Privacy Policy complete

Information on the treatment of personal data
Information pursuant to art. 13 and art. 14 of European Regulation 679/2016 on the protection of personal data [GDPR]
In accordance with the requirements set by the General Regulation regarding the protection of personal data, the Data Controller provides the interested party with the following information in relation to the processing of personal data carried out.

HOLDER OF THE TREATMENT
Owner: Berizzi srl
Address: Via Torchio, 10 - 24034 Cisano Bergamasco (BG) - Italy
VAT / CF 03224470165/03224470165
Contacts Phone: 0341630184 | Email: matteo@berizzi.it
Legal representative
Privacy contact Matteo Beretta (3388091691)
Data protection officer Not present
Data controllers
No co-owner present

If you wish to request further information on the processing of your personal data or for the possible exercise of your rights, you can contact the above-mentioned privacy contact person in writing.

CATEGORIES OF INTERESTED PARTIES
List of categories of interested Customers or Users [The Marketing and / or loyalty actions that we are going to propose via e-mail will be addressed to our client companies both in Italy and in Europe (EEC and Extra EEC). These operations will be aimed at informing our customers of commercial offers, price lists, strategic and marketing operations, as well as communications regarding existing price lists and / or future price changes.], Potential customers [Marketing and / or loyalty actions that we will propose by email, they will be addressed to companies in our product sector or sectors where parts and components of our production / marketing are used NOT our customers but potential customers residing both in Italy and in Europe (EEC and Extra EEC). These operations will aim to inform our POTENTIAL CUSTOMERS of commercial offers, price lists, strategic and marketing operations, on our products that we clearly think may be of interest to these companies.]

TREATMENT CARRIED OUT
Marketing and Commercial Profiling
Description Promotion activities of services / products carried out by one or more means (by post, by email, by phone, online, etc.)

ORIGIN, PURPOSE, LEGAL BASIS AND NATURE OF THE DATA PROCESSED
Origin The data are partly collected from the interested party and partly collected from third parties. Description of the source: The data used by us are essentially the e-mail addresses of companies operating in product sectors in which the products we process and market are used. These addresses come from external sources (see Telecom and other Italian and foreign companies that market e-mail addresses for marketing and / or commercial use), as well as from an archive produced directly by our staff that searches the Internet for e-mail addresses of potentially interested companies. to our products. The data come from a publicly accessible source
Purpose 1. Marketing (market analysis and surveys) - Consent to the acquisition and processing of data is required in the communication sent to the company we are interested in contacting, if the response from the potential customer is affirmative, the name will be stored in the our marketing database to send future marketing communications and / or commercial loyalty; in case of lack of consent, the name, email address and all other information related to the name of the company that has NOT given us the consent to send communications for marketing and / or commercial purposes, will be deleted from our database and NOTHING will remain in memory of that company. 2. Advertising - In our communications strictly by e-mail, our request will always be present in which we tell the user that, if he no longer wishes to receive our commercial / marketing and loyalty communications, just reply to the never by clicking on a link. I DO NOT CONSENT and immediately the email of the contacted company will be permanently deleted from our marketing / advertising database. All emails that DO NOT explicitly request cancellation will be considered as accepted and stored in our marketing / advertising database. 3. Promotional activities - The consent to the acquisition and processing of data is required in the communication sent to the company we are interested in contacting, if the response from the potential customer is affirmative, the name will be stored in our marketing database to send future communications marketing and / or commercial loyalty; in case of lack of consent, the name, email address and all other information related to the name of the company that has NOT given us the consent to send communications for marketing and / or commercial purposes, will be deleted from our database and NOTHING will remain in memory of that company. 2. Advertising - In our communications strictly by e-mail, our request will always be present in which we tell the user that, if he no longer wishes to receive our commercial / marketing and loyalty communications, just reply to the never by clicking on a link. I DO NOT CONSENT and immediately the email of the contacted company will be permanently deleted from our marketing / advertising database. All emails that DO NOT explicitly request cancellation will be considered as accepted and stored in our marketing / advertising database. 3. Promotional activities - The consent to the acquisition and processing of data is required in the communication sent to the company we are interested in contacting, if the response from the potential customer is affirmative, the name will be stored in our marketing database to send future communications marketing and / or commercial loyalty; in case of lack of consent, the name, email address and all other information related to the name of the company that has NOT given us the consent to send communications for marketing and / or commercial purposes, will be deleted from our database and NOTHING will remain in memory of that company. 4. Detection of customer satisfaction - We will use strictly e-mail communications also to detect customer satisfaction (regarding our commercial actions, marketing, etc.), our request will always be present in which we tell the user that , if you no longer wish to receive our commercial / marketing and loyalty communications, just reply to the never by clicking on a NON CONSENT link and immediately the email of the contacted company will be permanently deleted from our marketing / advertising database and the response to the degree of satisfaction anonymously registered as NEGATIVE. All emails that DO NOT explicitly request cancellation will be considered as accepted and stored in our marketing / advertising / commercial database and used for future customer loyalty actions. 5. Information to customers of new services / products - We will use communications strictly by e-mail also to communicate to customers acquired and potential, the supply of new products and / or services offered by us; also in this case our request will always be present in which we ask the user that, if he no longer wishes to receive our commercial / marketing and loyalty communications, just reply to the never by clicking on a link of NON CONSENT and immediately the company email contacted will be permanently deleted from our marketing / commercial / advertising and loyalty database. All emails that DO NOT explicitly request cancellation will be considered as accepted and stored in our marketing / advertising / commercial database and used for future customer loyalty actions.
Legal basis For purposes 1: Consent of the interested party For purposes 2, 3, 4, 5: Processing is necessary to fulfill a legal obligation to which the data controller is subject
Personal data processed Economic, commercial, financial and insurance activities [All data relating to COMPANIES such as personal data, product class, address, VAT number, CF, etc.], Telephone contact, Contact and communication data, E-mail address [ Of companies operating in our product sector on which to carry out Commercial, Marketing and loyalty actions]
The "particular" data (sensitive data) are those defined by articles 9 and 10 of Regulation 2016/679 / EU ("GDPR"). These data are processed, in compliance with the indications of the GDPR and in light of the General Authorizations issued by the Guarantor Authority for the protection of personal data.
Particular data processed -
Legal basis art. 9

RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA
Categories of recipients The communication of your personal data, carried out on the legal bases provided for by art.6 of the 2016/679 / EU Regulation, to the following third parties is provided:

These entities, bodies, companies and professionals act as Data Processors appointed by Berizzi srl or they are themselves Data Controllers of the personal data transmitted to them.
Your personal data, or the personal data of third parties in its ownership, may also be communicated to external companies, identified from time to time, to whom Berizzi srl entrusts the execution of obligations deriving from the assignment received to which only the data necessary for the activities required of them will be transmitted. All employees, consultants, temporary workers and / or any other "natural person" who, authorized to the treatment, carry out their activity on the basis of the instructions received from Berizzi srl, your personal data, or the personal data of third parties in its ownership, may also be communicated to external companies, identified from time to time, to which Berizzi srl entrusts the execution of obligations deriving from the assignment received to which only the data will be transmitted necessary for the activities requested of them. All employees, consultants, temporary workers and / or any other "natural person" who, authorized to the processing, carry out their activity on the basis of the instructions received from Berizzi srl, pursuant to art. art. 29 of the GDPR, are designated "Data Processors" (hereinafter also "Persons in Charge"). To Appointees or Managers, possibly designated, Berizzi srl gives adequate operating instructions, with particular reference to the adoption and compliance with security measures, in order to guarantee the confidentiality and security of data. Precisely with reference to the aspects of protection of personal data, you are invited, pursuant to art. 33 of the GDPR to report to Berizzi srl any circumstances or events from which a potential "breach of personal data (data breach)" may arise in order to allow an immediate assessment and the adoption of any actions aimed at countering this event by sending a communication to Berizzi srl at the addresses indicated above.
The obligation of Berizzi srl remains to communicate the data to Public Authorities upon specific request.

TRANSFER ABROAD
Transfers to foreign countries (outside the EU) or to international organizations
• No transfer to foreign countries or to international organizations
The transfer of your personal data abroad can take place if it is necessary for the management of the assignment received. For the processing of information and data that will eventually be communicated to these subjects, the equivalent levels of protection adopted for the processing of personal data of their employees will be required. In any case, only the data necessary for the pursuit of the intended purposes will be communicated and the regulatory tools provided for in Chapter V of the GDPR will be applied.

METHODS, PROCESSING LOGICS AND STORAGE TIMES
Duration of treatment The data for profiling and / or marketing purposes (obviously and exclusively only in cases where the member of the loyalty program and / or the card holder has provided separate, specific, optional and express informed consent ) will be kept for a period not exceeding, respectively, twelve and twenty-four months from their registration, except for the real transformation into anonymous form which will not allow, even indirectly or by connecting other databases, to identify the interested parties (any intentions to treat the data beyond these terms can only be implemented after evaluation by the guarantor following a specific preventive request pursuant to art.17 of the Code).
Your data are collected and recorded in a lawful and correct manner for the purposes indicated above in compliance with the principles and requirements of art. 5 c 1 of the GDPR.
The processing of personal data takes place using manual, IT and telematic tools with logic strictly related to the purposes themselves and, in any case, in order to guarantee their security and confidentiality.

NATURE OF THE CONFERENCE
The processing of personal data will be carried out for the following purposes:
Purposes that do not require consent - Advertising - In our communications strictly by e-mail, our request will always be present in which we tell the user that, if he no longer wishes to receive our commercial / marketing and loyalty communications, just respond to the by clicking on a NON CONSENT link and immediately the email of the contacted company will be permanently deleted from our marketing / advertising database. All emails that DO NOT explicitly request cancellation will be considered as accepted and stored in our marketing / advertising database. - Promotional activities - Consent to the acquisition and processing of data is required in the communication sent to the company we are interested in contacting, if the response from the potential customer will be affirmative, the name will be stored in our marketing database to send future marketing communications and / or commercial loyalty; in case of lack of consent, the name, email address and all other information related to the name of the company that has NOT given us the consent to send communications for marketing and / or commercial purposes, will be deleted from our database and NOTHING will remain in memory of that company. - Detection of the degree of customer satisfaction - We will use communications strictly by e-mail also to detect the degree of customer satisfaction (regarding our commercial actions, marketing and / or commercial loyalty; in case of lack of consent, the name, email address and all other information related to the name of the company that has NOT given us the consent to send communications for marketing and / or commercial purposes, will be deleted from our database and NOTHING will remain in memory of that company. - Detection of the degree of customer satisfaction - We will use strictly e-mail communications also to detect the degree of customer satisfaction (regarding our commercial actions, marketing, etc.), our request will always be present in which we tell the user that, if you no longer wish to receive our commercial / marketing and loyalty communications, just reply to the never by clicking on a NON CONSENT link and immediately the email of the company contacted will be permanently deleted from our marketing / advertising database and the response to the degree of satisfaction recorded anonymously as NEGATIVE. All emails that DO NOT explicitly request cancellation will be considered as accepted and stored in our marketing / advertising / commercial database and used for future customer loyalty actions. - Information to customers of new services / products - We will use communications strictly by e-mail also to communicate to customers acquired and potential, the supply of new products and / or services offered by us; also in this case our request will always be present in which we ask the user that, if he no longer wishes to receive our commercial / marketing and loyalty communications, just reply to the never by clicking on a link of NON CONSENT and immediately the company email contacted will be permanently deleted from our marketing / commercial / advertising and loyalty database. All emails that DO NOT explicitly request cancellation will be considered as accepted and stored in our marketing / advertising / commercial database and used for future customer loyalty actions.
Purposes that require consent - Marketing (market analysis and surveys) - Consent to the acquisition and processing of data is required in the communication sent to the company we are interested in contacting, if the response from the potential customer will be affirmative, the name it will be stored in our marketing database to send future marketing communications and / or commercial loyalty; in case of lack of consent, the name, email address and all other information related to the name of the company that has NOT given us the consent to send communications for marketing and / or commercial purposes, will be deleted from our database and NOTHING will remain in memory of that company
Only with your explicit consent to be shown at the bottom of this information, the data, the purposes of which require consent, will be processed. The provision of data is however optional and will not cause prejudice in relation to the contractual relationship in place with the Data Controller
Your consent is not required for the data collected and used for needs related to the execution of activities related to the contractual relationship and compliance with the legal obligations indicated. Failure to communicate the personal data referred to above will make it impossible to follow up on the relationship in question. For the data collected and used for the legitimate interest of the Data Controller, your consent is not required (letter f, art.6, of the GDPR). The communication of the personal data referred to above is optional but necessary for the execution of the services offered by the Data Controller. Any refusal to communicate these data will make it impossible to provide all or part of the requested services.

RIGHTS OF THE INTERESTED PARTIES
(Articles 15 to 22 of the GDPR)
Right of access The interested party has the right, according to the provisions of art. from 15 to 22 of the GDPR.

Right of access The interested party has the right, according to the provisions of art. from 15 to 22 of the GDPR to request the owner to access their personal data.
Right of rectification The interested party has the right, according to the provisions of art. from 15 to 22 of the GDPR to request the owner to correct their personal data.
Right of cancellation The interested party has the right, according to the provisions of art. from 15 to 22 of the GDPR to request the owner to delete their personal data.
Right of limitation The interested party has the right, according to the provisions of art. from 15 to 22 of the GDPR to request the owner to limit the data concerning him.
Right to object The interested party has the right, according to the provisions of art. from 15 to 22 of the GDPR to oppose their treatment.
Right of portability The interested party has the right, according to the provisions of art. from 15 to 22 of the GDPR to exercise their right to data portability.
Right of revocation The interested party has the right, according to the provisions of art. from 15 to 22 of the GDPR to exercise their right to withdraw consent.
Right of complaint The interested party has the right, according to the provisions of art. 77 of the GDPR to exercise its right to lodge a complaint before the supervisory authority.

AUTOMATED PROCESS
Is there an automated process? YES
Automated processes or profiling methods It being understood that even in the case of consent of the interested party we will not proceed with the processing (however prohibited for profiling purposes) of data suitable to reveal the state of health and sexual life, we inform you that the methods of treatment in any case, they will be relevant and not excessive in relation to the type of goods marketed or services rendered. The profiling activity may concern "individual" personal data or "aggregate" personal data deriving from detailed individual personal data. These treatments may be carried out using personal data which are also aggregated according to predefined parameters according to company needs. Such data may include varied personal information, including contractual data and data relating to consumption made, purchases made, habits and spending volumes, levels of supply of goods and / or services, etc. from which it is possible derive further indications referring to each interested party (for example, consumption bracket, level of expenditure incurred at regular intervals, etc.). We recall with particular attention the fact that the provision of personal data and consent to disclosure to third parties for the purposes described above are absolutely optional and optional (and in any case can be revoked without formalities even after the service has been provided), and failure to provide it will not determine consequences other than impossibility for the data controller to proceed with the aforementioned profiling. Even if you have given your consent to authorize the Data Controller to pursue the profiling purposes, you will still be free to revoke it at any time, by sending a clear communication to that effect without any formalities. Following the receipt of this opt-out request, the Data Controller will promptly remove and delete your data from the databases (the latter, however, not interconnected or a source of intertwining and comparing data with those used for retention in strict sense) and inform third parties to whom the data have been communicated for the same cancellation purposes. The mere receipt of your cancellation request will automatically count as confirmation of cancellation.
Legal basis Authorized by Union or Member State law to which the data controller is subject