Privacy Policy

PRIVACY POLICY

INFORMATION PURSUANT TO ART. 13 OF EU REGULATION N. 679/2016

With specific reference to personal data pursuant to art. 4 n. 1 of EU Regulation n. 679/2016 (hereinafter “EU Regulation”) concerning you as “data subject” pursuant to art. 4 n. 1 of EU Regulation, B810 S.r.l., (hereinafter “B810”) (VAT Code n. 03378920361), in the person of its legal representative pro tempore, with registered office in Reggio Emilia, via E .Lazzaretti, 2/1, and DIGICOM S.r.l., (hereinafter “DIGICOM”) (VAT Code n. 03488160122), in the person of its legal representative pro tempore, with registered office in Legnano (MI), viale Cadorna, 95, as Joint Controllers pursuant to art. 26 of EU Regulation provides you with the following information pursuant to art. 13 of EU Regulation.

According to the art. 26 par. II of EU Regulation, the essential content of the agreement between B810 and DIGICOM is made available to data subject, who may request it at the following email address: info.privacy@b810group.it

  1. Nature and type of data collected and processed.

1.1. Your data subject to processing referred to this statement fall exclusively within the category of personal data pursuant to art. 4 n. 1 of EU Regulation, collected and subsequently processed, by Joint Controllers, for carry out the purposes better illustrated in the following art. 3.

  1. Information on Joint Controllers and on Data Protection Officer of group.

2.1. The Joint Controller pursuant to art. 26 of EU Regulation with reference to personal data  illustrated in the previous art. 1.1. is B810, which can be contacted at the following address: info.privacy@b810group.it

The additional Joint Controller pursuant to art. 26 of EU Regulation with reference to the personal data illustrated in the previous art. 1.1. is DIGICOM, which can be contacted at the following address: privacy@digicom.it

The Data Protection Officer of group pursuant to art. 37 of EU Regulation, appointed by B810 and DIGICOM, is Studio Baldi & Partners (VAT Code n. 00734370356), with registered office in Reggio Emilia, via G. Gutenberg, 3, which can be contacted at the following address: privacydpob810@baldiandpartners.it and/or privacydpodigicom@baldiandpartners.it

2.2. We inform you that any changes or updates regarding the data relating to the subjects indicated above will be appropriately published on the websites of each Joint Controller.

  1. Purpose of the processing.

3.1. With specific and unique reference to personal data pursuant to art. 4 n. 1 of EU Regulation referring to the users of the mobile application “Tippy” (hereinafter “App”) concerning the relative mobile device, B810 and DIGICOM decided to share the following purposes of processing pursuant to art. 4 n. 2 of EU Regulation of personal data concerning the aforementioned data subjects:

  • a. Correct and effective use by the user of the App and the services necessarily connected to it, including the registration activity (which can be performed by subjects over 14 years), by the App’s user;
  • b. Geolocation and/or tracking activities, following the activation of App and the services necessarily connected to it by the user;
  • c. Marketing activity concerning commercial communications by automated mood (i.e.: telefax; sms; email; phone calls recorded) or by traditional mood (i.e.: paper mail);
  • d. Profiling activities on the App’s users, in order to compose individual or group categories, at a statistical or detailed level, in order to improve the knowledge of user’s needs and expectations and in order to propose evaluated and/or evaluated products or services selected as beneficial to the users themselves;
  • e. Transfer of the data illustrated in the previous art. 1.1. to one or more third parties having their main establishment pursuant to art. 4 n. 16 of EU Regulation within a member state of the European Union, which operate in similar commodity sectors to those in which Joint Controllers operate.

The purpose illustrated in the previous letter a) falls within the hypothesis of lawfulness pursuant to art. 6 par. 1 letter b) of EU Regulation and, therefore, does not require your consent: in this regard, the Joint Controllers inform you that your refusal to consent to the purposes in question will make it impossible for Joint Controllers to provide for correct and effective use, on your part, of the App and the services necessarily connected to it.

The purposes illustrated in the previous letters b), c), d) and e) fall within the hypothesis ex art. 6 par. 1 letter a) of EU Regulation and, therefore, require your optional consent: in this regard, the Joint Controllers inform you that your refusal to consent for the execution of the purposes in question does not determine any type of consequence with regard to processing purposes described in the previous letter a).

  1. Subjects assigned to your data collected and processed by Joint Controllers.

4.1. In compliance with art. 13, par. 1 letters e) and f) of EU Regulation, the Joint Controllers provide you with the information described in the previous art. 1.1. may be disclosed to third parties only for the sole purpose of a correct execution of the processing purposes better illustrated in points a) to e) of art. 3.1. (where, with regard to those from letters b) to e), you have issued the specific and specific consent), which will be located in the Italian territory or within the European Union or in a so-called country third, with the exception of those considered inadequate by the European Commission, pursuant to art. 45 of EU Regulation.

4.2. The data described in art. 1.1. they are stored in archives located at the headquarters of the Joint Controllers and/or on servers located within the European Union.

 

  1. Data retention period.

5.1. In compliance with art. 13 par. 2 letter a) of EU Regulation, the Joint Controllers inform you that the retention period of your data described in previous art. 1.1. and treated for the execution of the purposes described in letters a) and b) of the art. 3.1. will coincide with a term not exceeding the complete pursuit of the purposes in question, which may be extended in order to fulfill legal or contractual obligations or possibly deriving from the need to manage a judicial or extra-judicial dispute promoted by or against Joint Controllers.

5.2. In compliance with art. 13 par. 2 letter a) of EU Regulation, the Joint Controllers inform you that the retention period of your data described in previous art. 1.1. and treated for the execution of the purposes described in letters c) to e) of previous art. 3.1. it will last until you decide to withdraw your consent, which may be given for the execution of the purposes in question.

  1. Treatment mood.

6.1. The Joint Controllers inform you that your data illustrated in art. 1.1. they will be processed with paper, electronic, telematic or IT tools, in full compliance with the relevant national and european law.

  1. Principles applied to the processing of your personal data.

7.1. We inform you that your data described in art. 1.1. will be treated in full and total respect of the principles expressed by art. 5 of EU Regulation.

 

  1. Rights of data subjects.

8.1. In relation to your data described in art. 1.1., we inform you that you have the right to exercise the rights provided by art. from 15 to 21 and from 77 to 78 of EU Regulation.

8.2. In compliance with art. 12 par. 1 of EU Regulation, the Joint Controllers undertake to provide you with the communications referred to in art. from 15 to 22 of EU Regulation in a concise, transparent, intelligible, easily accessible and in a simple and clear language: this information will be provided in writing or by other electronic means or, at the request of data subject, will be provided orally, provided the identity of data subject  is proven by other means.

8.3. In compliance with art. 12 par. 3 of EU Regulation, the Joint Controllers inform you that undertake to provide you with information relating to the action taken regarding a request pursuant to art. from 15 to 22 of EU Regulation without unjustified delay and, in any case, at the latest within one month of receipt of the request itself; this deadline may be extended by two months, if necessary, taking into account the complexity and number of requests.

8.4. In order to be able to exercise the rights described above in this article, you can avail yourself of the contact details specified in art. 2 of this information.