Privacy & Policy Information

Pursuant to Article 13 of Regulation (EU) 2016/679 (hereinafter the “Regulation”), Bonfiglioli Consulting S.r.l., with registered office at Via Isonzo 61, 40033 Casalecchio di Reno (BO), Tax ID and VAT No. 02646871208, in its capacity as Data Controller (hereinafter “the Data Controller”), hereby informs you regarding the processing of your personal data.

The Regulation stipulates, first and foremost, that anyone processing personal data is required to inform the data subject about which data is being processed and certain key aspects of the processing: this must be done fairly, lawfully, and transparently, while protecting your privacy and your rights.

In compliance with this provision, the Data Controller provides you with the following information:

Nature of the data processed

The Data Controller processes your personal data (first name, last name, date and place of birth, tax ID number, phone number, email address), as well as financial and asset-related data necessary for the performance of existing or future contractual relationships.

Purpose of processing

Your personal data will be processed for the following purposes:

a) fulfillment of contractual obligations related to the provision of the requested service;

b) accounting and administrative purposes, for the management of relations with tax authorities and financial institutions, as well as to comply with all legal obligations;

c) direct marketing activities.

Methods of processing

Data processing is carried out using tools and procedures designed to ensure security and confidentiality and may be performed both on paper and using electronic means.

Legal basis

The legal basis for processing for purpose a) is that set forth in Article 6(1)(b) of the Regulation, as the processing is based on the performance of a contract or pre-contractual measures.

The legal basis for processing for purpose b) is that set forth in Article 6(1)(c) of the Regulation, as the processing is necessary for compliance with legal obligations.

The legal basis for processing for purpose c) is that set forth in Article 6(1)(a) of the Regulation, as the processing is based on the freely given consent of the data subject.

Access to Your Data

The following categories of individuals may become aware of your data, in their capacity as Data Processors appointed by the Data Controller:

• consultants involved in projects related to the divisions of this company;
• administrative staff;
• accounting and billing staff;
• general affairs staff;
• service marketing staff;
• external consultants (such as accountants and labor consultants).

Communication and Disclosure

Your data will not be disclosed by the Data Controller, meaning that it will not be made known to unspecified parties in any way, including by making it available or accessible for consultation.

Your data may be communicated by the Data Controller—meaning the disclosure of such data to one or more specific parties—under the following conditions:

• to parties who may access the data pursuant to provisions of law, regulations, or EU legislation, within the limits set forth by such rules;
• to parties who need to access your data for purposes ancillary to the relationship between you and the Data Controller, within the limits strictly necessary to perform such ancillary tasks (credit institutions are cited by way of example);
• to the Data Controller’s consultants, within the limits necessary to perform their duties within the Data Controller’s organization, subject to a letter of engagement imposing a duty of confidentiality and security.

Your Rights

The Data Controller specifies that you may exercise the following rights:

• request from the Data Controller access to your personal data, the rectification or erasure of such data, or the restriction of processing;
• object, in whole or in part, on legitimate grounds, to the processing of personal data concerning you, even if relevant to the purpose of collection;
• object, in whole or in part, to the processing of personal data concerning you for the purposes of sending advertising or direct sales material or for conducting market research or commercial communication;
• request data portability from the Data Controller;
• obtain information regarding the logic applied in processing carried out with the aid of electronic tools;
• to lodge a complaint with a supervisory authority.