Customer Privacy Policy

 

INFORMATION ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ARTICLES 13-14 OF EU REGULATION 2016/679

Interested parties: contact persons at client companies.

BLB srl, as Data Controller of your personal data, pursuant to and for the purposes of EU Regulation 2016/679 (hereinafter “GDPR”), hereby informs you that the aforementioned regulation provides for the protection of data subjects with respect to the processing of personal data and that such processing will be based on the principles of fairness, lawfulness, transparency, and the protection of your privacy and rights.

Your personal data will be processed in accordance with the legislative provisions of the aforementioned regulation and the confidentiality obligations set forth therein.

Purpose and legal basis of the processing: In particular, your data will be used for the following purposes related to the execution of measures related to contractual or pre-contractual obligations:

• legal obligations in the tax and accounting fields;
• accounting or treasury management;
• litigation management;
• obligations under applicable laws.

Your data will also be used for the following purposes related to the implementation of measures related to contractual or pre-contractual obligations:

• Access to the portal to use/register BLB products;
• after-sales assistance;
• management of relationships during sales operations;
• customer management;
• quality management;
• activity planning.

Your data will also be used for the following purposes necessary to pursue the legitimate interests of the data controller:

• Retention of the recording is limited to a few hours or, at most, to twenty-four hours after collection, except for specific requirements for further retention due to holidays or office or business closures, as well as in the event that a specific investigative request from the judicial authorities or the police must be complied with.
• The video surveillance system is introduced as a complementary measure aimed at improving security inside or outside buildings or facilities where production, industrial, commercial, or service activities are carried out, or which are intended to facilitate the exercise, in civil or criminal proceedings, of the data controller’s or third parties’ right to defense based on images useful in the event of unlawful acts.

Processing methods. Your personal data may be processed in the following ways:

• Outsourcing of processing operations;
• Processing using electronic calculators;
• Manual processing using paper archives.

All processing is carried out in compliance with the procedures set forth in Articles 6 and 32 of the GDPR and through the adoption of the appropriate security measures required.

Your data will be processed only by personnel expressly authorized by the Data Controller and, in particular, by the following categories of authorized personnel:

• All natural persons responsible for processing, authorized to use the facilities and, where necessary for the purposes pursued, to view the recordings (Article 30 of the Code), have been designated in writing;
• Production Department;
• Production Manager;
• Members, associates, and members;
• Forwarders;
• Administration Office;
• Management Assistant Office;
• Sales Office;
• Marketing Office.

Disclosure: Your data may be disclosed to external parties for the proper management of the relationship, and in particular to the following categories of Recipients, including all duly appointed Data Processors:

• BLB client companies defined as OEMs and/or Dealers;
• banks and credit institutions;
• consultants and freelancers, including associates;
• within public and/or private entities for which disclosure of data is mandatory or necessary to fulfill legal obligations or is otherwise functional to the administration of the relationship;
• shippers, carriers, owner-drivers, post offices, and logistics companies.

Dissemination. The data may be disclosed to:

• Digital channels and/or platforms for refresher courses.

Retention Period. We hereby inform you that, in compliance with the principles of lawfulness, purpose limitation, and data minimization, pursuant to art. 5 of the GDPR, the retention period for your personal data is:

• established for a period of time no longer than is necessary to complete the services provided;
• established for a period of time no longer than is necessary to achieve the purposes for which they were collected and processed and in compliance with the mandatory timeframes prescribed by law;
• established for a period of time no longer than is necessary to fulfill legal obligations and for protection in the event of litigation.

Data Controller: The Data Controller, pursuant to the Law, is BLB srl (Via Natta, 1, 36040 BRENDOLA (VI), VAT No. 00882660244, contactable at the following addresses: email privacy@blbhydraulic.com, telephone +39 0444 401141) in the person of its legal representative pro tempore.

You have the right to obtain from the data controller the erasure (right to be forgotten), restriction, updating, rectification, portability, and objection to the processing of your personal data. You can also exercise all the rights provided for in Articles 15, 16, 17, 18, 19, 20, 21, and 22 of the GDPR.

You can also view the updated version of this privacy policy at any time by visiting the following website: https://blbhydraulic.com/informativa-privacy-clienti/

EU REGULATION 2016/679: ARTICLES 15, 16, 17, 18, 19, 20, 21, 22 – RIGHTS OF THE INTERESTED PARTY

1. The data subject has the right to obtain confirmation as to whether or not personal data concerning him or her exists, regardless of their being already recorded, communication of such data in an intelligible form, and the right to lodge a complaint with the Supervisory Authority.

2. The data subject has the right to obtain information on:

• the source of the personal data;
• the purposes and methods of processing;
• the logic applied in the event of processing carried out with the aid of electronic means;
• the identification details of the data controller, data processors, and the designated representative pursuant to Article 5, paragraph 2;
• the persons or categories of persons to whom the personal data may be communicated or who may become aware of it in their capacity as designated representative in the territory of the State, data processors, or persons in charge of processing.

3. The data subject has the right to obtain:

• updating, rectification, or, where interested therein, integration of the data;
• The deletion, anonymization, or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which it was collected or subsequently processed;
• certification that the operations referred to in letters a) and b) have been notified, including their content, to those to whom the data was communicated or disseminated, except where such disclosure proves impossible or involves a manifestly disproportionate effort compared with the right being protected;
• data portability.

4. The data subject has the right to object, in whole or in part:

• on legitimate grounds, to the processing of personal data concerning him or her, even if pertinent to the purpose of the collection;
• to the processing of personal data concerning him or her for the purpose of sending advertising or direct selling materials or for conducting market research or commercial communications.