PRIVACY INFORMATION FOR CUSTOMERS
Information according to article 13 GDPR concerning information to be provided where personal data are collected from the data subject
Whereas
EU Regulation 2016/679 (“General Data Protection Regulation”, hereinafter “GDPR”) protects the treatment of natural persons in relation to the processing of personal data, named as “data subject”. Such data processing must be inspired by the principles of fairness, lawfulness and transparency as well as by the protection of the privacy and of the rights of the data subject.
Pursuant to articles 12 and following of GDPR, we will process the personal data provided by you, according to the current legislation, with the utmost care, implementing effective management procedures to ensure the protection of the processing of your personal data. To this regard, through material procedures and data management procedures, we commit to ensure security of the personal data you provided to us, in order to prevent unauthorized access to or unauthorized disclosure of personal data, to keep data accuracy and to ensure an appropriate use of such data.
According to article 13 GDPR, the company mentioned below, as “Controller” of the processing have to provide you the information on the use of personal data.

1. Identity and contact of the Controller
The following company, acting as the Controller, is entitled to take decisions to determine the purposes and means of the processing of your personal data at hand:
- Fratelli Busnelli snc, represented by its legal representative, with registered office in Cabiate, via Padulli n 109/111
- Telephone Number: 031766171
- Email: busnelli@busnellifratelli.it

2. Source of the personal data
The collection of your personal data is carried out by recording those data you provided as data subject.

3. Purposes and legal basis of the data processing
Your data shall be processed by the Controller for the following purposes:
a. the execution of activities requested by the data subject; 
b. the registration to events, in case of your demand; 
c. the sending of invitations to events; 
d. the exercise of the legitimate interests pursued by the Controller; 
e. the compliance with legal obligations or binding orders from Police Authority.

4. Optional nature of data provision
The provision of data for the purposes mentioned in the previous section is:
- optional, but necessary in relation with art. 3, letters a), b) and c). The failure in communicating data and/or any refusal to process the data will make it impossible for the Controller to pursue the related purposes; 
- mandatory in relation with art. 3, letters d) and e): The failure in communicating data and/or any refusal to process the data will make it impossible for the Controller to fulfill its contractual obligations or will determine the possible violation of requests of the competent Authorities;

5. Personal data’s categories
In relation to the purposes referred to in paragraph 3 above, we collect and use your personal data as necessary in the context of our activities and to achieve high quality standards for customized products and services. We may collect various categories of personal data concerning you, including, but not limited to:
- personal data (name, surname, residence address); 
- contact details (telephone number, e-mail address).

6. Processing of the personal data
Concerning the purposes described above, personal data are processed by manual or informatics tools, with logics strictly connected to the purposes outlined above and, anyway, in a way to guarantee the safety and the confidentiality of the data itself. In any case, the logical and physical security of the data will be guaranteed, putting in place all the necessary technical and organizational measures to guarantee their safety. The processing of your personal data is carried out by means of one or more operations mentioned in article 4, n. 2), GDPR and more specifically: collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

7. Period of data storage
Personal data collected for the purposes determined above at paragraph 3 will be processed and stored for the time strictly necessary to pursue such purposes.
From the date of termination of this relationship, for any reason or cause, the personal data will be kept for the duration of the limitation periods applicable by law.
Once the given purposes have been fulfilled, and once the time has elapsed from the collection, the data will be deleted or transformed into an anonymous form.

8. Categories of subject to whom the personal data might be communicated or who can become aware of the data as Controller or Processor
Saved the consultation by the competent judicial or police authorities, your personal data may be known only by:
- employees of Fratelli Busnelli snc which have been regularly appointed as “authorized persons”;
- service providers which handle informatics service, communication devices (including e-mail) and the sending of newsletter, after being engaged as Data Processors and guaranteeing the same level of protection.

9. Provision and transfer of personal data abroad (extra-EU)
The management and storage of personal data takes place on servers located in Italy. Your personal data will not be transferred to third countries, as well as they will not be disseminated nor will be subject to any fully automated decision-making process, including profiling.

10. Rights of data subject
According to the provisions under Chapter III, Section I, GDPR, you are entitled to exercise the rights mentioned therein and in particular the following:
- Right of access by the data subject – Right to obtain confirmation from the Controller as to whether or not personal data concerning him or her are being processed, and, if so, access to information concerning the following issues, in particular: the purposes of the processing, the categories of personal data concerned and the period for which the personal data will be stored; the recipients to whom the personal data could be disclosed (article 15, GDPR);
- Right to rectification – Right to obtain, without undue delay, the rectification of inaccurate personal data concerning the data subject and the right to have incomplete personal data completed (article 16, GDPR);
- Right to erasure (‘right to be forgotten’) – Right to obtain from the Controller, without undue delay, the erasure of personal data concerning the data subject, under the circumstances described in the GDPR (article 17, GDPR),
- Right to restriction of processing – Right to obtain from the Controller the restriction of processing under the conditions detailed in the GDPR (article 18, GDPR);
- Right to data portability – Right to receive the personal data concerning the data subject provided to the Controller in a structured, commonly used and machine-readable format, as well as the right to transmit those data to another controller without hindrance, under the conditions set forth in the GDPR (article 20, GDPR);
- Right to object – Right to object to processing of personal data concerning the data subject, unless the Controller demonstrates compelling legitimate grounds to continue the processing (article 21, GDPR);
- Right to lodge a complaint with a supervisory authority– Right to raise a claim before the competent supervisory authority.

You can exercise the abovementioned rights by simply sending a request by email to the following address: busnelli@busnellifratelli.it