The BBS Division’s site is controlled and managed by BBS Division, the controller of the personal data collected, with headquarters in Via Marco Polo 11, Brescia.
PLACE OF THE DATA PROCESSING
The site is hosted by machines managed by an external company. The machines are located in Data Centers in Italy (Arezzo and Rome).
However, communications are transmitted on the server of BBS Division in order to be able to reply to users.
TYPE OF PROCESSED DATA
The transmission of the personal data acquired by the computer systems and the software procedures used for the operation of this website are inherent to the use of Internet communication protocols.
This information is not collected with the purpose of being associated with identified entities.
However, if processed and combined with other data, this data could, by its nature, allow to identify users.
This category includes IP addresses and computer domain names used by the user who gets connected to the site, as well as URI addresses (Uniform Resource Identifier) of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numeric code referring to the status of the reply given by the server (successful, error, etc.) and other parameters concerning the operation system and the computer environment of the user.
Data supplied voluntarily by the user
The optional, explicit and voluntary transmission of an electronic email to this site to request “contacts” results in the acquisition of the sender’s addresses, which is necessary in order to reply to possible requests, as well as in the acquisition of any other personal data included in the message.
PURPOSE OF THE DATA PROCESSING AND COMMUNICATION
Navigation data is only used to obtain anonymous statistical information on the use of the site and control its correct operation. Therefore it is cancelled immediately after processing.
The data may be used to ascertain possible responsibilities in the case of cybercrimes against the site. Except for the above case, the data of the web contacts shall have a duration of not longer than seven days.
The personal data supplied by those users who request information material concerning events or initiatives of BBS Division or its partners or who take part in the above or wish to make use of the services of BBS Division or send contact requests is used only to meet the requests transmitted. It shall be transmitted to third parties only if necessary for the above purpose. (Pursuant to the Regulation) the “legal foundation” for the collection and processing of this personal data is the execution of a service expressly requested by users.
BBS Division may process the users’ personal data for its own or third parties’ “legitimate purposes”, for example, for managing possible litigation, complaints, disputes, claims as well as for protecting its computer systems and complying with legal requirements and Standards in force.
The data processing in connection with the web services of this site is managed by the personnel of BBS Division “in charge” as well as by third parties “responsible” or acting as Controllers within the ambit of their activities. The partners of BBS Division may have different roles in the processing of the data made available to them according to the specific services rendered by them.
The data supplied may be communicated also to foreign entities within the limits of the purposes mentioned above as well as to other locations of BBS Division or other professional partners worldwide. In this case the person involved shall be free to express his/her preference concerning the transmission of his/her data abroad.
OPTIONAL PROVISION OF DATA
Without prejudice to what has been specified referring to the navigation data, users are free to supply their personal data when they send emails requesting information material or emails to adhere to possible initiatives of BBS Division.
If the above personal data is not provided, BBS Division may not be able to meet the requests of the users.
DATA PROCESSING METHODS AND DATA STORAGE CRITERIA
Personal data is processed using computer-based tools for the time strictly necessary to achieve the aim for which it has been collected. Personal data processed for information purposes shall be stored until unsubscription and, where applicable, in compliance with the time limits established by the law.
Specific safety measures are applied in order to prevent losses and illegal or incorrect use of the data as well as unauthorized access.
The data resulting from the web service will not be distributed.
RIGHTS OF THE PARTIES INVOLVED
Should the conditions set out by the law be met, the persons to whom the data refers shall have the right to obtain confirmation of the existence/non-existence of the data and be informed about its contents and origin. They are also entitled to demand that the data be corrected, completed and updated or its processing be limited and that data portability be allowed (articles 15-22 of the Regulation).
For legitimate reasons, users have the right to request the cancellation, transformation in anonymous form or blockage of the processed data and to object to its processing.
Requests may be sent to the above email address.