Pursuant to Art. 13 of the GDPR (EU regulation 2016/679), the following information is provided, in accordance with the principle of transparency, in order to make the user aware of the characteristics and methods of data processing:
Who we are and what data we process
BinHexS Srl, in the person of the pro tempore Director, with registered office in 20020 Busto Garolfo (MILAN), Via Maroncelli No. 73 and operational and administrative headquarters in 20017 Mazzo di Rho (MILAN), Via Alcide de Gasperi No. 111, operates as the Data Controller and guarantees the utmost confidentiality in the processing of your personal data, its accuracy and updating as established by current legislation on the protection of personal data. We care about the security of your data and to prevent loss, illicit or unauthorised use or access; we use and follow specific security measures.
Subjects of the processing
The Data Controller processes personal data (for example name, surname, physical address, province and municipality of residence, landline and/or mobile telephone number, fax, tax code, VAT number, company name, personal email, bank and payment references, eg. IBAN), hereinafter “data”, communicated by you when concluding contracts for the controller’s services and/or for marketing purposes. The Data Controller may also save cookies, as described in more detail in the Cookie Policy which can be found on the website www.binhexs.it.
BinHexS Srl does not require the data subject to provide so-called “special” data, or, according to the provisions of the GDPR (Article 9), personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data intended to uniquely identify a natural person, data relating to the health or sexual life or sexual orientation of the person. In the event that the service requested from BinHexS SRL should require the processing of such data, it will receive specific information in advance and the user will be required to give appropriate consent.
Purpose of the processing and legal basis
The data is used by BinHexS SRL to follow up the request for registration and the supply contract for the chosen service and/or the product purchased, to manage and execute the contact requests sent by the customer, provide assistance, fulfill legal obligations and regulations which the Data Controller is required to do according to the activity carried out. BinHexS SRL will never use your personal data for undeclared purposes. In particular, your data will be processed for the following purposes:
a. For registration and requests for contact and/or information material
The processing of your personal data takes place to carry out the preliminary activities and consequent to the request for registration, the management of requests for information and contact and/or the sending of information material, as well as for the fulfillment of any other arising obligations.
The legal basis of these treatments is the fulfillment of the services related to the request for registration, information and contact and/or sending information material in the interest of the data subject and compliance with legal obligations.
b. For the management of the contractual relationship
The processing takes place to carry out the preliminary activities and consequent to the purchase of one of our services, the management of the order, the provision of the service itself, the relative invoicing and payment management as well as the fulfillment of any other obligation deriving from the contract, to fulfill the obligations established by law, by a regulation, by community legislation or by an order of the authority (for example in the field of anti-money laundering), or to exercise the rights of the Data Controller (for example the right to defense in court);
The legal basis of this processing is the fulfillment of the services relating to the contractual relationship and compliance with legal obligations.
c. For direct marketing communications activities
BinHexS SRL, even without explicit consent, may use the contact details provided by the data subject/customer, for the direct marketing of its services, unless the data subject/customer explicitly objects.
The legal basis is the legitimate interest of the Data Controller.
If BinHexS SRL intends to further process your personal data for a purpose other than that for which it was collected, before such further processing, we will provide you with information regarding this different purpose and any further relevant information.
Refusal to provide the data necessary for the performance of the requested service
The collection and processing of personal data under a) and b) referred to in the previous point is necessary to carry out the requested services. If you do not wish to provide the personal data expressly deemed necessary, BinHexS SRL will not be able to carry out processing related to the management of the requested services and/or the contract, nor the obligations deriving from these
Refusal to provide the data necessary for promotional activities on services similar to those purchased by the data subject/customer
The provision of personal data for the purposes under c) referred to in the previous point is optional and at any time you can exercise your right to cancel your data, without prejudice to the regular performance of the contractually agreed services.
Methods of data processing
We inform you that the processing of your personal data takes place in compliance with the principles of lawfulness, correctness and transparency. We guarantee that the data processed will be adequate, relevant and not excessive with respect to what is necessary for the purposes of the processing (principle of data minimisation).
The data is processed in electronic and paper format, through suitable tools to guarantee the security and confidentiality of the data, in compliance with the provisions of Chapter II (Principles) and Chapter IV (Data Controller and Data Processor) of the Regulation.
The processing may also be carried out through automated tools designed to store, manage or transmit the data and, in any case, will be carried out in compliance with the provisions of the Regulation.
The processing of your personal data is carried out by means of the operations indicated in Art. 4, No. 2 of the Regulation, i.e. collection, registration, organisation, structuring, storage, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, limitation, erasure or destruction.
BinHexS SRL uses adequate security measures in order to preserve the confidentiality, integrity and availability of your personal data and imposes similar security measures on third party suppliers and data processors. Personal data is stored in paper, computer and telematic archives located in countries where the GDPR is applied (EU countries).
Data retention period
Unless you explicitly express your desire to delete it, in relation to the different purposes for which it was collected, your personal data will be kept for the time required by the applicable legislation, and in any case for no longer than the period of time necessary to achieve the purposes indicated above, and specifically relating to the execution of the contract for a period of ten years (term beyond which the rights arising from the contract will be prescribed).
In the case of data provided for marketing/commercial promotion purposes, unless the consent given is revoked and/or until you ask to unsubscribe from the promotional communication/newsletter sending service, except for the actual transformation into anonymous form that does not allow, even indirectly or by connecting other databases, to identify the data subjects. At the end of this period, the data will be fully or partially deleted automatically (pursuant to applicable law), or made anonymous in order not to allow, even indirectly or by connecting other databases, the identification of the data subjects. In any case, if you decide to withdraw your consent or oppose the processing, your data will be deleted within 30 days of the request.
In the event that the user should forward unsolicited or unnecessary personal data to BinHexS SRL for the performance of the requested service, BinHexS SRL cannot be considered the controller of this data, and will delete it as soon as possible.
Rights of the data subject
You have the right at any time pursuant to the GDPR to obtain confirmation of the existence or not of personal data concerning you and to know its content and origin, verify its accuracy or request its integration or updating, or rectification.
To this end, you are invited to submit your request in writing, including date and signature, by sending it by e-mail, to privacy@binhexs.it or by registered letter, to the following address: BinHexS Srl, 20017 Mazzo di Rho (MILAN), Via Alcide de Gasperi No. 111.
We inform you that we will respond to your requests within a month, except in particularly complex cases, for which it could take up to 3 months. In any case, we will explain the reason for the wait within one month of your request.
The outcome will be provided in writing or electronically. If you request the rectification, erasure and limitation of processing, we agree to communicate the results of your requests to each of the recipients of your data, unless this proves impossible or involves a disproportionate effort.
We remind you that the withdrawal of consent does not affect the lawfulness of the processing based on consent before the withdrawal.
In relation to the processing of the aforementioned data, you have the right to obtain:
- confirmation of the existence or otherwise of your personal data, its communication in an intelligible form and knowledge of its origin, as well as the logic on which the processing is based;
- the erasure, within a reasonable period, of your data, its transformation into anonymous form or the blocking of data processed in violation of the law;
- the updating of data, its correction or, when required, its integration;
- certification that the operations referred to in points 2) and 3) above have been brought to the attention of those to whom they have been communicated, provided that it is not impossible or involves a disproportionate use of means.
- You also have the right to obtain the rectification or erasure of data concerning you or the limitation of processing.
- You have the right to withdraw consent relating to optional treatments not related to the execution of the contract signed with the Data Controller.
- You have the right to object for legitimate reasons to the processing of your personal data, even if pertinent to the purpose of the collection, to request its portability, to exercise the right to be forgotten, as well as to contact both the ordinary judicial authority and the control authority. You can then contact the Data Protection Authority by e-mail, at the address protocollo@pec.gpdp.it or by registered letter with return receipt, or by hand delivery to the Data Protection Authority, which is based in Rome (Italy), Piazza Venezia No. 11 – 00187 Rome. For further information, visit the institutional website of the Privacy Data Protection Authority www.garanteprivacy.it.
Recipients and/or any categories of recipients of the data
Personal data will not be disclosed and may be known, within the necessary limits and for the purposes indicated, by employees and collaborators of BinHexS SRL, authorised pursuant to Art. 29 of the Regulation, as well as may be communicated to third parties, appointed as External Data Processors for the processing of personal data pursuant to Article 28 of the GDPR, with an appointment contract, which contains the processing methods and security measures that they must adopt for the management and storage of personal data of which the company is the Data Controller such as:
- External bodies, including private ones, assigned to inspections of various kinds;
- Previously appointed external consultants;
- Suppliers of the company who process data on behalf of BinHexS Srl and to consultants who provide the same services.
The data could also be transmitted to the Public Security Authority following a request and to the Judicial Authority in case of need.
The complete list of subjects to whom your personal data has been or may be communicated is available upon request to be made by e-mail to the address privacy@binhexs.it. The data will not be transferred to a third country or an international organisation. If BinHexS SRL were to transfer data to servers outside the European Union, we ensure that this transfer will take place, subject to the stipulation of the contracts provided by the European Commission in accordance with the applicable legal provisions.
Data communication
We will disclose personal data only in the case of a legal or contractual obligation or as a necessary requirement for the conclusion of a contract.
Profiling
We do not use automated processes aimed at profiling.
Data Controller and Processor
The Data Controller is BinHexS SRL, in the person of the pro tempore legal representative.
The updated list of data processors is kept at the headquarters of the Data Controller.
Date collected at trade fairs, events, etc.
Types of data processed
Personal data provided via specially prepared paper or digital forms include the following:
- Name and Surname
- Address
- E-mail address
Purpose of the processing
The Data Controller collects data exclusively to offer the potential customer marketing information regarding the products and services provided by the company. BinHexS SRL will send free periodic communications to the potential customer for this purpose. The user can revoke their consent at any time via the unsubscribe link at the bottom of the body of the marketing emails or by sending an email to info@binhexs.it by entering in the subject “newsletter cancellation”.
Method of processing
Personal data is mainly processed using automated and electronic tools, for the time strictly necessary to achieve the purposes for which it was collected, by persons specifically appointed for this in compliance with the provisions of EU Regulation 679/2016.
Specific security measures are observed to prevent data loss, illicit or incorrect use of the same and unauthorised access, in order to only allow access to persons in charge or responsible persons appointed in accordance with the provisions of the law in force. The list of processors appointed pursuant to Art. 28 of EU Regulation 679/2016 is available at the headquarters of the Data Controller.
The personal data acquired, including through paper forms, will be stored on electronic media, kept and archived on servers owned by BinHexS SRL and located at the latter’s headquarters, managed in a protected environment with controlled access.
Communication and diffusion of data
Without prejudice to the communications made in compliance with legal obligations, all personal data collected and processed may be communicated for the purposes described above to the following:
- subjects appointed by BinHexS Srl for the execution of activities directly connected or instrumental to the supply and distribution of products and services;
- subjects belonging to the BinHexS SRL sales, distribution, assistance and logistics network;
- subjects who may become aware of them, as “processors” or “authorised” of BinHexS SRL, such as the personnel belonging to the administrative, commercial, production, technical and IT offices.
The updated list of all data processors can be requested from the Data Controller identified below, by sending an e-mail to the email address info@binhexs.it.
Duration of storage of personal data
The data provided is kept until the users/customers decide to cancel their registration. In the event of cancellation, the users’ data will be kept for administrative purposes for a period not exceeding one semester, without prejudice to any specific legal obligations on the conservation of accounting documentation.
Data collected on the occasion of accessing the BinHexS SRL offices
The data controller and the place of processing
The data controller of the data collected when accessing the offices of BinHexS SRL is the same BinHexS SRL with headquarters in 20017 Mazzo di Rho (MILAN), Via Alcide de Gasperi No. 111, e-mail amministrazione@binhexs.it.The processing connected to access to the BinHexS SRL headquarters takes place at the aforementioned headquarters of the Data Controller and is handled by the staff of the offices in charge of processing.
Types of data processed
The personal data collected is the following:
Name and Surname
Name of the company it belongs to
Purpose of the processing
The Data Controller collects data exclusively to ensure the safety of its staff and visitors themselves. The collected data is used in order to be able to trace visitors in case of need.
Duration of storage of personal data
The collected data is deleted after 7 days.
Data collected on the occasion of the sending of commercial offers, signing of contracts, order management and supply contracts
The data controller and the place of processing
The Data Controller is BinHexS SRL with registered office with operational headquarters in 20017 Mazzo di Rho (MILAN), via Alcide de Gasperi No. 111, tel. 02.99762701, e-mail amministrazione@binhexs.it. Processing connected to the sending of commercial offers, the management of orders and the signing of supply contracts take place at the aforementioned headquarters of the Data Controller and is handled by the staff of the offices in charge of the processing.
Types of data processed
The personal data, the provision of which is necessary for the useful performance of the commercial and contractual relationship with the Data Subject, are as follows:
- Name and Surname
- E-mail address
- Name and details of the company it belongs to (company name, address, VAT number and Tax Code)
- Account number (IBAN)
- Phone contacts
Purpose of the processing
The data is collected for the following purposes strictly related to the establishment and continuation of the commercial and/or contractual relationship:
- drafting of offers
- fulfillment of tax or accounting obligations and contractual obligations
- customer management, administration of contracts, orders, shipments and invoices
- management of contractual breaches, warnings, transactions, credit recovery, arbitration and judicial disputes
- claims management
- checks on the reliability and solvency of customers
- keeping records of certified companies, certified products, certified personnel
- detection of the degree of customer satisfaction
The aforementioned data is processed in order to correctly manage offers or supply orders and related activities in accordance with current legislation.
Duration of storage of personal data
The personal data provided will be kept for the entire duration of the contractual relationship and at the end of the same, such data will be kept for administrative purposes for a period not exceeding a semester, without prejudice to any specific legal obligations on the conservation of accounting documentation.
Curriculum
We inform you pursuant to Art. 111 bis of the Privacy Code, that the information referred to in Article 13 of the Regulation, in the case of receipt of the curricula spontaneously transmitted by the data subjects for the purpose of establishing an employment relationship, will be provided at the time of the first useful contact, after sending of the curriculum itself. Within the limits of the purposes referred to in Article 6, paragraph 1, letter b), of the Regulation, consent to the processing of personal data present in the curricula is not required as the processing is necessary for the execution of a contract to which the data subject is party, or to the execution of pre-contractual measures adopted at the request of the same;