Privacy Policy

B.M. Srl, with registered office at Via Moneta 7, fraction Cortenuova, 23876 Monticello (LC), VAT number 01815240138 and Tax code 01815240138 (hereinafter, also the “Data Controller”), as the data controller of the personal data of users (hereinafter, the “Users”) who browse and use the services available on the website bmpianilavoro.it (hereinafter, the “Site” and the “Services”) provides below the privacy information pursuant to art. 13 of EU Regulation 2016/679 of 27 April 2016 (hereinafter, the “Regulation”, or also the “Applicable Law”).

This Site and the Services are reserved for subjects who have reached the age of eighteen. The Data Controller therefore does not collect personal data relating to subjects under the age of 18. Upon request of the Users, the Data Controller will promptly delete all personal data inadvertently collected and relating to subjects under the age of 18.

The Data Controller attaches the utmost importance to the right to privacy and the protection of the personal data of its Users. For any information in relation to this privacy information, Users can contact the Data Controller at any time, using the following methods:

For B.M. Srl:

Sending a registered letter to the registered office at Via Moneta 7, fraction Cortenuova, 23876 Monticello (LC)

• Sending an email to the address amministrazione@bmpianilavoro.it

1. Purpose of the processing

Users’ personal data will be lawfully processed by B.M. SRL pursuant to art. 6 of the Regulation for the following processing purposes:

a) contractual obligations and provision of the Services, to enable navigation of the Site or to execute the Terms of Use of the Site, which are accepted by the User upon registration on the Site and/or when using the Services and to fulfill specific requests of the User. The User’s data collected by B.M. SRL for the aforementioned purposes include: the name, surname, and voluntarily chosen nickname, age, province of residence/domicile, gender, email address, as well as all the User’s personal information that may be voluntarily published. Unless the User gives B.M. SRL a specific and optional consent to the processing of their data for further purposes, the User’s personal data will be used by B.M. SRL exclusively to verify the User’s identity (also through validation of the email address), thus avoiding possible fraud or abuses, and to contact the User for service reasons only (e.g., sending notifications related to the Services). Without prejudice to what is provided elsewhere in this privacy information, under no circumstances will B.M. SRL make the User’s personal data accessible to other Users and/or third parties.

b) administrative-accounting purposes, or to carry out organizational, administrative, financial, and accounting activities, such as internal organizational activities and activities functional to the fulfillment of contractual and pre-contractual obligations;

c) legal obligations, or to comply with obligations provided by law, by an authority, by a regulation, or by European legislation.

The provision of personal data for the processing purposes indicated above is optional but necessary, since failure to provide them will make it impossible for the User to browse the site, register on the Site, and use the Services.

Personal data that is necessary for the pursuit of the processing purposes described in this paragraph 1 is indicated with an asterisk in the registration form on the Site.

2. Additional processing purposes: marketing (sending of advertising material, direct sales, and commercial communication)

With the free and optional consent of the User, certain personal data of the User (namely the name, surname, and email address) may also be processed by the Data Controller for marketing purposes (sending of advertising material, direct sales, and commercial communication), or so that the Data Controller can contact the User via mail, email, telephone (landline and/or mobile, with automated calling or communication systems with or without the intervention of an operator) and/or SMS and/or MMS to propose to the User the purchase of products and/or services offered by the Data Controller and/or by third-party companies, present offers, promotions, and commercial opportunities.

In case of lack of consent, the possibility to register on the Site will not be in any way prejudiced.

In case of consent, the User may revoke it at any time, by requesting it from the Data Controller using the methods indicated in the following paragraph 7.

The User can also easily object to further sending of promotional communications via email by clicking on the appropriate link to revoke consent, which is present in each promotional email. Once consent is revoked, the Data Controller will send the User an email to confirm the revocation of consent. If the User wishes to revoke their consent to the sending of promotional communications via telephone while continuing to receive promotional communications via email, or vice versa, please send a request to the Data Controller using the methods indicated in the following paragraph 7.

The Data Controller informs that, following the exercise of the right to object to the sending of promotional communications via email, it is possible that, for technical and operational reasons (e.g., the formation of contact lists already completed shortly before the Data Controller’s receipt of the opposition request), the User may continue to receive some additional promotional messages. If the User continues to receive promotional messages after 24 hours have elapsed since exercising the right to object, please report the issue to the Data Controller using the contact details provided in the following paragraph 7.

3. Additional processing purposes: newsletter

With the optional and voluntary consent of the User, some personal data of the User (namely, name, surname, address, and email address) may also be processed by the Data Controller for the purpose of sending the newsletter. Therefore, the User may receive newsletters from the Data Controller related to their area of interest, and/or in relation to news and promotions available on the Website and/or initiatives of the Data Controller.

In case of non-consent, the possibility to subscribe to the Website will not be affected in any way.

In case of consent, the User may revoke it at any time by requesting it from the Data Controller using the methods indicated in the following paragraph 7.

The User may also easily object to further promotional communications by clicking on the appropriate link to withdraw consent, which is included in each email containing the newsletter. Once consent is revoked, the Data Controller will send the User an email confirming the revocation of consent.

4. Additional processing purposes: profiling

With the optional and voluntary consent of the User, the personal data of the User (including personal and contact data, as well as information regarding the services in which the User has shown interest) may also be processed by the Data Controller for profiling purposes, i.e., to reconstruct the User’s tastes and consumption habits, identifying their consumer profile, in order to send the User commercial offers consistent with the identified profile.

In case of non-consent, the possibility to subscribe to the Website will not be affected in any way.

In case of consent, the User may revoke it at any time by requesting it from the Data Controller using the methods indicated in the following paragraph 7.

5. Data processing methods and retention periods

The Data Controller will process the personal data of the Users using manual and computerized tools, with logic strictly related to the purposes themselves and, in any case, in order to guarantee the security and confidentiality of the data.

The personal data of the Users will be stored for the time strictly necessary to fulfill the primary purposes outlined in the previous paragraph 1, or otherwise as necessary for the protection of the interests of both the Users and B.M. Srl in civil proceedings.

In cases referred to in the previous paragraphs 2, 3, and 4, the personal data of the Users will be stored for the time strictly necessary to fulfill the purposes outlined therein and, in any case, for no more than, respectively, twenty-four (24) and twelve (12) months.

6. Scope of communication and dissemination of data

Employees and/or collaborators of the Data Controller tasked with managing the Website and all services related to the provision of the Services may become aware of the personal data of the Users. These individuals, who have been instructed in this regard by the Data Controller pursuant to Article 29 of the Regulation, will process the data of the Users exclusively for the purposes indicated in this information and in compliance with the provisions of the Applicable Regulations.

Furthermore, third parties who may process personal data on behalf of the Data Controller as “External Data Processors,” such as, for example, providers of IT and logistical services functional to the operation of the Website and/or the Services, outsourcing or cloud computing service providers, professionals, and consultants, may become aware of the personal data of the Users.

Users have the right to obtain a list of any data processors appointed by each Data Controller, by requesting it from the relevant Data Controller using the methods indicated in the following paragraph 7.

Moreover, the personal data of the Users may be communicated by B.M. SRL, to the extent that this is necessary and essential to fulfill contractual obligations, to autonomous third-party data controllers, such as managers of payment services and logistics services necessary for the delivery of goods sold through the Website. These autonomous controllers will process the User’s data exclusively for the purpose of correctly processing orders relating to the Services.

7. Rights of the Data Subjects

Users may exercise the rights granted to them by the Applicable Regulations by contacting the Data Controller using the following methods:

• Sending a registered letter with return receipt requested to the registered office at Via Moneta 7, fraction Cortenuova, 23876 Monticello (LC)

• Sending an email to the address amministrazione@bmpianilavoro.it

B.M. Srl will comply with the requests of Users regarding the processing outlined in paragraph 1, as well as complying with the requests of Users regarding the processing outlined in paragraphs 2, 3, and 4.

In accordance with the Applicable Regulations, the Data Controller informs that Users have the right to obtain: (i) indication of the origin of personal data; (ii) purposes and methods of processing; (iii) logic applied in case of processing carried out with the aid of electronic tools; (iv) identification details of the Data Controller and processors; (v) subjects or categories of subjects to whom personal data may be communicated or who may become aware of it as processors or authorized persons.

Furthermore, Users have the right to obtain:

a) access, updating, rectification, or, where interested, integration of data;

b) erasure, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed;

c) certification that the operations referred to in points (a) and (b) have been notified, also as regards their content, to those to whom the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared to the right being protected.

Moreover, Users have:

a) the right to revoke consent at any time, where the processing is based on their consent;

b) (where applicable) the right to data portability (the right to receive all personal data concerning them in a structured, commonly used, and machine-readable format), the right to restriction of processing of personal data, and the right to erasure (“right to be forgotten”);

c) the right to object:

i) in whole or in part, for legitimate reasons, to the processing of personal data concerning them, even if pertinent to the purpose of collection;

ii) in whole or in part, to the processing of personal data concerning them for the purpose of sending advertising materials or direct selling or for carrying out market research or commercial communication;

iii) where personal data are processed for direct marketing purposes, at any time, to the processing of their data for such purposes, including profiling to the extent that it is related to such direct marketing.

d) if they consider that the processing concerning them violates the Regulation, the right to lodge a complaint with a supervisory authority (in the Member State where they habitually reside, work, or where the alleged infringement occurred). The Italian supervisory authority is the Garante per la protezione dei dati personali, headquartered at Piazza di Monte Citorio n. 121, 00186 – Roma.

The Data Controller is not responsible for updating all the links visible in this Information, therefore whenever a link is not working and/or updated, Users acknowledge and accept that they will always have to refer to the document and/or section of the websites referred to by such link.