top of page

PRIVACY POLICY

​

INFORMATION RELATING TO THE PROCESSING OF PERSONAL DATA
(update January 2022)

 

Information pursuant to EU Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data.

 

The personal data collected through the site, by means of online forms, such as name, physical address and e-mail address, telephone numbers, photographs, videos and messages,   are used with and without the use of electronic means for the processing provided for by the 2016/679 EU Regulation, and for the following purposes:

  • Provide services to users

  • Compiling statistics

  • Send communications and information material

This information, like all the other collected through this site, will not be communicated or disclosed to third parties.

 

HOLDER OF THE PROCESSING OF PERSONAL DATA

The user may at any time view his / her data, request its integration, modification or cancellation, by means of a communication via email or fax:

B2B SrL
Via San Polo
25017 Lonato d \ G, BS
tel. +39 3662251260
pec: mail@pec.b2bsrl.com
e-mail: privacy@b2bsrl.com

 

TYPE OF DATA PROCESSED

The types of data and information collected and processed by B2B Srl during the use of this website are:

  • data provided by the user voluntarily

  • browsing data (collected automatically)

  • data collected through the use of cookies

The same will be processed in compliance with the legislation in force from time to time.

 

Data provided by the user voluntarily
up! Srl collects personal data provided voluntarily by the User through iContactsindicated on the website page.

Retention period
up! Srl undertakes to process the User's personal data within the limits permitted by the current legislation in force from time to time regarding the protection of personal data.
The User's personal data are kept in order to process the request for a period not exceeding 2 (two) years, after which up! Srl will regularly delete them in a secure manner, unless further processing of the same necessary for the pursuit of a legitimate interest is required.

Browsing data (collected automatically)
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. The processing of the data in question has the purpose of allowing navigation and consultation of this site.
This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified.
Among the information that can be collected we have the IP addresses, the type of browser or operating system used, the addresses in URI (uniform resource identifier) notation, the domain name and the addresses of the websites from which the access or exit (referring / exit pages), the time at which the request was made to the server, the method used and information on the response obtained, further information on the user's navigation on the site (see also the relative section to cookies) and other parameters relating to the user's operating system and IT environment.
These same data could also be used to identify and ascertain responsibilities in the event of any IT crimes against the site.

Data collected through the use of cookies
This website uses technical cookies to ensure the proper functioning of the procedures and improve the experience of using online applications. This document provides information on the use of cookies and similar technologies, on how they are used by the site and on how to manage them.

 

NOTICE CONCERNING MINORS UNDER 14 YEARS

Children under the age of 14 cannot provide personal data without the consent of the holder of parental responsibility. The owner will not be in any way responsible for any collection of personal data, as well as false declarations, provided by the minor, and in any case, if it is used, this site will facilitate the right of access and cancellation forwarded by of the legal guardian or by whoever exercises parental responsibility.

 

EXERCISE OF THE DATA SUBJECT'S RIGHTS

The interested party, in relation to the personal data covered by this information, has the right to exercise the rights provided for by the EU Regulation set out below:

  • Right of access by the interested party [art. 15 of the EU Regulation]: the interested party has the right to obtain from the owner confirmation that their personal data is being processed or not and, in this case, access to the information expressly provided for by the aforementioned article, including by way the purposes of the processing, the categories of data and recipients, the retention period, the existence of the right of cancellation, rectification or limitation, the right to lodge a complaint, all available information on the origin of the data, '' possible existence of an automated decision-making process pursuant to art. 22 of the Regulations, as well as a copy of their personal data.

  • Right of rectification [art. 16 of the EU Regulation]: the interested party has the right to obtain from the data controller the correction and / or integration of inaccurate personal data concerning him, without undue delay;

  • Right to cancellation ("right to be forgotten") [art. 17 of the EU Regulation]: the interested party has the right to have their personal data deleted without undue delay, if there is one of the reasons expressly provided for by the aforementioned article, including by way of example and not limited to the loss of the need for processing with respect to purposes, the revocation of the consent on which the processing is based, opposition to the processing in the event that it is based on a legitimate interest that does not prevail, unlawful processing of data, cancellation due to legal obligations, data of minors processed in the absence of the conditions of applicability provided from art. 8 of the Regulations;

  • Right to limitation of treatment [art. 18 of the EU Regulation]: in the cases provided for by art. 18, including the unlawful processing, the contestation of the accuracy of the data, the opposition of the interested party and the lack of the need for processing by the owner, the data of the interested party must be processed only for storage except for the consent of the itself and the other cases expressly provided for by the aforementioned article;

  • Right to data portability [art. 20 of the EU Regulation]: the interested party, in cases where the processing is based on consent and on the contract and is carried out by automated means, may request to receive their personal data in a structured format, commonly used and readable by an automatic device , and has the right to transmit them to another holder;

  • Right to object [art. 21 of the EU Regulation]: the interested party has the right to object to the processing of their personal data, in the event that the processing is based on a non-prevalent legitimate interest or is carried out for direct marketing purposes;

  • Right not to be subjected to automated decision-making processes [art. 22 of the EU Regulation]: the interested party has the right not to be subjected to a decision, including profiling, based solely on automated processing (for example carried out exclusively through electronic tools or computer programs).

 

CONSENT AND REVOCATION OF THE SAME.

 

The interested party has the right to withdraw the consent at any time and without providing any justification, limited to the cases in which the treatment is based on the consent of the interested party for one or more specific purposes. The treatment based on consent, and carried out prior to the revocation of the same, however, retains its lawfulness: [Article 7 of the EU Regulation]

 

The above description does not replace the text of the articles cited therein which are referred to here in full and for a complete reading of which, please refer to the appropriate section "Regulatory references on the rights of the interested party".

 

The aforementioned rights can be exercised in accordance with the provisions of the Regulations by sending an email toprivacy@upandup.biz. up! Srl, in compliance with art. 19 of the EU Regulation, proceeds to inform the recipients to whom the personal data have been communicated, of any corrections, cancellations or limitations of processing requested, where this is possible.

If the interested party considers that his rights have been compromised, he has the right to lodge a complaint with the Authority for the Protection of Personal Data (Public Relations Office, Piazza Venezia n.11 - 00187 Rome Telephone: (+39) 06.69677.2917 E-mail: urp@gpdp.it), according to the procedures indicated by the same Authority at the following internet address http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb / 4535524.

 

CHANGES AND UPDATES

This information shows the date of its last update in its header.
This site may also make changes and / or additions to this privacy policy also as a consequence of any subsequent amendments and / or regulatory additions.

 

REGULATORY REFERENCES ON THE RIGHTS OF THE INTERESTED PARTY

Article 7 (3)
Conditions for consent

 

The interested party has the right to withdraw his consent at any time. The withdrawal of consent does not affect the lawfulness of the processing based on consent before the withdrawal. Before giving his consent, the interested party is informed of this. Consent is withdrawn as easily as it is granted.

 

Article 15
Right of access by the interested party

  1. The interested party has the right to obtain from the data controller confirmation as to whether or not personal data concerning him is being processed and, in this case, to obtain access to personal data and the following information:

    • the purposes of the processing;

    • the categories of personal data in question;

    • the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular if they are recipients of third countries or international organizations;

    • when possible, the retention period of the personal data provided or, if not possible, the criteria used to determine this period;

    • the existence of the right of the interested party to ask the data controller to correct or delete personal data or limit the processing of personal data concerning him or to oppose their treatment;

    • the right to lodge a complaint with a supervisory authority;

    • if the data are not collected from the data subject, all available information on their origin;

    • the existence of an automated decision-making process, including the profiling referred to in Article 22, paragraphs 1 and 4, and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the 'interested.

  1. If personal data are transferred to a third country or to an international organization, the interested party has the right to be informed of the existence of adequate guarantees pursuant to Article 46 relating to the transfer.

  2. The data controller provides a copy of the personal data being processed. In the event of further copies requested by the interested party, the data controller may charge a reasonable fee based on administrative costs. If the interested party submits the request by electronic means, and unless otherwise indicated by the interested party, the information is provided in a commonly used electronic format.

  3. The right to obtain a copy referred to in paragraph 3 must not affect the rights and freedoms of others.

 

Article 16
Right of rectification

The interested party has the right to obtain from the data controller the correction of inaccurate personal data concerning him without undue delay. Taking into account the purposes of the processing, the interested party has the right to obtain the integration of incomplete personal data, also by providing an additional declaration.

 

Article 17
Right to erasure ("right to be forgotten")

  1. The data subject has the right to obtain from the data controller the cancellation of personal data concerning him without undue delay and the data controller is obliged to cancel the personal data without undue delay, if one of the following reasons exists:

    • the personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed;

    • the interested party revokes the consent on which the processing is based in accordance with Article 6, paragraph 1, letter a), or Article 9, paragraph 2, letter a), and if there is no other legal basis for the processing;

    • the interested party opposes the processing pursuant to Article 21, paragraph 1, and there is no legitimate overriding reason to proceed with the processing, or opposes the processing pursuant to Article 21, paragraph 2;

    • the personal data have been unlawfully processed;

    • personal data must be deleted to fulfill a legal obligation under Union or Member State law to which the data controller is subject;

    • the personal data have been collected in relation to the offer of information society services referred to in Article 8, paragraph 1.

  1. If the data controller has made personal data public and is obliged, pursuant to paragraph 1, to delete them, taking into account the available technology and the implementation costs, it adopts reasonable measures, including technical ones, to inform the data controllers that they are processing the personal data of the request of the interested party to delete any link, copy or reproduction of his personal data.

  2. Paragraphs 1 and 2 do not apply to the extent that processing is necessary:

  • to exercise the right to freedom of expression and information;

  • for the fulfillment of a legal obligation that requires the processing provided for by the law of the Union or of the Member State to which the data controller is subject or for the performance of a task carried out in the public interest or in the exercise of public authority referred to the data controller is invested;

  • for reasons of public interest in the field of public health in accordance with Article 9 (2) (h) and (i) and Article 9 (3);

  • for archiving purposes in the public interest, for scientific or historical research or for statistical purposes in accordance with Article 89 (1), insofar as the right referred to in paragraph 1 is likely to render impossible or seriously prejudice the achievement of the objectives of that treatment; or

  • for the assessment, exercise or defense of a right in court.

 

Article 18
Right to limitation of treatment

  1. The interested party has the right to obtain from the data controller the limitation of the processing when one of the following hypotheses occurs:

    • the data subject disputes the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data;

    • the processing is unlawful and the interested party opposes the cancellation of personal data and requests instead that its use be limited;

    • although the data controller no longer needs it for processing purposes, personal data are necessary for the data subject to ascertain, exercise or defend a right in court;

    • the interested party opposed the processing pursuant to article 21, paragraph 1, pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.

  1. If the processing is limited pursuant to paragraph 1, such personal data are processed, except for storage, only with the consent of the interested party or for the ascertainment, exercise or defense of a right in court or for protect the rights of another natural or legal person or for reasons of significant public interest of the Union or of a Member State.

  2. The interested party who has obtained the processing limitation pursuant to paragraph 1 is informed by the data controller before said limitation is revoked.

 

Article 19
Obligation to notify in case of rectification or cancellation of personal data or limitation of processing

The data controller communicates to each of the recipients to whom the personal data have been transmitted any corrections or cancellations or limitations of the processing carried out pursuant to Article 16, Article 17, paragraph 1, and Article 18, except for this proves impossible or involves a disproportionate effort. The data controller informs the data subject of these recipients if the data subject requests it.

 

Article 20
Right to data portability

  1. The interested party has the right to receive in a structured format, commonly used and readable by an automatic device, the personal data concerning him provided to a data controller and has the right to transmit such data to another data controller without impediments from part of the data controller to whom he provided them if:

    • the processing is based on consent pursuant to article 6, paragraph 1, letter a), or article 9, paragraph 2, letter a), or on a contract pursuant to article 6, paragraph 1, letter b) : And

    • the processing is carried out by automated means.

  1. In exercising their rights regarding data portability pursuant to paragraph 1, the interested party has the right to obtain the direct transmission of personal data from one data controller to another, if technically feasible.

  2. The exercise of the right referred to in paragraph 1 of this article is without prejudice to Article 17, This right does not apply to the processing necessary for the performance of a task in the public interest or connected to the exercise of public authority vested in it. the data controller.

  3. The right referred to in paragraph 1 must not affect the rights and freedoms of others.

 

Article 21
Right to object

  1. The interested party has the right to object at any time, for reasons connected to his particular situation, to the processing of personal data concerning him pursuant to article 6, paragraph 1, letters e) or f), including profiling on the basis of these provisions, the data controller refrains from further processing personal data unless he demonstrates the existence of compelling legitimate reasons to proceed with the processing that prevail over the interests, rights and freedoms of the data subject or for the verification, exercise or defense of a right in court.

  2. If personal data are processed for direct marketing purposes, the interested party has the right to object at any time to the processing of personal data concerning him for these purposes, including profiling to the extent that it is connected to such direct marketing.

  3. If the interested party objects to the processing for direct marketing purposes, the personal data are no longer processed for these purposes.

  4. The right referred to in paragraphs 1 and 2 is explicitly brought to the attention of the interested party and is presented clearly and separately from any other information at the latest at the time of the first communication with the interested party.

  5. In the context of the use of information society services and without prejudice to Directive 2002/58 / EC, the interested party can exercise his right to object by automated means using specific techniques.

  6. If personal data are processed for scientific or historical research purposes or for statistical purposes pursuant to Article 89, paragraph 1, the interested party, for reasons connected with his particular situation, has the right to object to the processing of personal data that concerns, except if the processing is necessary for the performance of a task of public interest.

 

Article 22
Automated decision-making process relating to individuals, including pro fi lement

  1. The interested party has the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or which significantly affects his person in a similar way.

  2. Paragraph 1 does not apply if the decision:

    • it is necessary for the conclusion or execution of a contract between the data subject and a data controller;

    • is authorized by the law of the Union or of the Member State to which the data controller is subject, which also specifies adequate measures to protect the rights, freedoms and legitimate interests of the data subject;

    • is based on the explicit consent of the interested party.

  1. In the cases referred to in paragraph 2, letters a) and c), the data controller implements appropriate measures to protect the rights, freedoms and legitimate interests of the data subject, at least the right to obtain human intervention by the data controller. , to express their opinion and to contest the decision.

  2. The decisions referred to in paragraph 2 are not based on the special categories of personal data referred to in Article 9 (1), unless Article 9 (2) (a) or (g) applies, and not adequate measures are in place to protect the rights, freedoms and legitimate interests of the data subject.

bottom of page