Pursuant to Art. 13 of the GDPR (EU regulation 2016/679), the following information is provided, in accordance with the principle of transparency, in order to make the user aware of the characteristics and methods of data processing:
BinHexS Srl, in the person of the pro tempore Director, with registered office in 20020 Busto Garolfo (MILAN), Via Maroncelli No. 73 and operational and administrative headquarters in 20017 Mazzo di Rho (MILAN), Via Alcide de Gasperi No. 111, operates as the Data Controller and guarantees the utmost confidentiality in the processing of your personal data, its accuracy and updating as established by current legislation on the protection of personal data. We care about the security of your data and to prevent loss, illicit or unauthorised use or access; we use and follow specific security measures.
BinHexS Srl does not require the data subject to provide so-called “special” data, or, according to the provisions of the GDPR (Article 9), personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data intended to uniquely identify a natural person, data relating to the health or sexual life or sexual orientation of the person. In the event that the service requested from BinHexS SRL should require the processing of such data, it will receive specific information in advance and the user will be required to give appropriate consent.
The data is used by BinHexS SRL to follow up the request for registration and the supply contract for the chosen service and/or the product purchased, to manage and execute the contact requests sent by the customer, provide assistance, fulfill legal obligations and regulations which the Data Controller is required to do according to the activity carried out. BinHexS SRL will never use your personal data for undeclared purposes. In particular, your data will be processed for the following purposes:
The processing of your personal data takes place to carry out the preliminary activities and consequent to the request for registration, the management of requests for information and contact and/or the sending of information material, as well as for the fulfillment of any other arising obligations.
The legal basis of these treatments is the fulfillment of the services related to the request for registration, information and contact and/or sending information material in the interest of the data subject and compliance with legal obligations.
The processing takes place to carry out the preliminary activities and consequent to the purchase of one of our services, the management of the order, the provision of the service itself, the relative invoicing and payment management as well as the fulfillment of any other obligation deriving from the contract, to fulfill the obligations established by law, by a regulation, by community legislation or by an order of the authority (for example in the field of anti-money laundering), or to exercise the rights of the Data Controller (for example the right to defense in court);
The legal basis of this processing is the fulfillment of the services relating to the contractual relationship and compliance with legal obligations.
BinHexS SRL, even without explicit consent, may use the contact details provided by the data subject/customer, for the direct marketing of its services, unless the data subject/customer explicitly objects.
The legal basis is the legitimate interest of the Data Controller.
If BinHexS SRL intends to further process your personal data for a purpose other than that for which it was collected, before such further processing, we will provide you with information regarding this different purpose and any further relevant information.
The collection and processing of personal data under a) and b) referred to in the previous point is necessary to carry out the requested services. If you do not wish to provide the personal data expressly deemed necessary, BinHexS SRL will not be able to carry out processing related to the management of the requested services and/or the contract, nor the obligations deriving from these
The provision of personal data for the purposes under c) referred to in the previous point is optional and at any time you can exercise your right to cancel your data, without prejudice to the regular performance of the contractually agreed services.
We inform you that the processing of your personal data takes place in compliance with the principles of lawfulness, correctness and transparency. We guarantee that the data processed will be adequate, relevant and not excessive with respect to what is necessary for the purposes of the processing (principle of data minimisation).
The data is processed in electronic and paper format, through suitable tools to guarantee the security and confidentiality of the data, in compliance with the provisions of Chapter II (Principles) and Chapter IV (Data Controller and Data Processor) of the Regulation.
The processing may also be carried out through automated tools designed to store, manage or transmit the data and, in any case, will be carried out in compliance with the provisions of the Regulation.
The processing of your personal data is carried out by means of the operations indicated in Art. 4, No. 2 of the Regulation, i.e. collection, registration, organisation, structuring, storage, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, limitation, erasure or destruction.
BinHexS SRL uses adequate security measures in order to preserve the confidentiality, integrity and availability of your personal data and imposes similar security measures on third party suppliers and data processors. Personal data is stored in paper, computer and telematic archives located in countries where the GDPR is applied (EU countries).
Unless you explicitly express your desire to delete it, in relation to the different purposes for which it was collected, your personal data will be kept for the time required by the applicable legislation, and in any case for no longer than the period of time necessary to achieve the purposes indicated above, and specifically relating to the execution of the contract for a period of ten years (term beyond which the rights arising from the contract will be prescribed).
In the case of data provided for marketing/commercial promotion purposes, unless the consent given is revoked and/or until you ask to unsubscribe from the promotional communication/newsletter sending service, except for the actual transformation into anonymous form that does not allow, even indirectly or by connecting other databases, to identify the data subjects. At the end of this period, the data will be fully or partially deleted automatically (pursuant to applicable law), or made anonymous in order not to allow, even indirectly or by connecting other databases, the identification of the data subjects. In any case, if you decide to withdraw your consent or oppose the processing, your data will be deleted within 30 days of the request.
In the event that the user should forward unsolicited or unnecessary personal data to BinHexS SRL for the performance of the requested service, BinHexS SRL cannot be considered the controller of this data, and will delete it as soon as possible.
You have the right at any time pursuant to the GDPR to obtain confirmation of the existence or not of personal data concerning you and to know its content and origin, verify its accuracy or request its integration or updating, or rectification.
To this end, you are invited to submit your request in writing, including date and signature, by sending it by e-mail, to email@example.com or by registered letter, to the following address: BinHexS Srl, 20017 Mazzo di Rho (MILAN), Via Alcide de Gasperi No. 111.
We inform you that we will respond to your requests within a month, except in particularly complex cases, for which it could take up to 3 months. In any case, we will explain the reason for the wait within one month of your request.
The outcome will be provided in writing or electronically. If you request the rectification, erasure and limitation of processing, we agree to communicate the results of your requests to each of the recipients of your data, unless this proves impossible or involves a disproportionate effort.
We remind you that the withdrawal of consent does not affect the lawfulness of the processing based on consent before the withdrawal.
In relation to the processing of the aforementioned data, you have the right to obtain:
Personal data will not be disclosed and may be known, within the necessary limits and for the purposes indicated, by employees and collaborators of BinHexS SRL, authorised pursuant to Art. 29 of the Regulation, as well as may be communicated to third parties, appointed as External Data Processors for the processing of personal data pursuant to Article 28 of the GDPR, with an appointment contract, which contains the processing methods and security measures that they must adopt for the management and storage of personal data of which the company is the Data Controller such as:
The data could also be transmitted to the Public Security Authority following a request and to the Judicial Authority in case of need.
The complete list of subjects to whom your personal data has been or may be communicated is available upon request to be made by e-mail to the address firstname.lastname@example.org. The data will not be transferred to a third country or an international organisation. If BinHexS SRL were to transfer data to servers outside the European Union, we ensure that this transfer will take place, subject to the stipulation of the contracts provided by the European Commission in accordance with the applicable legal provisions.
We will disclose personal data only in the case of a legal or contractual obligation or as a necessary requirement for the conclusion of a contract.
We do not use automated processes aimed at profiling.
The Data Controller is BinHexS SRL, in the person of the pro tempore legal representative.
The updated list of data processors is kept at the headquarters of the Data Controller.
Personal data provided via specially prepared paper or digital forms include the following:
The Data Controller collects data exclusively to offer the potential customer marketing information regarding the products and services provided by the company. BinHexS SRL will send free periodic communications to the potential customer for this purpose. The user can revoke their consent at any time via the unsubscribe link at the bottom of the body of the marketing emails or by sending an email to email@example.com by entering in the subject “newsletter cancellation”.
Personal data is mainly processed using automated and electronic tools, for the time strictly necessary to achieve the purposes for which it was collected, by persons specifically appointed for this in compliance with the provisions of EU Regulation 679/2016.
Specific security measures are observed to prevent data loss, illicit or incorrect use of the same and unauthorised access, in order to only allow access to persons in charge or responsible persons appointed in accordance with the provisions of the law in force. The list of processors appointed pursuant to Art. 28 of EU Regulation 679/2016 is available at the headquarters of the Data Controller.
The personal data acquired, including through paper forms, will be stored on electronic media, kept and archived on servers owned by BinHexS SRL and located at the latter’s headquarters, managed in a protected environment with controlled access.
Without prejudice to the communications made in compliance with legal obligations, all personal data collected and processed may be communicated for the purposes described above to the following:
The updated list of all data processors can be requested from the Data Controller identified below, by sending an e-mail to the email address firstname.lastname@example.org.
Duration of storage of personal data
The data provided is kept until the users/customers decide to cancel their registration. In the event of cancellation, the users’ data will be kept for administrative purposes for a period not exceeding one semester, without prejudice to any specific legal obligations on the conservation of accounting documentation.
The data controller of the data collected when accessing the offices of BinHexS SRL is the same BinHexS SRL with headquarters in 20017 Mazzo di Rho (MILAN), Via Alcide de Gasperi No. 111, e-mail email@example.com.The processing connected to access to the BinHexS SRL headquarters takes place at the aforementioned headquarters of the Data Controller and is handled by the staff of the offices in charge of processing.
The personal data collected is the following:
Name and Surname
Name of the company it belongs to
The Data Controller collects data exclusively to ensure the safety of its staff and visitors themselves. The collected data is used in order to be able to trace visitors in case of need.
The collected data is deleted after 7 days.
The Data Controller is BinHexS SRL with registered office with operational headquarters in 20017 Mazzo di Rho (MILAN), via Alcide de Gasperi No. 111, tel. 02.99762701, e-mail firstname.lastname@example.org. Processing connected to the sending of commercial offers, the management of orders and the signing of supply contracts take place at the aforementioned headquarters of the Data Controller and is handled by the staff of the offices in charge of the processing.
The personal data, the provision of which is necessary for the useful performance of the commercial and contractual relationship with the Data Subject, are as follows:
The data is collected for the following purposes strictly related to the establishment and continuation of the commercial and/or contractual relationship:
The aforementioned data is processed in order to correctly manage offers or supply orders and related activities in accordance with current legislation.
The personal data provided will be kept for the entire duration of the contractual relationship and at the end of the same, such data will be kept for administrative purposes for a period not exceeding a semester, without prejudice to any specific legal obligations on the conservation of accounting documentation.
We inform you pursuant to Art. 111 bis of the Privacy Code, that the information referred to in Article 13 of the Regulation, in the case of receipt of the curricula spontaneously transmitted by the data subjects for the purpose of establishing an employment relationship, will be provided at the time of the first useful contact, after sending of the curriculum itself. Within the limits of the purposes referred to in Article 6, paragraph 1, letter b), of the Regulation, consent to the processing of personal data present in the curricula is not required as the processing is necessary for the execution of a contract to which the data subject is party, or to the execution of pre-contractual measures adopted at the request of the same;