INFORMATION ON THE PROCESSING OF PERSONAL DATA

pursuant to Article 13 of Regulation (EU) 2016/679 (‘Privacy Policy’)

This information is provided pursuant to Regulation (EU) 2016/679 (hereinafter referred to as the ‘Regulation’ or ‘GDPR’) and describes how the personal data of users who consult and use this website, accessible at https://bebdental.it/it/ (hereinafter also referred to as the ‘Site’) or use the services offered through the Site are processed.
In accordance with the current European Data Protection Regulation No. 679/2016 (‘GDPR’), the collection and processing will always follow principles of lawfulness, correctness and transparency.
Following consultation of the Site, data relating to the user accessing the Site (defined as ‘data subject’ as an identified or identifiable natural person) may be processed.

A. DATA CONTROLLER

The data controller is B&BDental S.r.l. with registered office in Via San Benedetto, 1837 40018 – San Pietro in Casale (BO) and operational headquarters in Via Due Ponti, 17/19 – 40050 – Argelato (BO), in the person of the legal representative pro tempore, who can be contacted at the email amministrazione@bebdental.it

B. DATA PROTECTION OFFICER (RPD)

The Data Protection Officer (DPO) is Ing. Massimo Di Menna. For all needs concerning the protection of personal data, including the exercise of the rights recognised to the interested party by the legislation in force, it is possible to refer to the following contacts at the Data Protection Officer: massimo.dimenna@gruppoingegneria.it

C. TYPE OF DATA COLLECTED, PURPOSES, LEGAL BASIS AND RETENTION PERIODS.

1. Browsing Data
Personal Data may be collected autonomously by the Data Controller or through third parties.
In this case, the computer systems and software procedures in charge of the functioning of this Site acquire some Users’ Personal Data, of a technical-informatics nature (e.g. IP address, type of browser used, operating system, domain name and addresses of websites accessed or exited from, etc.), the transmission of which is inherent to the normal functioning of the Internet.

Purpose: Such Data may be processed for the sole purpose of obtaining anonymous statistical information on the use of the site and/or to check its correct functioning.

Storage: such Data will be deleted immediately after processing.

Legal basis: processing is carried out on the basis of the Owner’s legitimate interest in making the Site usable and navigation on it safe (art. 6, par. 1 lett.f). Exclusively for the specific activity of profiling the express consent of the person concerned (Art. 6, par. 1 lett.a).

2. Contact by the user by e-mail, telephone contact, filling in the form to receive information or register for courses organised by the Data Controller.
The optional, explicit and voluntary sending of communications by e-mail to the addresses indicated on this site entails the subsequent acquisition of the data communicated by the user, including his/her e-mail address, and consent to receive any messages in response to his/her requests.
In this case, the provision of the e-mail address and any other data that may be indicated is optional, but indispensable in order to be able to use the service and receive a reply to your request and, in their absence, we will not be able to proceed with processing.
Purpose: The personal data provided in this way is used solely for the purpose of fulfilling or replying to the transmitted requests and is only disclosed to third parties if this is necessary for that purpose.
Retention: Data is retained for the period necessary for the purpose of fulfilling the request and in accordance with current legislation.

Legal Basis: The processing is carried out for the fulfilment of a contractual and pre-contractual obligation assumed by the Controller with the service (Art. 6, par. 1 letter b).

3. Newsletter and commercial/promotional communications.
If explicitly requested by the user, it is possible to provide his/her contact data in order to receive communications of a commercial and/or informative nature regarding the Controller’s business.
The provision of such data for such purposes is entirely optional but indispensable in order to proceed with the provision of the promotional information service described above.
We use Hubspot to send you newsletters.
Purpose: personal data provided in this way (First Name, Last Name and email address) are used solely for the purpose of fulfilling or replying to the requests transmitted and are only communicated to third parties where this is necessary for this purpose and only after explicit consent has been given by the person concerned.
Retention: data are retained for the period necessary to perform the activity for which they were provided and, in any case, specifically for the purposes described above, for no longer than two years as expressly provided for by law (unless renewed consent is given by the data subject for use for other purposes as provided for by current legislation).
Legal basis: the processing is carried out on the basis of the explicit consent of the data subject (Art. 6(1)(a)).

5. Integration of Social Media Plugins
We have integrated social media plugins (Facebook, Instagram, Youtube, Linkedin) on the site. This means that when you click or touch one of the buttons (e.g. the Facebook ‘Like’ button), certain information is shared with the providers of the social media service.
If you are logged into your social media account when you click or touch one of these buttons, the social media provider may link this information with your social media account. Depending on your settings, they may also display these actions on your social media profile, which will then be visible to other users in your network.

6. This site makes use of cookies as further detailed in the Cookie Policy, below.

C. RECIPIENTS OF DATA

The personal data collected are processed by the data controller’s staff, who act on the basis of specific instructions on the purposes and methods of data processing.
In addition, the persons designated as data processors pursuant to Article 28 of the GDPR or sub-processors, which the Data Controller uses for the provision of services and for the performance of activities falling under its competence, may be recipients of the data collected following consultation of the Site or use of the services within the limits of their respective assignments.
The relevant list can be requested from the Data Controller using the contact details in section A.
Should a data controller within the meaning of Article 28 of the GDPR or a sub-processor be designated through the services offered by the Site, the data shall be communicated to the Data Controller and/or its data processor.

D. DATA TRANSFER
No transfer abroad of the personal data provided is envisaged.

E. RIGHTS OF THE DATA SUBJECTS
Data subjects – the identified or identifiable natural persons to whom the data refer – may exercise specific data protection rights, which are listed below:
a) right of access: the right to obtain from the Controller confirmation as to whether or not personal data are being processed and, if so, to obtain access to the personal data and detailed information regarding the origin, purposes, categories of data processed, recipients of communication and/or transfer of data, and so on
b) right of rectification: the right to obtain from the Controller the rectification of inaccurate personal data without undue delay, as well as the integration of incomplete personal data, also by providing a supplementary declaration
c) right to erasure (‘oblivion’): the right to obtain from the Controller the deletion of personal data without undue delay in the event that: i. the data are no longer necessary in relation to the purposes of the processing; ii. the consent on which the processing is based is withdrawn and there is no other legal basis for the processing; iii. the personal data have been processed unlawfully; iv. the personal data must be erased in order to comply with a legal obligation
d) right to object to the processing: the right to object at any time to the processing of personal data that have as their legal basis a legitimate interest of the Controller;
e) right to restriction: the right to obtain from the Controller the restriction of the processing, where the accuracy of personal data is contested (for the period necessary for the Controller to verify the accuracy of such personal data), if the processing is unlawful and/or the data subject has objected to the processing
f) right to data portability: right to receive personal data in a structured, commonly used and machine-readable format and to transmit such data to another Data Controller, if technically feasible, only for cases where the processing is based on consent or contract and only for data processed by electronic means
(g) the right to lodge a complaint with the supervisory authority: without prejudice to any other administrative or judicial remedy, a data subject who considers that the processing operations concerning him or her are in breach of the Regulation has the right to lodge a complaint with the supervisory authority of the Member State where he or she resides or habitually works, or of the State where the alleged breach has occurred.
The rights may be exercised by contacting the Controller using the contact details set out in sections A and B below:

– Data Controller amministrazione@bebdental.it
– DPO massimo.dimenna@gruppoingegneria.it

This notice is updated to 23/09/2024.