WHEREAS:
"cbnsrl.it" hereinafter will be referred to as "THIS SITE"
"EU Regulation 2016/679" hereinafter will be referred to as "GDPR"
"C.B.N. S.R.L." hereinafter will be referred to as "the DATA CONTROLLER"
PRIVACY NOTICE
Thank you for visiting our website: we are committed to safeguarding your privacy and, in this document, we describe you how we will handled the PERSONAL DATA that you’ll provide us by the form of contact of THIS SITE, to send us requests for information.
First of all, we inform you that the DATA CONTROLLER is
C.B.N. S.R.L.
Head Office: Via Copernico 56, Trezzano S/Naviglio (MI)
Vat n° 11020460157
Cf 11020460157
Email: info@cbnsrl.it
You can check our Privacy Policy complete here.
PERSONAL DATA SUBJECT TO PROCESSING
The PERSONAL DATA object of this privacy notice are DATA SUPPLIED VOLUNTARILY compiling the contact form of THIS SITE. In this way, you may incur into the processing of PERSONAL DATA supplied voluntarily by you in order to be contacted and/or to receive a service in return, such as requesting information.
THE PURPOSES OF PROCESSING
The processing that we intend to carry out, under your explicit consent, has the purpose to reply to information requests received via email, phone, chat or through the designated form, about services and solutions offered on THIS SITE.
RECIPIENTS OF THE PERSONAL DATA
Your PERSONAL DATA may be processed electronically with access limited to persons appointed and authorised by the DATA CONTROLLER, who has taken all the necessary security measures to minimise the risk of privacy violation by third parties and is ready to adopt the security measures that prove indispensable at any time.
Your PERSONAL DATA may be shared for “processing purposes” listed in our Privacy Policy.
DATA TRANSFER
Some of your PERSONAL DATA is shared with Recipients that may be located outside of the European Economic Area. The DATA CONTROLLER ensures that the processing of your PERSONAL DATA by these Recipients is in compliance with the GDPR. Indeed, transfers can be based on a decision on the adequacy or on Standard Contractual Clauses approved by the European Commission.
More information is available from the DATA CONTROLLER, including information on which types of processing imply the transfer of the data in question to the outside of the European Economic Area. Given that the said transfer is necessary for the use of the service, in accordance with the privacy legislation in force, it is justified pursuant to Art. 44 and the following of CHAPTER V of the GDPR.
DATA RETENTION
The PERSONAL DATA processed for the purposes described above will be kept for the time strictly necessary to achieve the relevant goals. In any case, since the processing is carried out for the provision of services, the DATA CONTROLLER will process the PERSONAL DATA until the time allowed by the Italian legislation for the protection of one’s own interests (Art. 2946 of the Civil Code and the following).
PERSONAL DATA processed for the purposes of “Legal Obligation” will be retained until the time required by the specific obligation or applicable law.
For the purposes of “Direct Marketing” or “Statistics”, your PERSONAL DATA will be processed until the revocation of your consent or until 3 years after you have ceased to be the DATA CONTROLLER’s client or if you have simply registered on THIS SITE and have not made any purchase of products or services.
The DATA CONTROLLER reserves the right to store your PERSONAL DATA until the time allowed by the Italian law for the protection of one’s own interests (Art. 2947(1)(3) of the Civil Code). More information on the period of data retention and on the criteria used to establish the length of this period can be requested from the DATA CONTROLLER.
RIGHTS OF THE INTERESTED PARTY
You have the right to request from the DATA CONTROLLER, at any time, the access to your PERSONAL DATA (according to Art. 15 of the GDPR), the correction (according to Art. 16 of the GDPR), the deletion (according to Art. 17 of the GDPR), the limitation of the processing (according to Art. 18 of the GDPR) or to oppose to the processing in the cases provided for in article 21 of the GDPR, and to obtain the data concerning you in a structured format, that can be commonly used and read by an automatic device, (“portability” according to Art. 20 of the GDPR). All the requests can be made by writing an email to the DATA CONTROLLER, using the address shown at the top of this document.
In any case, you are always entitled to file a complaint with the competent supervisory authority (the Authority for the Protection of Personal Data), pursuant to art. 77 of the GDPR, if you believe that the processing of your PERSONAL DATA is against the legislation currently in force.
CHANGES
This PRIVACY POLICY is effective as of May 25th, 2018. The DATA CONTROLLER reserves the right to modify or simply update its content, in whole or in part, also due to variations of the applicable regulations. If changes to this Policy relate to substantial changes in the processing or may have a significant impact on the individuals involved, the DATA CONTROLLER will give due notice to all interested parties.