Privacy policy
BLM GROUP
Privacy policy
INFORMATION REGARDING THE PROCESSING OF PERSONAL DATA BLMportal
Pursuant to the articles. 12-13 et seq. of EU Regulation 2016/679 ("GDPR" or "Regulation"), and in general in compliance with the principle of transparency provided for by the Regulation itself, we are providing you with the following information regarding the processing of personal data (i.e. any information concerning a identified or identifiable natural person: “Interested Party”) made on the BLMportal.1. DATA CONTROLLER
The Data Controller (i.e. the subject who determines the purposes and means of the processing of personal data, “Data Controller” or “Data Controller” pursuant to art. 4 and 24 GDPR) is BLM GROUP (Adige SpA, with registered office in Levico Terme ( TN), via per Barco 11, VAT no. 01429670225 – Adige-Sys SpA, with headquarters in Levico Terme (TN), viale Venezia 84/B, VAT no. 01713040226 - BLM SpA, with headquarters in Cantù ( CO), via Selvaregina 30, VAT no. 01653120137). For contacts specifically relating to the protection of personal data, including the exercise of the rights referred to in point 7 below, please indicate in particular the e-mail address: privacy@blmgroup.it to which you are kindly requested to address any requests.2. TYPE OF DATA TREATABLE
The following data will be processed:a) personal data such as name and surname, contact data (e-mail address and telephone number), IP address, MAC address and professional qualification.
3. PURPOSE OF THE PROCESSING, LEGAL BASIS OF THE PROCESSING, NATURE OF THE PROVISION AND STORAGE PERIOD
The personal data collected will be processed, in compliance with current legislation, for the following purposes:Purpose of the processing |
Legal basis |
Nature of the contribution |
Retention period |
a) Navigation on this website - BLMportal |
Article 6, par. 1, letter. f) GDPR - Legitimate interest of the Data Controller. Activities strictly necessary for the functioning of the site and the provision of the navigation service on the Portal |
The provision of personal data is necessary for the purposes of browsing this website, respecting the user's fundamental rights and freedoms |
Until the duration of the browsing session |
b) Registration on the BLMportal by creating a user account |
Article 6, par. 1, letter. b) GDPR - The processing is necessary for the execution of pre-contractual measures adopted at the request of the same |
The provision of personal data is necessary for the purposes of registration and execution of pre-contractual measures (account creation) |
For the entire duration of account activation and for the following 2 years |
c) Any contact request or request for information via dedicated form |
Article 6, par. 1, letter. f) GDPR - Legitimate interest of the Data Controller. Request forwarded by the interested party |
The provision of personal data is necessary for the purpose of sending the request for contact and/or information, respecting the user's fundamental rights and freedoms |
1 years |
d) Manage administrative activities related to purchases made on the E-Commerce of the BLMportal (e.g. carrying out organizational and administrative activities functional to the fulfillment of contractual and pre-contractual obligations, information activities and management of shipments) |
Article 6, par. 1, letter. b) GDPR - the processing is necessary for the execution of a contract to which the interested party is a party |
The provision of personal data is necessary for the execution of the contract between the parties |
10 years |
4. BEHANDLUNGSMETHODEN UND BEHANDLUNGSDAUER
The processing of personal data will be carried out by subjects authorized by the Data Controller through the use of manual, electronic and automated tools and systems (Customer Portal) and with the use of adequate measures aimed at guaranteeing the security and confidentiality of the data and avoiding the access to them by unauthorized third parties. There are no fully automated decision-making processes.5. RECIPIENTS OR CATEGORIES OF RECIPIENTS OF THE DATA
The personal data will be collected and processed by authorized personnel of the Data Controller (ex Art. 29 GDPR) on the basis of specific instructions provided regarding the purposes and methods of the processing as well as may be processed by recipients who will act as data controllers (ex Art. 28 GDPR) or as independent data controllers.More precisely, they may be processed by: - group companies; - companies that provide services for the management and maintenance of the Customer Portal; - companies that provide services for the management of telecommunications networks and/or for the management of the BLM GROUP information system (including email and SW platforms); - consulting company; - Competent authorities for the fulfillment of legal obligations and/or provisions of public bodies, upon request. This list is provided as an example.
Personal data is not subject to disclosure.
6. PLACE OF DATA PROCESSING
The activity is carried out within the European Union. Should the personal data also be transferred to non-EEA countries, the transfer will take place pursuant to Article 44 et seq. of the GDPR, or towards third countries, international organizations for which the Commission has intervened with an adequacy assessment (art. 45 GDPR); - towards subjects who have provided adequate guarantees, with standard contractual clauses (SCC) of the Commission (art. 46 GDPR).7. RIGHTS OF THE INTERESTED PARTY
The GDPR attributes to the interested party the exercise of the following rights with reference to the personal data concerning him, by writing to the Data Controller at the e-mail address indicated above. In particular, you may ask the Data Controller, at any time, for access to your personal data, rectification, cancellation, limitation as well as request the portability of the data and in this case they will be provided to you in a structured format, of common use and readable, by automatic device or you may object at any time to the processing of data based on legitimate interest as well as revoke the consent given without prejudice to the lawfulness of the processing. You may also lodge a complaint with the Guarantor for the Protection of Personal Data if you believe that the processing concerning you violates the provisions of the Regulation; The Guarantor for the protection of personal data can be contacted via the contact details indicated on the Authority's website, www.garanteprivacy.it.In any case, we would like to have the opportunity to address in advance any concerns of the interested parties, who can contact the e-mail address privacy@blmgroup.it or the other contact details of the Data Controller indicated above for any clarification relating to the processing of personal data that concern them and for the exercise of the related rights, including the revocation of consent.
Update date: 10.18.2023