Privacy Policy

Biosolving is committed to protecting the personal data entrusted to it. Consequently, the management and security of such data are ensured with the utmost care, in accordance with data protection legislation, and in full compliance with the principles of lawfulness, fairness and transparency. In accordance with current privacy legislation (in particular EU Regulation 679/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data), this policy explains who the Data Controller is, for what purposes Biosolving may use the data provided, how it will process it, to whom it may be disclosed, where it may be transferred, and what rights the data subject has.

WHO WILL PROCESS THE DATA PROVIDED

The data provided will be processed by Biosolving, the data controller, whose registered office is at Via Gabriele D’Annunzio, 51 – 64014 Martinsicuro (TE).

PERSONAL DATA PROCESSED AND PURPOSES OF PROCESSING

The personal data collected, whether in paper or electronic form, and subject to processing, relates to:
· identification, administrative, accounting, tax and commercial data of the data subjects (such as members of corporate bodies, employees, and contractors of third parties with whom the Client has a business relationship);
· credit card details;
· user/password credentials for accessing programs (e.g. adwords, facebook, linkedin). Such data, which the Client lawfully possesses, is provided by the Client in the context of the performance and execution of pre-contractual/contractual relationships with the Data Controller. The data may be processed for the following purposes: A. sending quotations to companies/individuals who are already Clients/potential Clients; B. performance of the services requested by Clients; C. monitoring of payments received; D. compliance with legal obligations (e.g. accounting, tax obligations); E. exercise of the Data Controller’s right of defense in court; F. sending communications – commercial information (for example newsletters, invitations to events, ways to obtain a gadget or a promotion) to Clients – suppliers/potential Clients – suppliers of Client companies of Biosolving, in the case of data acquired directly by the Company (for example through landing pages); G. sending communications – commercial information (for example newsletters, invitations to events, other commercial information) to clients/potential clients of Biosolving. NATURE OF THE PROVISION The Company will process the data referred to in the previous points:
· A., B. and C. because it is necessary for (i) the performance of pre-contractual activities aimed at developing a contractual proposal and (ii) the performance of the services requested by the Client;
· D. as it is necessary to comply with a legal obligation to which the Company is subject;
· E. as it is necessary for the pursuit of the Company’s legitimate interest in protecting its rights in the event of legal disputes;
· F. and G. on the basis of the Client’s consent; the Client will always be given the opportunity to withdraw their consent in the manner provided for in the following paragraphs. The provision of data for the purposes:
· A., B., C. and E. is necessary for the performance of the Company’s contractual and/or pre-contractual activities;
· D is mandatory and any refusal by the data subject will make it impossible for the Company to pursue the purposes described in the previous paragraph;
· F. and G. is optional, however failure to provide such data will make it impossible for the Company to pursue the stated purposes. The extent and adequacy of the data provided will be assessed on a case-by-case basis in order to determine the consequent decisions and avoid the processing of data that is excessive in relation to the purposes pursued. The Company undertakes not to use the personal data provided for purposes other than and additional to those described in this policy, without first informing the data subject and, where necessary, obtaining their consent. METHODS OF PROCESSING The processing of data is carried out by means of computerized procedures or, in any case, electronic or paper-based media, with logic strictly related to the purposes themselves and, in any case, in such a way as to ensure their security and always in compliance with current legislation on the matter, in particular EU Regulation 679/2016. The data will also be:
· processed by company resources, adequately instructed and committed to confidentiality, as personnel authorized to process the data;
· stored in ways suitable to ensure their security, integrity and confidentiality, through the adoption of appropriate security measures provided for by the legislation. RETENTION PERIOD With regard to processing for the purposes:
· A., B., C., D. and E., the Company will process personal data for the time necessary to pursue such purposes and, in any case, for a period not exceeding 10 years from the termination of the last contractual relationship with the Client. The data may also be retained beyond this period in relation to any need to use it in court in the event of litigation, or in any other case in which the Company’s legitimate interests prevail over the interests or fundamental rights and freedoms of the data subject;
· F. and G., the data will be retained until the data subject withdraws their consent in the manner made available by the Company for this purpose.

COMMUNICATION AND DISSEMINATION

The data collected will not be disclosed or disseminated outside the Company. The data may be disclosed, by virtue of the performance of the relationship with the Client to
· public bodies, to comply with legal obligations or to exercise the Company’s rights (for example, the right of defense in court);
· private entities and organizations established in the territory of the Italian State to which services (technical, IT and administrative/accounting support) are entrusted, through contractual agreements, that are strictly functional to the purpose for which the data is provided by the data subject. The Company wishes to inform you that should it become necessary, due to the evolution of its organization or agreements with new suppliers, to transfer data outside the European Union, such transfer will take place in accordance with applicable legal provisions (art. 45, paragraph 1 GDPR, Transfer based on an adequacy decision, or art. 46, Transfer subject to appropriate safeguards). RIGHTS

RIGHTS OF THE DATA SUBJECT AND HOW TO EXERCISE THEM

Please be informed that EU Regulation 679/2016 (in particular, Chapter III) grants the data subject specific rights, for the exercise of which they may contact the Company, by writing to Via Gabriele D’Annunzio, 51 – 64014 Martinsicuro (TE) or by email to info@biosolving.com. In particular, such rights are provided for by the GDPR in the articles:
· 13, Information to be provided where personal data are collected from the data subject. In particular, attention is drawn to paragraph 2, point d) relating to the right to lodge a complaint with the Data Protection Authority;
· 15, Right of access by the data subject;
· 16, Right to rectification;
· 17, Right to erasure (‘right to be forgotten’);
· 18, Right to restriction of processing;
· 19, Notification obligation regarding rectification or erasure of personal data or restriction of processing;
· 20, Right to data portability;
· 21, Right to object;
· 22, Automated individual decision-making, including profiling. The Data Controller undertakes to manage the data subject’s request in the best possible way in order to ensure the effective exercise of their rights.

HOW TO CONTACT THE DATA CONTROLLER

Any further information regarding the processing and this policy may be requested by writing to Via Gabriele D’Annunzio, 51 – 64014 Martinsicuro (TE) or by email to info@biosolving.com.

CHANGES AND UPDATES

This Privacy Policy may be subject to changes and additions, also as a result of updates to the applicable legislation on the protection of natural persons with regard to the processing of personal data and on the free movement of such data. The most up-to-date version of the policy can be consulted at www.biosolving.com/privacy.