclude and manage such transactions or to fulfill to its contractual obligations deriving from them. In this case, the processing of your Personal Data will be legally based on the legitimate interest of the Data Controller to carry out these operations.
Furthermore, the Data Controller may process your Personal Data to ascertain, exercise and defend their rights in court. This processing will be legally based on the legitimate interest of the Data Controller to protect their rights. To allow the Data Controller to carry out the processing activities for the aforementioned purposes, it will be necessary to provide the Personal Data marked with the symbol *. In the absence of even one of the marked data, it will not be possible to proceed with the Processing of your Personal Data and, consequently, you will not be allowed to complete your registration on the Website and / or benefit from the services provided by them for which it is requested a provision of Personal Data. The Personal Data that will be requested from you for the pursuit of the aforementioned purposes will be those reported in the registration and / or contact form, i.e., by way of example and not limited to: name, surname, username, date of birth, domicile address / residence, e-mail address, telephone numbers of fixed and / or mobile users, tax code, gender. If you decide to access the Website through the use of your social profile (e.g. Facebook, Google, Linkedin, Twitter profile), where provided, the collection of your Personal Data will be carried out by the Data Controller from third parties, i.e. at the manager of the social network you used to access the website. In any case, you will be able to view this information in the Privacy section of each of the Internet sites.
​
E. Additional purposes
The Data Controller may request, in addition to the Personal Data above, additional Personal Data such as, by way of example and not limited to, data relating to tastes, preferences, habits, needs and consumption choices. The provision of such Personal Data is optional and failure to provide it does not affect registration on the Website and the possibility of sending requests or using the services offered by the Website. Subject to your express, free and unambiguous consent pursuant to Article 6, paragraph 1, point a) of the Regulations or, as specified below, on the basis of legitimate interest, the Data Controller may process your Personal Data for the following purposes :
-
(i) Direct marketing purposes: this term means the will of the Data Controller to carry out promotional and / or marketing activities for you. This category includes all activities carried out to promote products and / or services, sold and / or provided by the Data Controller on the basis of its legitimate interest in pursuing its corporate purpose.
-
(ii) Indirect marketing purposes: this term means the will of the Data Controller to carry out promotional and / or marketing activities for you on behalf of third parties. This category includes all the activities carried out to promote products and / or services, sold and / or supplied by third parties with whom the Data Controller has legal relationships without any communication of data in this case.
-
(iii) Purpose of profiling: this term means the will of the Data Controller to profile you or to evaluate your tastes, preferences and consumption habits also related to market surveys and statistical analyzes. This category includes any form of automated processing of personal data to evaluate certain personal aspects such as those concerning, by way of example but not limited to, professional performance, economic situation, personal preferences, interests, reliability, behavior, location or travel.
The processing of your Personal Data for the purposes referred to in points (ii) and (iii) cannot be separated from obtaining your consent which must necessarily comply with the conditions referred to in Article 7 of the Regulation, thus determining the lawfulness of the Processing of your Personal Data. With regard to the direct marketing purpose referred to in point (i), it should be noted that, by virtue of Article 6, paragraph 1, point f) of the Regulation, the Data Controller may carry out this activity based on their legitimate interest, to regardless of your consent and in any case up to your opposition to this treatment as better explained in Recital 47 of the Regulation in which it is "considered legitimate interest to process personal data for direct marketing purposes". This will also be possible following the assessments made by the Data Controller regarding the possible and possible prevalence of your interests, fundamental rights and freedoms that require the protection of Personal Data over their legitimate interest in sending direct marketing communications. The contact methods aimed at direct, indirect and profiling marketing activities as described in the previous points (i), (ii) and (iii), may be both automated (email) and traditional (where permitted, telephone calls with operator, postal items). In any case, and as better specified below in Sections H and I, you can oppose the processing and / or withdraw your consent, even partially, for example by consenting only to traditional contact methods. With regard to the contact methods that involve the use of your telephone contacts, we remind you that the marketing activities will be carried out after verifying your possible registration in the Register of Oppositions as established pursuant to and for the purposes of the Presidential Decree 7 September 2010, n. 178 and subsequent amendments.
​
F. To which subjects may your Personal Data be disclosed?
Your Personal Data may be disclosed to specific subjects considered recipients of such Personal Data. In fact, article 4 in point 9) of the Regulation defines as the recipient of a Personal Data "the natural or legal person, public authority, service or other body that receives communication of personal data, whether or not it is of third parties "(hereinafter the" Recipients ").
In this perspective, in order to correctly carry out all the processing activities necessary to pursue the purposes referred to in this Notice, the following Recipients may be in a position to process your Personal Data:
-
third parties who carry out part of the processing activities and / or activities connected and instrumental to them on behalf of the Data Controller. These subjects have been appointed as data processors, having to be understood individually with this term, pursuant to Article 4 at point 8) of the Regulation, "the natural or legal person, public authority, service or other body that processes Personal Data on behalf of the Data Controller "(hereinafter the" Data Processor ");
-
individuals, employees and / or collaborators of the Data Controller, who have been entrusted with specific and / or more processing activities of your Personal Data. These individuals have been given specific instructions regarding the security and correct use of Personal Data and are defined, pursuant to Article 4 at point 10) of the Regulation, "persons authorized to process Personal Data under the direct authority of the Data Controller. or the Data Processor "(hereinafter the" Authorized Persons ");
-
third parties who carry out processing activities and / or activities connected and instrumental to them as independent data controllers, including by way of example and not limited to consulting companies, freelancers, credit institutions, insurance companies, third-party companies and / or belonging to B2 labtech;
-
where required by law or to prevent or suppress the commission of a crime, your Personal Data may be disclosed to public bodies or judicial authorities without these being defined as Recipients. In fact, pursuant to Article 4 in point 9) of the Regulation, "public authorities that may receive disclosure of Personal Data in the context of a specific investigation in accordance with the law of the Union or of the Member States are not considered Recipients".
G. How long will your Personal Data be processed?
One of the principles applicable to the processing of your Personal Data concerns the limitation of the retention period, governed by Article 5, paragraph 1, point e) of the Regulation which states "Personal Data are stored in a form that allows the identification of the Data Subjects for a period of time not exceeding the achievement of the purposes for which they are processed; Personal Data may be stored for longer periods provided that they are processed exclusively for archiving purposes in the public interest, for scientific or historical research or for statistical purposes, in accordance with Article 89, paragraph 1, without prejudice to the implementation of technical measures and organizational requirements required by this regulation to protect the rights and freedoms of the interested party ". In light of this principle, your Personal Data will be processed by the Data Controller limited to what is necessary for the pursuit of the purpose referred to in Section D of this Information. In particular, your Personal Data will be kept for a period of time equal to the minimum necessary, as indicated in Recital 39 of the Regulation, i.e. up to ten years from the termination of the contractual relationships between you and the Data Controller, without prejudice to a further retention period that may be imposed or permitted by law, as also provided for by Recital 65 of the Regulation. With regard to the processing carried out for the achievement of the purposes referred to in Section E of this Notice, the Joint Controllers may lawfully process your Personal Data until you communicate, in one of the methods provided for in this Notice, your will to revoke the consent to one or all of the purposes for which you have been asked and / or to oppose the processing. Any withdrawal of consent or the exercise of the right to object will, in fact, require the Joint Controllers to cease the processing of your Personal Data for these purposes.
H. Is it possible to revoke the consent given and how?
As required by the Regulation, if you have given your consent to the processing of your Personal Data for one or more purposes for which it was requested, you can, at any time, revoke it totally and / or partially without prejudice to the lawfulness of the processing based on the consent given before the revocation. The methods for withdrawing consent are very simple and intuitive: you just need to contact the Data Controller and / or the Joint Data Controllers and / or the DPO using the contact channels listed in section C of this Information. In addition to the above and for simplicity, if you find yourself in a position to receive advertising e-mail messages from the Joint Controllers that are no longer of interest to you, it will be sufficient to click on the unsubscribe button at the bottom of the same to no longer receive no communication even through other contact channels for which your consent was obtained (SMS, MMS, paper mail, fax, telephone calls).
I. What are your rights?
As required by the Regulations, you can exercise, at any time, the following rights towards the Data Controller:
-
Right of access: you will have the right, pursuant to Article 15, paragraph 1 of the Regulation, to obtain from the Data Controller confirmation that your Personal Data is being Processed or not and, in this case, to obtain access to such Personal Data and to the following information: a) the purposes of the Processing; b) the categories of Personal Data in question; c) the Recipients or categories of Recipients to whom your Personal Data have been or will be communicated, in particular if Recipients from third countries or international organizations; d) when possible, the retention period of the Personal Data provided or, if not possible, the criteria used to determine this period; e) the existence of the right of the interested party to ask the Data Controller to correct or delete personal data or limit the processing of personal data concerning him or to oppose their treatment; f) the right to lodge a complaint with a supervisory authority; g) if the Personal Data are not collected from the Data Subject, all available information on their origin; h) the existence of an automated decision-making process, including profiling referred to in Article 22, paragraphs 1 and 4, of the Regulation and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of this treatment for the interested party. All this information can be found in this Information which will always be available to you in the Privacy section of each of the Internet sites.
-
Right of rectification: you will be able to obtain, pursuant to Article 16 of the Regulation, the rectification of your Personal Data that are inaccurate. Furthermore, taking into account the purposes of the processing, you will be able to obtain the integration of your Personal Data which are incomplete, also by providing a supplementary declaration.
-
Right to erasure: pursuant to Article 17, paragraph 1 of the Regulation, you can obtain the erasure of your Personal Data without undue delay and the Data Controller will be obliged to erase your Personal Data, if there is even only one of the following reasons: a) the Personal Data are no longer necessary with respect to the purposes for which they were collected or otherwise processed; b) you have revoked the consent on which the processing of your personal data is based and there is no other legal basis for their processing; c) you have opposed the processing pursuant to Article 21, paragraph 1 or 2 of the Regulation and, in the case referred to in paragraph 1, there is no longer any legitimate overriding reason to proceed with the Processing of your Personal Data; d) your Personal Data have been unlawfully processed; e) it is necessary to delete your Personal Data to comply with a legal obligation provided for by a European Union or domestic law. In some cases, as required by Article 17, paragraph 3 of the Regulation, the Data Controller is entitled not to delete your Personal Data if their Processing is necessary, for example, to exercise the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest, for archiving purposes in the public interest, for scientific or historical research or for statistical purposes, for the ascertainment, exercise or defense of a right in court.
-
Right to limit the processing: you can obtain the limitation of the processing, pursuant to Article 18 of the Regulation, in the event that one of the following hypotheses occurs: a) you have contested the accuracy of your Personal Data (the limitation will continue for the period necessary for the Data Controller to verify the accuracy of such Personal Data); b) the processing is unlawful but you have opposed the cancellation of your Personal Data, requesting, instead, that its use be limited; c) although the Data Controller no longer needs it for processing purposes, your Personal Data are used to ascertain, exercise or defend a right in court; d) you opposed the processing pursuant to Article 21, paragraph 1, of the Regulations and are awaiting verification of the possible prevalence of the Data Controller's legitimate reasons with respect to yours. In case of limitation of processing, your Personal Data will be processed, except for storage, only with your consent or for the ascertainment, exercise or defense of a right in court or to protect the rights of a 'other natural or legal person or for reasons of significant public interest. We will inform you, in any case, before this limitation is lifted.
-
Right to data portability: you can, at any time, request and receive, pursuant to Article 20, paragraph 1 of the Regulation, all your Personal Data processed by the Data Controller in a structured, commonly used and legible format or request it the transmission to another data controller without hindrance. In this case, it will be your responsibility to provide us with all the exact details of the new data controller to whom you intend to transfer your Personal Data by providing us with written authorization.
-
Right to object: pursuant to Article 21 of the Regulation you can object, at any time, to the Processing of your Personal Data a) if these are processed for direct marketing purposes, including profiling to the extent that it is connected to such direct marketing , or b) for reasons related to your particular situation, if your Personal Data are processed on the basis of the legitimate interest of the Data Controller or third parties, unless there are compelling legitimate reasons to proceed with the Processing that prevail over your interests, rights and freedoms o that the processing is necessary for the ascertainment, exercise or defense of a right in court.
To exercise all your rights as identified above, simply contact the Data Controller in the manner indicated in Section C of this Information.
Furthermore, you have the right to lodge a complaint with the supervisory authority: without prejudice to your right to appeal to any other administrative or judicial office, if you believe that the processing of your Personal Data conducted by the Data Controller is in violation of the Regulations and / or the applicable legislation, you can lodge a complaint with the Personal Data Protection Authority or other competent supervisory authority.
J. Where will your Personal Data be processed?
Your Personal Data will be processed by the Data Controller within the territory of the European Union. If for technical and / or operational reasons it is necessary to make use of subjects located outside the European Union, we inform you as of now that these subjects, where they process Personal Data on behalf of the Data Controller, will be appointed as Managers of the Processing pursuant to and for the purposes of Article 28 of the Regulation and the transfer of your Personal Data to these subjects, limited to the performance of specific Processing activities, will be regulated in accordance with the provisions of Chapter V of the Regulation. All necessary precautions will therefore be taken in order to guarantee the most complete protection of your Personal Data by basing this transfer: (a) on adequacy decisions of the recipient third countries expressed by the European Commission; (b) on standard contractual clauses developed by the European Commission; (c) on the adoption of binding corporate rules, so-called binding corporate rules. In any case, you can request more details from the Data Controller if your Personal Data have been processed outside the European Union by requesting evidence of the specific guarantees adopted.