DATA CONTROLLER
Bruma Srl, based in via dei Geranei, 4 – 85042 Lagonegro (PZ), VAT number 06665030638 (hereinafter also “the Controller”), as controller of the data, informs you, in accordance with art. 13 D.Lgs. 30.6.2003 n. 196 (hereinafter the “Privacy Code”) and art. 13 of the EU Regulation 2016/679 (hereinafter, also “GDPR”) that your data will be processed in the manner and for the purposes that follow:
1. Object of the treatment
The Data Controller processes your personal data (in particular, your name, surname, fiscal code, VAT number, email, telephone number – hereinafter also the “personal data” or “data”) that you provide at the stage of requesting a quote through the Controller’s website and/or at the moment of subscribing to the newsletter services provided by the Controller.
2. Purpose of the treatment
Your personal data will be processed:
a) Without your express consent (art. 24 lett. a,b,c, Privacy Code and art. 6 lett. B, and GDPR) for the following Service Purposes: – allowing you to subscribe the newsletter services provided by the Controller and the additional services that you may request; – comply with the pre-contractual, contractual and fiscal obligations that derive from our relationship with you; – comply with the obligations deriving from the laws, regulations, norms, or any Authority request; – exercise the Controller’s rights such as the right of defence in court.
b) Only subject to your specific and distinct consent (art. 23 e 130 Privacy Code and art. 7 GDPR), for the following Marketing Purposes: – send you emails, commercial communications and/or advertising material about the products and services offered by the Controller.
Please note that if you are already a customer, we may send you commercial communications related to services and products of the Controller similar to those you have already used, subject to your disagreement (Article 130 paragraph 4 of the Privacy Code).
3. Method of treatment
The processing of your personal data is carried out by means of the operations indicated in art. 4 of the Privacy Code and art. 4 n. 2) GDPR and more precisely: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Your personal data are subject to both paper and electronic and / or automated processing. Your data will be stored in paper and electronic/digital format for the time necessary to fulfil the aforementioned purposes and in any case for no longer than 10 years from the termination of the relationship for the purposes of service and no later than 2 years from the collection of data for the purposes of marketing.
4. Access to data
Your data may be made accessible for the purposes referred to in art. 2.A) and 2.B):
– to employees and collaborators of the Controller or of the 2ld societies which the Controller is part of, in the capacity of agents and / or internal managers of the processing and / or management system administrators;
– to societies of 2ld which the Controller is part of (e.g. to carry out support activities in the feasibility studies for the clients’ projects, for the activities related to the technical management of the projects, for the storage of personal data, etc.), or to third party companies (as an indication, providers for the management and maintenance of the websites, suppliers, credit institutions, professional firms, etc.) who carry out outsourced activities on behalf of the Controller, in their capacity as external managers of the treatment.
5. Communication of data
Without the need for express consent (ex Article 24 letter a), b), d) Privacy Code and art. 6 lett. b) and c) GDPR), the Data Controller may communicate your data for the purposes referred to in art. 2.A) to Supervisory Bodies, Judicial Authorities, as well as to those subjects to whom the communication is mandatory by law for the accomplishment of said purposes.
Your data will not be disseminated.
6. Data transfer
Data will be stored and managed on servers located within the European Union owned by the Controller or third-party companies nominated by the Controller as responsible of the treatment. At present, the servers are located in Italy. The data won’t be object of transfer outside the European Union. In any case it is understood that the Data Controller, if necessary, will have the right to move the servers outside of the EU as well. In this case, the Data Controller hereby ensures that the transfer of data outside of the EU will take place in accordance with the applicable legal provisions, subject to the stipulation of the standard contractual clauses provided by the European Commission.
7. Nature of providing data and consequences of refusing to answer
The provision of data for the purposes referred to in art. 2.A) is mandatory. In their absence, we cannot guarantee the services of the art. 2.A).
The provision of data for the purposes referred to in art. 2.B) is optional. You can therefore decide not to give any data or to subsequently deny the possibility of processing data already provided: in this case, you will not be able to receive newsletters, commercial communications and advertising material concerning the Services offered by the Data Controller. However, you will continue to be entitled to the Services referred to in art. 2.A).
8. Rights of the interested party
In your capacity as an interested party, you have the rights set forth in art. 7 of the Privacy Code and art. 15 GDPR and precisely the rights of:
i- obtain confirmation of the existence or not of personal data concerning you, even if not yet registered, and their communication in an intelligible form;
ii- obtain the indication:
a) of the origin of personal data;
b) of the purposes and methods of the processing;
c) of the logic applied in case of treatment carried out with the aid of electronic instruments;
d) of the identification details of the owner, the managers and the designated representative pursuant to art. 5, paragraph 2 of the Privacy Code and art. 3, paragraph 1, GDPR;
e) of the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as appointed representative in the territory of the State, managers or agents;
iii- obtain:
a) updating, rectification or, when interested, integration of data;
b) the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed;
c) the attestation that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfilment proves impossible o involves a use of means manifestly disproportionate to the protected right;
iv- to object, in whole or in part:
a) for legitimate reasons, to the processing of personal data concerning you, even if pertinent to the purpose of the collection;
b) to the processing of personal data concerning you for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication, through the use of automated call systems without the intervention of an operator by e-mail and / or through traditional marketing methods by telephone and / or paper mail. It should be noted that the right of opposition of the interested party, set out in point b) above, for direct marketing purposes through automated methods extends to traditional ones and that in any case the possibility remains for the data subject to exercise the right to object even only partially. Therefore, the interested party can decide to receive only communications using traditional methods or only automated communications or none of the two types of communication. Where applicable, it also has the rights referred to in Articles 16-21 GDPR (Right of rectification, right to be forgotten, right of limitation of treatment, right to data portability, right of opposition), as well as the right of complaint to the Guarantor Authority.
9. How to exercise your rights
You can exercise your rights at any time by sending:
– a registered letter a.r. to Bruma Srl, via dei Geranei, 4 – 85042 Lagonegro (PZ), Italy;
– an e-mail to the address info@brumasrl.com.
10. Minors
The Website and the Controller’s services are not designed, or intended for use by, anyone under the age of 18, and the Controller does not intentionally collect personal information referred to minors. In the case that information about minors is accidentally recorded, the Controller will immediately erase and unregister them upon the user’s request.
11. Owner, managers and agents
The data controller is Bruma Srl, via dei Geranei, 4 – 85042 Lagonegro (PZ).
The updated list of data processors and managers is kept at the registered office of the Data Controller.
12. Modifications to this Note
This document can be modified. We therefore suggest that you regularly check this Note and refer to the last updated version of it.
COOKIES POLICY
What Are Cookies
A cookie is a small file and holds a certain amount of data, which a website can send to your computer (generally your browser), and it is normally used by the website manager to store the information needed to improve your experience while surfing the website or to send advertisement related to the preferences you have shown during your experience as an internet user. When you visit the same website a second time, or any other website, the user’s device checks that a recognisable cookie is available, so that it can read the information contained in the cookie. The different cookies store different types of information and are used for different types of aims (efficient surfing among the pages of the same website, profiling with the aim of sending specific advertisement, analysis of the number of visits to the website).
During the web surfing, the user may receive cookies sent from different websites or servers (so called third parties), where elements such as images, maps, sounds, specific links to different web pages may be stores, if they are visible on the website that the user is currently surfing.
More in general, some cookies (which are called session cookies) are associated with the user’s device for the single duration of the access to the website, and they expire automatically as soon as the browser is closed. Other cookies (which are called persistent cookies) remain inside the device for a longer period.
The specific aims of the different types of cookies installed in this website are described later.
You can disable the cookies by following the information provided below.
Characteristics and information about the cookies in this website:
Technical cookies:
These are cookies specifically used for the correct functioning and the fruition of our website. The technical cookies are used, for example, for the user’s login. They are usually supplied by third parties.
Profiling cookies:
These are cookies used to send advertisement in line with the user’s preferences when he or she surfs the web. They can be supplied by our servers of through our website, yet by third parties. The companies that offer or promote their own products through this website may allocate cookies to the users’ devices. The cookies categories used and the type of treatment of the personal data on behalf of these companies are regulated by the information provided by such companies.
For the information or to disable the profiling cookies supplied by third parties, please go to the following website: www.youronlinechoices.com/it
Analytical cookies:
These are the cookies used for statistical analysis, to improve your experience on the website and to facilitate the use of the website, besides monitoring its correct functioning. This type of cookies stores anonymous information about the activities of the users on the website. It is only supplied by third parties.
For the information or to disable the profiling cookies supplied by third parties, please go to the following website: www.youronlinechoices.com/it
How to consent or revoke cookies
Your consent to the use of cookies is initially granted by clicking on the “ok” key, located inside the short report/banner at the beginning (you can see how it works here, and it can be revoked at any time, based on the information listed above).
How to use the cookies on the website through your browser’s settings
The supply of all the cookies, both first and third parties’, can be disabled through the settings of the browser you are using; please note anyway that this could make the website unusable in case you block cookies that are essential for the website’s features. Each browser has different settings for the cookies disablement; below you can find the links to the instructions for the most common browsers:
Microsoft Internet Explorer
Google Chrome
Apple Safari
Mozilla Firefox
Opera
Third parties’ websites
Third parties’ websites that you can access through our website are not included in this Cookie Policy. Bruma srl denies responsibility for such websites. The cookies categories used and the treatment of personal data by such companies are regulated in accordance with the information provided by said companies.