PRIVACY POLICY

Pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the “GDPR”), Bons Amis Production S.r.l. (hereinafter the “Company”), as the Data Controller, is required to provide information regarding the use of its customers’ personal data.

1. Purposes and modalities of the processing

Personal data at the Company’s disposal may:

(a) be provided directly by the subject to whom the personal data pertain (the “Data Subject”), e.g. when the Data Subject fills out the contact forms on the website;

(b) be communicated to the Company by third parties via forms on the website; or

(c) be acquired through automatic tracking technologies, such as but not limited to cookies, for which the appropriate banner is provided.

Personal data are processed in the normal course of the Company’s business for the following purposes:

(i) Purposes strictly related and instrumental to the management of relations with the Data Subject.

The provision of personal data necessary for these purposes is not mandatory, but refusal to provide them may result in the inability of the Company to provide the service itself. Their processing does not require the consent of the Data Subject.

(ii) Fulfillment of obligations imposed by laws, regulations or EU legislation.

The provision of personal data necessary for these purposes is mandatory and its processing does not require the consent of the Data Subject.

(iii) Other purposes functional to the Company’s business such as:

(A) the promotion and sale of services of the Company, including sending of advertising material, also carried out through automated communication systems, e-mail marketing, newsletters, etc;

(B) the elaboration of studies and market research, also carried out by means of interviews ,questionnaires, newsletters, sending of informative material on products and services provided by the Company.

The provision of data necessary for the purposes set out in this point (iii) is not mandatory and their processing requires the consent of the Data Subject.

In relation to the purposes described, the processing of personal data is done by manual processing or electronic or otherwise automated tools, according to logic strictly related to the purposes and in any case in such a way as to ensure the confidentiality and security of personal data.

2. Categories of data subject to processing

In connection with the purposes described in Paragraph 1 above, the Company , will process the following personal data: [First Name and Last Name; e-mail, information about the use of the website, including how the user navigates within and/or information about the computer, device and connection, including IP address, browser version and location, advertising identifiers, cookie identifiers, as well as, for companies, personal data of the legal representative/attorney].

In the provision of the services and activities indicated in this privacy policy, the Company does not need to process personal data that Article 9 of the GDPR defines as “special”, (such as, for example, personal data disclosing health status, political and trade union opinions, religious beliefs, etc.).

3. Categories of persons to whom the data may be communicated or who may become aware of the data in their capacity as data controllers or processors

In pursuit of the purposes described in Paragraph 1, the Company may need to disclose the personal data of the Data Subjects to third parties belonging to the following categories:

(i) persons who/which perform, on behalf of the Company, the tasks of a technical or organizational nature indicated in Paragraph 1, including the accounting processing company;

(ii) authorities and supervisory bodies, judicial authorities and in general, subjects, public or private, with public functions;

(iii) companies and/or external professionals that the Company uses as part of assistance and consulting relationships and, in any case, for the provision of its services;

(iv) third-party companies for the purpose of promotional initiatives, where the Data Subject has given his or her consent.

The recipients of the communications described in this notice operate completely independently, as separate data controllers, or, in some cases, have been designated by the Company as data processors.

The full list of the Company’s appointed data processors may be requested by e-mail message sent to info@bonsamis.net.

Certain categories of persons, in their capacity as data processors, may have access to customers’ personal data for the purpose of fulfilling their assigned tasks. Specifically, the Company has designated the directors and employees of the Company itself (including interns), temporary workers used by the Company as data processors of customers’ data.

Persons designated by the Company as data processors may also become aware of personal data in the course of performing the tasks assigned to them. The identity of the data processors designated by the Company may be known in the manner indicated in Section 5 below.

The personal data processed by the Company and individuals who perform tasks of a technical and organizational nature described in Paragraph 1 on its behalf are not subject to dissemination.

4. Personal data storage period

Personal data will be processed for the entire duration of the contractual relationships established, and alsosubsequently, for the fulfillment of all legal obligations and in any case for a time not exceeding 10 years from the date hereof or beyond in cases expressly required by law. In cases of processing for promotional purposes, until the Data Subject’s request for possible objection to the mailing and the Data Subject’s willingness to opt out of receiving commercial communications.

5. Rights of the Data Subject under Articles 15 et seq. of the GDPR

Please be informed that the legislation on the protection of personal data gives Data Subjects the possibility to exercise specific rights. In particular, each Data Subject has:

(i) the right of access, expressly provided for in Article 15 of the GDPR, which means the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data;

(ii) the right to rectification, expressly provided for in Article 16 of the GDPR, which means the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her;

(iii) the right to erasure (right to be forgotten), expressly provided for in Article 17 of the GDPR, which means the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay;

(iv) the right to restriction of processing when one of the cases provided for in Article 18 of the GDPR applies;

(v) the right to data portability, expressly provided for in Article 20 of the GDPR, which means the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided;

(vi) the right to withdraw consent at any time, expressly provided for in Article 7 of the GDPR;

(vii) the right to lodge a complaint to the Guarantor pursuant to Article 77 of the GDPR if the data subject considers that the processing of personal data relating to him or her infringes the GDPR;

(viii) the right to an effective judicial remedy under Article 78 of the GDPR;

(ix) the right to object to the processing for commercial communications and advertising or direct sales material.

6. Data controller

The data controller of the personal data referred to in this statement is Bons Amis Production S.r.l., with registered office in Milan, via Cerano, 15 - Tel. +39 3208386226 - mail info@bonsamis.net.

Requests relating to the exercise of the rights referred to herein may be submitted, in writing, also by e-mail message sent to info@bonsamis.net to the attention of the data controller.

The Data Controller

Bons Amis Production S.r.l.

Via Cerano 15, Milano 20144

P.IVA - CF 12739920960

Subscribe to our newsletter