Dear Customer,
in compliance with the obligations established by the European Privacy Regulation EU/2016/679 (GDPR), we hereby inform you that Bassano Selle SRL, with headquarters in Via Castellana 36, ​​CAP 31039, City of Riese Pio X, Province TV, PEC sellebassano@pec .it, VAT number 02143650261, tax code 02143650261, registered in the TV Company Register, TV REA number 191110, as Data Controller will process the personal data concerning you and that have been or may come to us – from you or by other subjects – conferred/communicated during the relationship with our structure.

The processing of data, freely given by you or collected in any other way, will be carried out in compliance with the privacy regulations in force; based on the principles of correctness, lawfulness and transparency and carried out in compliance with the principles of pertinence, completeness and non-excess.

The data will be collected and recorded only for the purposes referred to in point 1) and will be kept for these purposes for a period not exceeding 10 years from their collection for administrative and accounting purposes and not exceeding 24 months from their collection for marketing.

1. Therefore, according to the provisions of article 13) of the European Privacy Regulation EU/2016/679 (GDPR), we inform you that the data you provide will be processed for the following purposes:

• For the regular performance of the institutional and/or activities envisaged by the corporate purpose;
• For needs relating to the stipulation of contracts and assignments, their execution, subsequent modifications or variations and for any obligation envisaged for the fulfillment of the same;
• For operational, organisational, managerial, fiscal, financial, insurance and accounting needs relating to the established contractual and/or pre-contractual relationship;
• To fulfill any type of obligation established by laws, regulations or community legislation;
• For the registration, management and storage of logs of any access to the corporate website, the corporate information system and corporate offices;
• For Access Control, Corporate Security and video surveillance purposes;
• For monitoring needs of the methods of delivery of products/services, the progress of relations with suppliers and the analysis and management of risks associated with the contractual relationship;
• For traditional marketing activities such as: sending brochures, catalogs and commercial and/or technical documentation by paper mail and telephone calls with an operator (subject to obtaining your explicit consent);
• For marketing activities with automated or similar tools such as: E-mail, Instant Messaging, Chat and telephone calls without an operator (subject to the acquisition of your explicit consent);
• For online marketing activities, web marketing and web advertising (subject to obtaining your explicit consent). – n) For profiling and/or management of automated decision-making processes (subject to the acquisition of
  Your explicit consent).

2. The treatment will be carried out in a partially automated way and may consist of the following operations:

• Collection, recording, organization and storage;
• Consultation and use;
• Selection, extraction, comparison;
• Interconnection.

The treatment will be carried out both with the use of paper supports and with the aid of electronic, IT and telematic tools suitable for guaranteeing the security and confidentiality of the data in compliance with the provisions of art. 32) of the European Privacy Regulation EU/2016/679 (GDPR).

In carrying out the processing operations, however, all technical, IT, organisational, logistic and procedural security measures will always be adopted, so that the minimum level of data protection required by law is guaranteed. The methodologies mentioned above, applied for the treatment, will guarantee access to the data only to the subjects specified in points 4) and 5).

3. The provision of data is:

• Indispensable and does not require your consent for all personal data essential for the correct establishment, management and continuation of the commercial and/or contractual relationship;
• Optional for data whose consent is required.

Any refusal, even if legitimate, to provide all or part of the above data, could compromise the smooth running of the relationship with our structure and in particular, for the personal data defined above as mandatory and indispensable, could result in the impossibility for us to carry out the normal course of business operations and the regular delivery of the requested products/services.

4. The subjects or categories of subjects who may become aware of the data or to whom the data may be communicated are the following:

• Legal Representative of the Data Controller;
• Data Processors (Customer Service, Marketing);
• Persons in charge of the treatment.

Personal data may also be disclosed, but only in aggregate, anonymous form and for statistical purposes.

5. If the processing could also concern personal data falling within the category of “particular” data (i.e. data suitable for revealing racial and ethnic origin, religious, philosophical or other beliefs, political opinions, adherence to parties, trade unions, associations or organizations of a religious, philosophical, political or trade union nature, as well as personal data suitable for revealing the state of health and sex life), the treatment will be carried out within the limits indicated by the General Authorizations of the Privacy Guarantor, according to the methods provided for by Legislative Decree 196/03, as amended by Legislative Decree n. 101/2018, and for the purposes strictly necessary for the regular performance of the company activity, of the operations relating to the provision of products/services and to the fulfillment of contractual and/or legal/regulation obligations.

In this case, the subjects or categories of subjects who may become aware of the sensitive data or to whom the data may be communicated are the following:

• Legal Representative of the Data Controller;
• Persons in charge of the treatment.

6. Personal data may also be communicated to public bodies, police forces or other public and private subjects, but exclusively for the purpose of fulfilling legal obligations, regulations or community legislation. The data in question will not be communicated to other subjects other than those provided for in this information and the data suitable for revealing the state of health of the interested party will in no case be disclosed.

7. The data may be processed and transferred, for the purposes referred to in point 1) and according to the methods referred to in point 2), also to subjects located in countries belonging to the European Union and/or outside the Union European Union on the basis of an adequacy decision of the European Commission.

8. In any case, you can always request at any time from the Legal Representative of the Data Controller a copy of your personal data, information regarding the location where your personal data are processed and an updated list with the identification details of all the Managers of the Processing and of the System Administrators authorized to process your data.

9. At any time, you can freely revoke the consent given, without any burden and prejudice to the lawfulness of the processing carried out up to that moment, and exercise the following rights of the interested party towards the Data Controller as provided for by the European Privacy Regulation EU/2016/679 and by Legislative Decree 196/03, as amended by Legislative Decree n. 101/2018:

• Access
• Correction
• Cancellation
• Opposition

Bassano Selle SRL