Complying with the provisions of Eu Regulation no. 679/2016 (GDPR General Data Protection Regulation).
BPRO S.P.A., having registered offices at Via fondo Ausa, 28 Dogana 47891, Republic of San Marino (RSM) - hereinafter referred to as “the Owner” or “the Company” - inform you, in accordance with the art. 13 EU Regulation no. 679/2016 (hereinafter referred to as “GDPR” ) that your data will be processed with the methods and for the purposes as follows:
The Owner processes personal, identifying and particular data (including but not limited to name, surname, business name, address, phone number, e-mail, medical prescription, hereinafter referred to as “personal data” or “data”), from you provided:
filling out the contact form on our website www.b1919eyewear.com (hereinafter referred to as “the website”) in order to receive commercial and/or marketing information;
coming into contact with our company whether in person (e.g.: an exhibition, a visit to our company) or through any communication channels (e.g.: computerized, telephonic, postal, digital, etc.).
2.Identity and contact details of the Owner
The Owner of the processing of your personal data is Bpro S.p.a., legally represented by its managing director, having registered offices at Via fondo Ausa, 28 Dogana 47891, Republic of San Marino (RSM) – C.O.E. 18797.
Contact details of the Owner:
phone number: +378 0549 942775
email address: email@example.com
3.Purpose of processing
The data you provide are processed to provide the following services:
as set forth in the art. 6 let. b), e) GDPR), for the following services:
to allow you to use services from you requested
to process a contact request (e.g.: provision of information, shipment of samples, etc.);
to comply with the obligation required by law, by Community legislation or by an order of the Authority (e.g.: emission of sale documents and invoices, declaration of conformity, etc.);
to prevent or to find out fraudulent activities or abuses of the website;
to exercise the Owner’s rights, for example in a court of law
to fulfil obligations following a contract (when, for example, you are clients, suppliers or consultants of our Company);
to implement activities pertinent to the aim of the Company, implementing economic, communicative and commercial initiatives considered worthwhile for the diffusion and the promotion of its own products and services in conjunction with industry events (invitation to exhibitions, sending of catalogues) or for the launch of new collections;
to communicate news and information as concerns contracts in process, existing or completed (for example: quotes, orders, production of goods, information about the shipment, sending of documents, post-marketing monitoring, etc.) in order to fulfil in a comprehensive way to the contracts of sale of products and/or services without discontinuity;
to provide after-sale service;
to send newsletters
The processing of your personal data was by means of the operations as set forth in art. 4 no. 2) GDPR and precisely: the collection, the recording, the organization, the retention, the consultation, the processing, the modification, the selection, the mining, the comparison, the use, the interconnection, the blocking, the reporting, the erasure and the destruction of data. Your personal data are subjected to the processing in both paper and electronic versions and/or automated, by means of a web site hosted on server owned by Passpartout S.p.a. - World Trade Center - with its headquarters Via Consiglio dei Sessanta, 99 – 47891 Dogana Repubblica di San Marino.
The Owner will process personal data for the time necessary for the fulfilment of the purposes referred to above, and at the latest 10 years starting from the cessation of the relationship as concerns the Purpose of the Service and at the latest 5 years starting from the collection of data for Other Purposes.
Your personal data will be processed exclusively by our personnel, who is trained to and allowed to process this data and, anyway, under the responsibility of the Owner of the processing and exclusively for the purposes, in connection to which, your data have been collected.
Bpro S.p.a. adopts technical and organizational measures in accordance with GDPR provisions to guarantee the security of your personal data, protecting them from the loss, the theft and/or abuse, unauthorized access, disclosure, falsification and/or destruction, intentional or unintentional.
Your personal data are kept exclusively in our Company and they will not be communicated or transmitted to third parties.
Bpro S.p.a could be, however, be obliged , in some cases, to transmit your personal data, wholly or partly, to third parties by virtue of obligations imposed by law, legal proceedings and/or requests from the public authorities.
6.Access to data
Your data could be made available for the purposes as set forth in art. 3.A) and 3.B):
to the Owner’s employees and partners, in their capacity as individuals in charge of the processing and/or system administrators.
Your data could just be made available for the purposes as set forth in art. 3.A)
to third societies or other subjects (indicatively, website provider, cloud provider, e-payment service provider, suppliers, technicians responsible of the hardware and software assistance, forwarders and couriers, credit institutions, etc.) who are involved in outsourcing activities on behalf of the Owner, as individuals in charge of the processing.
Without your express consent (art.6 let. b) and c) GDPR, the Owner can communicate your data for the purposes as set forth in the art. 3.A) to supervisory Boards, to legal Authorities and to all other subjects to whom the communication of data is obliged by the law or necessary for the fulfilment of the purposes as set forth in the art. 3.A).
Bpro S.p.a. does not use automated processes aimed at profiling.
Bpro S.p.a. does not transfer your data neither to third Countries, nor to International Organizations.
10.Provision of data and consequences of the refusal to answer
The provision of data for the purposes as set forth in art. 3.A) is required. Without them, we can not guarantee the Services of the art. 3.A)
The provision of data for the purposes as set forth in the art. 3.B) is instead optional. You can choose not to give data or to deny later the possibility to process data already provided. In any case, you will continue to be eligible for Services regarding to the art. 3.A).
11.Rights of the data subject
The data subject to whom the personal data refer may ask the Data controller to exercise its rights as set forth in art. 15 GDPR and specifically the rights:
to obtain confirmation of whether or not its personal data are retained by the same, even if not recorder yet, and their communication in intelligible form;
to obtain information about:a) the origin of the personal data; b) the purpose and methods of processing c) the logic applied in case of processing with electronic means; d) identification details of the owner, the persons in charge and the appointed representative under the art.5, clause 2 of the Privacy Code and the art.3, clause 1, GDPR; e) the subjects or categories of subjects to whom personal data could be provided or who may become aware of them as appointed representative within the territory of the State or as persons in charge;
to obtain: a) the update, to correct or to add supplementary data; b) the cancellation, the transformation of the same into anonymous format or the block of any data processed in breach of the law,including data that is not necessary to retain for the purpose for which the data was collected or possessed; c) the certificate of the operations as set forth let. a) and b) have been made aware, as concerns their content as well, of them to whom the data have been released.
to oppose, in whole or in part: a) to the processing of personal data, although pertaining to the purpose of the collection; b) to the processing of personal data for the purposes of sending advertising messages or direct sales material, market surveys or information via e-mail and/or via traditional forms of marketing via telephone and/or paper mail.
The data subject has the right as set forth in Articles 16-21 GDPR (Right of reply, right to be forgotten, right to restriction of processing, right to data portability, the right to oppose), although the right to file a complaint with the Competition Authority, where applicable.
12.Means of exercising the rights
You can exercising your rights at any time sending:
a registered letter addressed to: Via fondo Ausa, 28 Dogana 47891, Republic of San Marino (RSM)
an email to the following address firstname.lastname@example.org
Rep. di San Marino, 20/06/2018