pursuant to Articles 12 et seq. of EU Regulation 679/2016
EU Regulation 2016/679 (“General Data Protection Regulation”), hereinafter referred to as the Regulation, concerns the protection of individuals with regard to personal data concerning them and establishes that the processing of such data must be carried out in accordance with the principles of fairness, lawfulness, and transparency, with a aim of increasing the accountability of those who process the data.
According to the Regulation, personal data means any information relating to an identified or identifiable natural person (qualified as a data subject) and processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
As the undersigned company, in relation to your relationship with our organization, is in possession of certain data relating to you, which has been acquired, including verbally, directly or through third parties carrying out operations concerning you and which, in order to satisfy your request, have acquired and provided us with information, you are assured of the guarantees provided for by the legislation in favor of the Data Subject.
BIOMAR SRL, therefore, as Data Controller, will process your data in compliance with applicable legislation and ensuring maximum protection, including in terms of confidentiality.
We are therefore pleased to provide you with the following information (in compliance with Articles 12 et seq. of the Regulation), undertaking to protect the information communicated, in order to prevent unauthorized access or disclosure, as well as to maintain the accuracy of the data and to ensure its appropriate use.
The data controller, i.e. the entity that determines the purposes and means of personal data processing, is: BIOMAR SRL with registered office in Viale Belfiore 20, 50144 Florence, Italy - Tel. +39/055/475541-2-3 -Fax. +39/055/496626 – info@bio-mar.it
BIOMAR SRL collects and processes the personal data you provide, including through our websites. In this regard, we inform you that cookies are used to ensure the proper functioning of our sites. For more information, please refer to the cookie policy section.
You may be asked to provide the following data, even if only partially:
personal details, tax code, VAT number, name, registered office, residence and domicile, and contact details;
data relating to the contractual relationship describing the type of contract, as well as information relating to its execution and necessary for the fulfillment of the contract itself;
accounting data relating to the economic relationship, amounts due and payments, their periodic trends, and a summary of the accounting status of the relationship;
data to make the relationship with our organization more defined and our collaboration and operational efficiency more effective;
data relating to: your employees and/or collaborators, information on your profession or your company.
If necessary, for the purposes referred to in the following point, it may be necessary to know the data referred to in Article 9 of the Regulation (for example, data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, membership of parties, trade unions, associations or organizations of a religious, political, philosophical or trade union nature, genetic data, biometric data intended to uniquely identify a natural person, data concerning health or sex life or sexual orientation), where collected, in accordance with the provisions of the legislation, may only be processed with your written consent and for the specific purpose for which they are collected (Article 9, letter c), as well as in the cases referred to in letters b) to j) of the aforementioned Article 9 of the Regulation.
The personal data provided allows us, on the one hand, to carry out all executive activities relating to your contract or relationship with our company and, on the other hand, to provide and offer new services and products that meet your needs. Specifically, your personal data is processed for the following purposes and legal bases:
1) Without your prior consent for contractual purposes and in particular for
The execution of the contract or the fulfillment of pre-contractual commitments such as providing, activating, suspending, and managing products and services, providing the related billing and sending service communications and assistance, or providing all services included in the commercial offer and to improve technical assistance, customer care activities, services, and products, including through anonymous aggregate statistical analysis; pursuing the legitimate interest of the Data Controller to manage complaints and disputes, recover debts, prevent fraud and illegal activities, exercise rights and protect the legitimate interests of the Data Controller or third-party data controllers, for example, the right to defense in court; send commercial communications to the email address provided relating to BIOMAR SRL services and products. Each email sent will allow you to refuse further communications by clicking on the appropriate link. Compliance with legal obligations, such as complying with and fulfilling the obligations set forth in laws, regulations, EU regulations, orders, and requirements of the competent authorities.
2) Only after you have given your consent, for other non-contractual purposes, namely for
Marketing purposes, i.e. to inform you by ordinary letters, telephone calls, emails, and newsletters about BIOMAR SRL initiatives and offers, for BIOMAR SRL market research
Methods of processing
The personal data collected will be recorded, processed, and stored in our paper and electronic archives, in compliance with the appropriate technical and organizational measures referred to in Article 32 of the Regulation. The processing of personal data will be based on principles of correctness, lawfulness, and transparency and will be carried out in a manner compatible with the purposes for which it was collected.
The processing may be carried out using paper and/or computerized means that are suitable for ensuring security and confidentiality, and using appropriate procedures to prevent the risk of loss, destruction, accidental damage, theft, unauthorized access or processing, unlawful use, unwanted changes, and dissemination.
The provision of data by you is optional, although failure to provide it may, in fact, make it impossible to pursue the contractual purposes.
Your data will be processed by the data controller, the appointed data processors, and strictly authorized data handlers, in any case through the adoption of technical and organizational measures suitable for ensuring compliance with privacy regulations.
In particular, your data may be disclosed to:
companies/professional firms that provide assistance, advice, or collaboration to the Data Controller in accounting, administrative, fiscal, legal, tax, and financial matters;
public administrations for the performance of institutional functions within the limits established by law or regulations;
third-party service providers to whom communication is necessary for the performance of the services covered by the contract
Your data may be disclosed following inspections or audits to supervisory bodies, judicial authorities, and all other parties to whom disclosure is required by law.
Please note that external companies with which a contractual relationship has been established and which need to receive your personal data in order to fulfill such agreements act as Data Processors. To find out who the Data Processors are, if they have been appointed, and to find out who will be appointed to this role in the future, any interested party may send a letter of request to the Data Controller at the above address. It should be noted that the above-mentioned Data Processors are not responsible for processing requests to exercise the rights of data subjects referred to in Articles 15 et seq. of the Regulation. This activity is carried out exclusively by the writer in his capacity as Data Controller.
Within the limits strictly necessary for the execution of the contractual relationship, your personal data may be disclosed to third parties, such as, for example, suppliers of products and/or services, located both within and outside the European Union. Any transfer outside the EU (and in any case to countries recognized as eligible by the EU according to the criteria of the regulation) is governed by specific provisions requiring the recipient to comply with the appropriate safeguards provided for by current legislation.
The data collected will be stored in a form that allows the identification of the data subjects for the entire duration of the relationship between you and our company, as well as for 10 years from the date of termination of the relationship itself. If, during the contractual relationship, data not related to the administrative and accounting obligations associated with it are processed, such data will be stored for the time necessary to achieve the purpose for which it was collected. The storage times for such data will be communicated to you when such data is collected with specific information notices.
a) Pursuant to Article 15 of the Regulation, you have the right to obtain confirmation as to whether or not your data is being processed and, if so, to obtain access to such data and, in particular, to the following information:
the purposes of the processing;
the categories of personal data processed;
the recipients or categories of recipients to whom the personal data have been or will be disclosed;
the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
the right to lodge a complaint with a supervisory authority;
where the data are not collected from the data subject, any available information as to their source;
the existence of automated decision-making, including profiling.
b) You have the right to withdraw your consent at any time without prejudice to the lawfulness of processing based on consent prior to withdrawal.
c) Where applicable under Articles 16, 17, 18, and 20 of the Regulation, you have the right to erasure (Article 16) and rectification of your data (Article 17), as well as the right to restrict processing (Article 18) and to receive the aforementioned personal data in a structured, commonly used and machine-readable format and to transmit it to another data controller (Article 20).
You also have the right to lodge a complaint with a supervisory authority. d) You have the right to object to the processing of personal data concerning you, including profiling, at any time, pursuant to and within the limits of Article 21 of the Regulation.
e) If you believe that the processing of your personal data is unlawful, you have the right to lodge a complaint with a supervisory authority.
The above rights may be exercised at any time by sending:
A registered letter to BIOMAR SRL Viale Belfiore 20 50144 Florence, Italy
Certified email: biomarsrl@legalmail.it
Email: info@bio-mar.it
The Data Controller does not sell or rent personal data.
There is no automated decision-making.
We reserve the right to modify this privacy policy at any time. The version published on the Website is the one currently in force.
