Privacy Policy made pursuant to EU Regulation 679/2016
General Data Protection Regulation

This policy is made in observance of Art. 13 of Regulation 2016/679 (GDPR), pursuant to Art. 13 of Legislative Decree. n. 196/2003 (Personal Data Protection Code) and relates to all personal data processed in the manner set out below.

The data controller

The Data Controller of the personal data collected is.
Bulltec S.r.l.
Via Terni, 330 – 47522 Cesena (FC)
Email ruggero@bulltec.it

Data collected

The personal data processed are collected as provided directly by the data subject or provided automatically.

a) Data provided directly by the data subject are all personal data entered by the user within the site for the use of the service or that are otherwise provided to the Data Controller in any way.

b) The data collected automatically are the navigation data. The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties or by the data controller, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the URI notation addresses of the requested resources, the time of the request, the method used in submitting the request to the server, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and computer environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning. The data could be used to ascertain responsibility in case of computer crimes against the site or other users.

In particular, the following personal data are collected and processed:

• Email address
• Last name, first name, telephone

Automatically collected data are browsing data. These data, although not collected for the purpose of being associated with the identity of the user, could indirectly, through processing and associations with data collected by the Owner, allow its identification. In particular:

• IP address
• Browser and navigation device

Recipients

Data of a personal nature provided may be disclosed to appropriately appointed recipients who will process the data in their capacity as data processors and/or as appointees, in order to comply with contracts or related purposes.

Legal basis and purpose of processing

The processing is lawful under Art. 6, para. 1, lett. a (consent) and lett. b (pre-contractual measures), lett. f (legitimate interest of the owner).

Data are processed exclusively for the purposes for which they are collected, as described below.

We use the data provided by data subjects for:

• respond to specific user requests
• only in the case of specific user consent, to allow adherence to specific and additional services such as sending future informative and promotional communications by email or by electronic means.

The provision of the data listed in the “Data Collected” section for the above purposes is mandatory to allow the user to access the service. For this reason, consent is compulsory and any refusal to process or failure, inaccurate or partial provision of data could result in the impossibility of proper provision of the service.

The provision of data for the purposes of sending newsletters for promotional, informational or research purposes is optional and refusal to give consent to the relevant Processing will result in the impossibility of being updated about commercial initiatives and/or promotional campaigns, receiving offers or other promotional material and/or sending the user personalized offers.
It is reiterated that the data controller does not provide any of the users’ information to third parties without their consent, except where required by law.

In any case, the dissemination and transfer of data outside the EU space is excluded.

Withdrawal of consent

The data subject may revoke his or her consent to receive promotional and commercial communications immediately by sending a request to the data controller’s email address or by clicking on the appropriate unsubscribe link that can be found in the footer of each promotional and commercial email received.

Modalities of the treatment

Personal data are processed by automated means for as long as is strictly necessary to achieve the purposes for which they were collected, providing in each case for the annual verification of the data stored in order to delete those considered obsolete, unless the law provides for archiving obligations.
Data processing is usually carried out at the company’s headquarters, by staff or external collaborators duly designated as data processors. The full list of data processors and Data Processors can be obtained by sending a request to the email address of the data controller.
Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.

Rights of the data subject

Pursuant to Art. 7 of the Privacy Code and art. 13 GDPR each user has the right to obtain confirmation of the existence or non-existence of his/her personal data, even if not yet registered, and their communication in an intelligible form.

In particular, the data subject has the right to obtain from the data controller the indication:

1. of the origin of the personal data;
2. of the purpose and methods of processing;
3. of the logic applied in case of processing carried out with the aid of electronic/informatic instruments;
4. the identification details of the data controller, the data processors and the designated representative;
5. of the subjects and categories of subjects to whom the data may be communicated or who may become aware of the data in their capacity as designated representative in the territory of the State, managers or appointees.

In addition, the data subject has the right to obtain from the data controller:

1. the updating, rectification or integration of their data;
2. the cancellation, transformation into anonymous form or blocking of data processed in violation of the law;
3. access to their own data, i.e. confirmation as to whether or not personal data concerning them is being processed;
4. the limitation of the processing,
5. data portability, i.e. the right to receive in a structured format personal data concerning him/her;
6. right to complain to the Supervisory Authority.

Finally, the data subject has the right to object, in whole or in part, on legitimate grounds, to the processing of personal data concerning him or her, even if pertinent to the purpose of collection. In particular, the data subject has the right to object to the processing of personal data concerning him/her for the purpose of sending commercial advertising material or direct sales or for carrying out market research or commercial communication. Requests under the above points should be sent by email to the address of the data controller.