Information on the processing of personal data articles 12-13 of EU Regulation no. 679/2016 

Data controller: Bampi SPA via Via Borsellino, 4 – 25017 Lonato del Garda (BS) Italy – VAT number 01998270985; contact details of the owner – Tel. +39.030.9132489 – Fax +39.030.9132892 – mail: privacy@bampi.it

Subject of processing: common personal data identified in the email address you provided when registering with our newsletter;

Purpose of the processing: to send you newsletters with communications relating to reserved events, commercial promotions, information on products.

Legal basis: the processing is carried out on the basis of lawfulness the consent freely expressed by the interested party as required by art. 6 lett. a) GDPR. Consent may be revoked at any time by using the appropriate service at the bottom of the newsletter which provides for cancellation from the service or by writing to the data controller; Data provision: The provision of your personal data is necessary to subscribe to the newsletter service; your refusal to provide data will make it impossible for the data controller to send you communications via newsletters. 

Processing methods: Personal data will be processed in compliance with the principles of lawfulness and correctness and in such a way as to fully protect your confidentiality, in paper, computerized and telematic form and entered in the relevant databases; with technical and organizational methods such as to guarantee a adequate security level pursuant to art. 32 of the GDPR, with the aid of electronic or IT tools in compliance with mandatory legislation.

Communication to third parties and data transfer: In relation to the purposes, the data may be communicated to internal subjects trained and authorized in writing, by external managers and companies or to persons, who provide services, necessary or connected to the achievement of the purpose, on behalf of the Data Controller, Public Supervisory Authorities; etc. In no way will we transfer or disclose your data. The list of third parties is available from the data controller.

Bampi S.p.A. will not transfer your personal data outside the EU; should this become necessary, we ensure that the transfer will take place in compliance with articles 44 – 45 – 46 – 47 – 48 and 49 of the GDPR and other applicable laws. Data retention: the data will be stored for a period of time not exceeding the achievement of the purposes for which they are collected and processed; an extension of time may only take place for compliance with legal obligations, or for defense purposes in court or in order to assert a right in the context of judicial / extrajudicial litigation.

Rights of the interested party

Right of Access pursuant to art. 15 of the GDPR and Right of Rectification pursuant to art. 16 of the GDPR

As an interested party, pursuant to art. 15 of the GDPR, you have the right to obtain from the Data Controller confirmation of the existence or otherwise of the processing of personal data concerning you, to obtain access to them and to all the information referred to in the same art. 15, paragraph 1, letters from (a) to (h), by issuing a copy of the data being processed in a structured format, commonly used, readable by an automatic and interoperable device.

You, pursuant to art. 16 of the GDPR, you also have the right to obtain from the Data Controller the correction and / or integration of the data being processed if they are out of date and / or inaccurate and / or incomplete.

Right of cancellation pursuant to art. 17 of the GDPR and right to limit the processing pursuant to art. 18 of the GDPR

As an interested party, you have the right to obtain, without undue delay, from the Data Controller, exclusively in the cases referred to in art. 17, paragraph 1, letters (a) to (f), of the GDPR, the deletion of data concerning you – with the exception of the cases specifically provided for by art. 17 paragraph 3.

As an interested party, you, pursuant to art. 18 paragraph 1, letters from (a) to (d), of the GDPR, you have the right to request and obtain from the Data Controller, the limitation of the processing of your personal data, or that such data are not subjected to further processing and can no longer be modified. The Data Controller ensures that the limitation of the processing is implemented through appropriate technical devices that guarantee its inaccessibility and immutability.

Right to data portability pursuant to art. 20 of the GDPR

As an interested party, you have the right to receive, pursuant to art. 20 of the GDPR, by the Data Controller the personal data concerning him, the processing of which is carried out by automated means, in a structured format, commonly used and readable by an automatic device, and also has the right to transmit such data to another holder of the treatment, or to obtain from the Data Controller, where technically feasible, the transmission direct such data to another specifically identified data controller.

Right to object to processing pursuant to art. 21 of the GDPR

You have the right to object at any time to the processing of personal data concerning you, for reasons connected with your particular situation, in cases where the processing of your data is necessary (1) for the performance of a task in the public interest and / or connected to the exercise of public authority vested in the Data Controller; (2) for the pursuit of a legitimate interest of the Data Controller or a third party; (3) for profiling activities carried out by the Data Controller on the basis of the previous points.

You also have the right to object to the processing of your personal data for reasons connected to your particular situation if they are processed for scientific or historical research purposes or for statistical purposes pursuant to Article 89, paragraph 1 of the GDPR, except in the case in which the processing is necessary for the performance of a task of public interest.

They also inform you of your right to lodge a complaint with the Supervisory Authority (Guarantor for the protection of personal data), as specified pursuant to art. 13, paragraph 2, letter (d) and governed by articles 77 et seq. of the GDPR and 141 et seq. of Legislative Decree 196/2003, as amended by Legislative Decree. 101/2018

You can exercise the rights listed above by sending a request to the email address privacy@bampi.it or by registered letter with return receipt to the contact address of the data controller, c / a privacy office.

Information updated 01 February 2019