Privacy Policy

Biosolving is committed to protecting the personal data entrusted to it. Consequently, the management and security of such data are ensured with the utmost care, in accordance with data protection legislation, and in full compliance with the principles of lawfulness, fairness and transparency. In accordance with current privacy legislation (in particular EU Regulation 679/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data), this policy explains who the Data Controller is, for what purposes Biosolving may use the data provided, how it will process it, to whom it may be disclosed, where it may be transferred, and what rights the data subject has.

WHO WILL PROCESS THE DATA PROVIDED

The data provided will be processed by Biosolving, the data controller, whose registered office is at Via Gabriele D’Annunzio, 51 – 64014 Martinsicuro (TE).

PERSONAL DATA PROCESSED AND PURPOSES OF PROCESSING

The personal data collected, whether in paper or electronic form, and subject to processing, relates to:
· identification, administrative, accounting, tax and commercial data of the data subjects (such as members of corporate bodies, employees, and contractors of third parties with whom the Client has a business relationship);
· credit card details;
· usernames/passwords for accessing programmes (e.g. AdWords, Facebook, LinkedIn). Such data, which the Customer lawfully holds, is provided by the Customer in the course of establishing and carrying out pre-contractual/contractual relationships with the Data Controller. The data may be processed for the following purposes: A. sending quotations to companies/individuals who are already Clients or potential Clients; B. performing the services requested by Clients; C. monitoring payments; D. compliance with legal obligations (e.g. accounting and tax obligations); E. exercising the Data Controller’s right of defence in legal proceedings; F. sending communications – commercial information (e.g. newsletters, invitations to events, details on how to obtain a promotional item or a promotion) to customers – suppliers/potential customers – suppliers of Biosolving’s corporate customers, in the case of data acquired directly by the Company (e.g. via a landing page); G. sending communications – commercial information (e.g. newsletters, invitations to events, other commercial information) to Biosolving’s customers/potential customers. BASIS FOR PROCESSING The Company will process the data referred to in the preceding points:
· A., B. and C. as necessary for (i) the performance of pre-contractual activities aimed at developing a contractual proposal and (ii) the performance of the services requested by the Customer;
· D. as necessary to comply with a legal obligation to which the Company is subject;
· E. as it is necessary for the pursuit of the Company’s legitimate interest in protecting its rights in the event of legal disputes;
· F. and G. on the basis of the Customer’s consent; the Customer will always be given the opportunity to withdraw their consent in accordance with the procedures set out in the following paragraphs. The provision of data for the purposes:
· A., B., C. and E. is necessary for the performance of the Company’s contractual and/or pre-contractual activities;
· D is mandatory, and any refusal by the data subject will make it impossible for the Company to pursue the purposes described in the previous paragraph;
· F. and G. is optional; however, failure to provide such data will make it impossible for the Company to pursue the stated purposes. The scope and adequacy of the data provided will be assessed on a case-by-case basis in order to determine the resulting decisions and avoid the processing of data exceeding the purposes pursued. The Company undertakes not to use the personal data provided for purposes other than or in addition to those described in this policy, without first informing the data subject and, where necessary, obtaining their consent. METHODS OF PROCESSING Data processing is carried out using IT procedures or, in any case, electronic means or paper-based media, in accordance with logic strictly related to the purposes themselves and, in any case, in such a way as to guarantee the security of the data and always in compliance with current legislation on the matter, in particular EU Regulation 679/2016. The data will also be:
· processed by company staff who have received appropriate training and are bound by confidentiality obligations, in their capacity as personnel authorised to process data;
· stored in a manner that ensures their security, integrity and confidentiality, through the adoption of appropriate security measures as required by law. RETENTION PERIOD With regard to processing for the purposes:
· A., B., C., D. and E., the Company will process personal data for the time necessary to pursue these purposes and, in any event, for a period not exceeding 10 years from the termination of the last contractual relationship with the Customer. The data may be retained beyond this period in relation to any need to use it in legal proceedings in the event of a dispute, or in any other case where the Company’s legitimate interests override the interests or fundamental rights and freedoms of the data subject;
· F. and G., the data will be retained until the data subject withdraws their consent in accordance with the procedures made available by the Company for this purpose.

COMMUNICATION AND DISSEMINATION

The data collected will not be disclosed or disseminated outside the Company. The data may be disclosed, in the course of the relationship with the Customer, to
· public bodies, to comply with legal obligations or to exercise the Company’s rights (for example, the right of defence in legal proceedings);
· private entities and organisations established within Italy to which services (technical, IT and administrative/accounting support) strictly necessary for the purpose for which the data is provided by the data subject are entrusted through contractual agreements. The Company wishes to inform you that should it become necessary, due to changes in its organisation or agreements with new suppliers, to transfer data outside the European Union, such transfer will take place in accordance with the applicable legal provisions (Article 45(1) of the GDPR, Transfer on the basis of an adequacy decision, or Article 46, Transfer subject to appropriate safeguards). RIGHTS

RIGHTS OF THE DATA SUBJECT AND HOW TO EXERCISE THEM

Please be advised that EU Regulation 679/2016 (in particular, Chapter III) grants the data subject specific rights, which may be exercised by contacting the Company in writing at Via Gabriele D’Annunzio, 51 – 64014 Martinsicuro (TE) or by email at info@biosolving.it. In particular, these rights are set out in the following articles of the GDPR:
· Article 13, Information to be provided where personal data are collected from the data subject. In particular, please note the provisions of paragraph 2(d) regarding the right to lodge a complaint with the Data Protection Authority;
· 15, Right of access by the data subject;
· 16, Right to rectification;
· 17, Right to erasure (‘right to be forgotten’);
· 18, Right to restriction of processing;
· 19, Obligation to notify in the event of rectification or erasure of personal data or restriction of processing;
· 20, Right to data portability;
· 21, Right to object;
· 22, Automated decision-making concerning natural persons, including profiling. The Data Controller undertakes to handle the data subject’s request to the best of its ability in order to ensure the effective exercise of their rights.

HOW TO CONTACT THE DATA CONTROLLER

Any further information regarding the processing of personal data and this privacy policy may be requested by writing to Via Gabriele D’Annunzio, 51 – 64014 Martinsicuro (TE) or by emailing info@biosolving.it.

CHANGES AND UPDATES

This Privacy Policy may be subject to amendments and additions, including as a result of updates to the applicable legislation on the protection of individuals with regard to the processing of personal data and the free movement of such data. The most up-to-date version of the policy is available at www.biosolving.com/en/privacy-policy.