Privacy notice under article 13 of EU Regulation 2016/679
Foreword
This section describes the site management methods adopted by BIOPSYBELL S.R.L. in relation to the processing of personal data of users who access and consult it. Pursuant to article 13 of EU Regulation 679/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, BIOPSYBELL S.R.L. intends to inform those who interact with the services offered by this site, accessible electronically by typing in the address: www.biopsybell.it
The Data Controller
In order to provide its web services, BIOPSYBELL S.R.L. may process data relating to identified or identifiable natural persons or legal entities. The Data Controller is BIOPSYBELL S.R.L. with registered office in Mirandola (MO) Italy, via Aldo Manuzio 24.
Place of data processing and communication and dissemination
The following site is “hosted” in Italy at the headquarters of Genesys Informatica Srl with headquarters in 50145, Florence (FI), Via de’ Cattani 224/18, VAT (IT) 02002750483 while technical assistance is handled by the company Team99 s.r.l.s., appointed external manager for consulting and technical assistance to the website.
The data controller may communicate the data on the site to public authorities or bodies when required by law or when it is necessary to protect its rights.
No data from the web service is disseminated.
Types of processed data
Browsing data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. Such information is not collected to be associated with identified parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of computers used by users who connect to the site, URI (Uniform Resource Identifier) of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained as response, the numerical code indicating the status of the response from the server (successful, error, etc..) and other parameters relating to the operating system and computer environment of the user. These data are used only to obtain anonymous statistical information on the use of the site and to check its proper functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site.
Data provided voluntarily by the user
The user has the opportunity to interact with the site by providing its data in the pages “Contacts” and “Newsletter“.
Users are invited not to send in their communications sensitive data such as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, data relating to health and sex life as well as genetic and biometric data and identification data of third parties (in this case better to use fictitious names).
Cookies
All information relating to cookies is available in our cookie policy (link).
Purpose of processing
The processing we intend to carry out, with your specific consent where necessary, has the following purposes:
a) to allow browsing and consulting the website;
b) to answer requests for assistance or information, which we receive by email through the “Contacts” page of our Site.
c) to send newsletters with commercial and advertising communications on Biopsybell initiatives and products;
d) to fulfil legal, accounting and tax obligations;
e) to process statistics of a non-identifying nature.
Legal basis and mandatory or optional nature of processing
The legal basis for the processing of Personal Data for the purposes referred to in para. a-b is provided by article 6 paragraph 1 letter b) of the Regulation (processing necessary for the execution of a contract to which the data subject is a party or for the execution of pre-contractual measures) because the processing is necessary for the provision of the services requested by him or her or to satisfy a legitimate interest of the data controller to answer requests from the user (article 6 paragraph 1 letter f of the GDPR). The provision of Personal Data for these purposes is mandatory in order to satisfy requests and any failure to provide them would make it impossible to activate the requested Services.
The processing of user data for sending the newsletter (letter c) has its legal basis in the request for consent of the user to send marketing communications. The provision of data is optional and the only consequence of failure to provide them will be that Biopsybell will be unable to send the newsletter.
Finally, the purpose of par. d) is based on the need to comply with a legal obligation (article 6 para. 1 letter c).
Data retention
Pursuant to article 5 of EU Regulation 679/2016, “Principles applicable to the processing of personal data”, personal data shall be kept in a form which permits identification of data subjects for a period of time not exceeding the attainment of the purposes for which the data are processed.
The personal data of the data subjects may also be kept for longer periods in compliance with the requirements of the laws in force (by way of example in the field of accounting) and, in any case, applying all technical and organisational measures to activate mechanisms – where possible – of anonymization of data.
Data transfer outside the EU
No data will be transferred to non-EU countries.
Rights of data subjects
The data subject is entitled to ask the data controller to access his or her data, to rectify them, to erase them, to limit their processing or to object to the processing of his or her data and, in addition, has the right to data portability, under the conditions set out in articles 15, 16, 17, 18, 20, 21 of EU Regulation 679/2016.
Furthermore, the data subject has the right to revoke his or her consent at any time without prejudice to the lawfulness of the processing based on the consent given prior to revocation.
Finally, the data subject is entitled to lodge a complaint with a Supervisory Authority if he or she considers that his or her data are being processed in such a way as to breach the European Regulation.
Any communication may be sent to the Data Controller by email at: privacy@biopsybell.it