PRIVACY POLICY
The following information is provided pursuant to art. 13 of the EU Regulation 2016/679 (hereinafter, “Regulation”), for those who make use of the accessible services starting from the web address http://www.bft-automation.com. When browsing the site, information on users can be collected that constitutes personal data pursuant to the Regulation. This privacy policy applies exclusively to the above-mentioned site and does not regard any other sites the user may access via links found on the site.
DATA CONTROLLER
The Data Controller is the company, BFT S.p.A. with registered office in via Lago di Vico, 44, Schio (Vicenza), Italy (hereinafter “Bft” or the “Company”).
DATA PROTECTION OFFICER “DPO”
The Somfy group which the Company is a part of has identified a Data Protection Officer pursuant to art. 37 of the Regulation that can be contacted at the following email address: dpo@somfy.com
DATA PROCESSING LOCATION
The data linked to the web services on this site is processed at Bft’s headquarters indicated above and is handled by specific staff appointed to deal with the processing, and by external technicians for management and maintenance operations, appointed as Persons in charge of processing.
TYPES OF DATA PROCESSING
The personal data covered by the processing refers to information provided by the user at the time of access and/or when registering on the BFT website or when requesting to benefit from certain services (name and surname; personal contact details (e-mail, telephone); User name and login password).
Browsing data
During the normal course of operations,the IT systems and software procedures designated for the functioning of this website acquire certain personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is collected not to be associated with identified individuals, but by its very nature could, through processing and association with data held by third-parties, allow users to be identified. This category of data includes IP addresses or names of computer domains used by users who connect to the site, URI (Uniform Resource Identifier) notation addresses of requested resources, the time of request, the method used to make the request to the server, the size of the file obtained in answer, the numerical code indicating the state of the data answer from the server (successful, error, etc.) and other parameters regarding the operating system and the user’s IT environment. This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site.
Data voluntarily provided by the user
Optional, explicit and voluntary dispatch of an e-mail to addresses indicated on this website and the compilation of specifically prepared forms, lead to the subsequent acquisition of the e-mail address and any other personal data entered in the electronic message, as well as data on the sender/user, required to answer the requests or satisfy the service.
Specific concise privacy policies will be provided for special services.
COOKIES (if only session cookies are used)
IT techniques are not used to directly acquire the user’s personal identification data.
Cookies are not used to convey personal information, nor are the so called persistent cookies of any kind, that is, user tracking systems.
The use of so called session cookies (that are not stored permanently on the user’s computer and disappear when the browser is closed) is strictly limited to transmitting session identification data (consisting of casual numbers generated by the server) required to safely and efficiently browse the site.
The so called session cookies used on this site avoid reverting to other IT techniques potentially detrimental for users’ browsing privacy and do not allow for the acquisition of the user’s personal identification data.
The user needs to change his or her browser settings to disable the cookies installed. Note that in this case, the Site or some of its functions may not work properly. The procedure to be followed depends on the browser used. For detailed instructions, please click on one of the following links:
• Internet Explorer: https://support.microsoft.com/it-it/help/17442/windows-internet-explorer-delete-manage-cookies
• Firefox: http://support.mozilla.org/it/kb/Gestione%20dei%20cookie?redirectlocale=enUS&redirectslug=Cookies
• Google Chrome: https://support.google.com/chrome/answer/95647?hl=it
• Opera: help.opera.com/en/latest/web-preferences/
• Safari: http://support.apple.com/kb/PH5042
• Safari iOS (iPhone, iPad, iPod touch): http://support.apple.com/kb/HT1677?viewlocale=it_IT
If the browser you use is not listed here, you can obtain information on how to proceed from the site www.aboutcookies.org or click “Help” on your browser.
PURPOSES OF THE PROCESSING
The user’s personal data, freely communicated and acquired in relation to the Company’s activities, will be legally and correctly processed for the following purposes:
A. the data will be gathered and used exclusively for purposes directly linked and key to the registration and activation of one’s account and to provide the services offered by the Company;
B. the data will be gathered and used exclusively for purposes directly linked and key to the registration of the subscription to “BfT Informa” and to provide the services offered by the Company;
C. if the data is entered into the “Request information” section found on the internet site, the personal data will be gathered and used exclusively to satisfy and handle the relative requests for information made by the user;
D. if the data is entered into the “Work with us” section, the personal data given in the curriculum vitae will be processed by Bft for the selection linked to the position or other similar ones;
E. only based on specific and clear consensus from the user and until it is withdrawn (art. 7 of the Regulation), the personal data will be processed - both through the use of automated contact systems like e-mail, fax, messages like mms (multimedia messaging service) or sms (short message service) and calls without the intervention of an operator both by traditional means and through the use of a telephone, mobile or land line, with operator (so called Telemarketing) - to send relevant sales offers and/or linked to Company products and/or services and to send advertising material linked to the above-mentioned products or services or sales communication as well as to carry out market research even directly to assess the level of user satisfaction (so called “marketing” purposes);
F. only based on specific and clear consensus given by the user and until it is withdrawn (art. 7 Regulations), the data can be used for profiling, including therein market research and dispatching of surveys or questionnaires regarding user satisfaction in relation to Company products and/or services. With the profiling consensus, the Company will carry out analyses or processing aimed at identifying usage preferences of the products and/or services offered in order to improve them and bring them more into line with the user’s needs - both by grouping the data into even categories and by elaborating individual profiles - and will use the data to carry out marketing profiling work with automated IT and traditional methods as foreseen in point E.
G. Soft Spam: The e-mail address provided by the user when purchasing a product or service, may be used by Bft to send e-mail communications concerning the direct sale of products or services similar to those purchased by the user (without the need for express or prior consensus from the user, so called “soft spamming”), on condition that the user does not exercise his/her right to oppose this in the ways better described below.
H. where data is entered into the “Sign up for the Newsletter” section found on the Internet site, the personal data will be gathered and used exclusively to send out the Bft Newsletter.
By ticking the specific “Sign up for theNewsletter” and/or “Marketing communications” and/or “Telemarketing” and/or “Profiling” boxes, the user provides their consensus, accepts the conditions found in this Privacy Policy and authorises his/her personal data to be processed as well as explicitly declaring that all the personal data provided is correct and truthful.
LEGAL GROUNDS FOR PROCESSING
The legal grounds for processing based on the purposes set out in points A., B., C., D. and E. is the implementation of pre-contractual and contractual measures, pursuant to art. 6 sect. 1 par. b) of the Regulation.
The legal grounds for processing based on the purposes set out in points E., F. and H. given above is the user’s freely granted consensus pursuant to art. 6 sect. 1 par. a) of the Regulation.
The legal grounds for processing based on the purposes set out in points G. given above is the legitimate interest of the Company, pursuant to art. 6 sect. 1 par. f) of the Regulation.
WITHDRAWAL OF CONSENSUS
At any time, the user can oppose the processing as per point G. as well as revoke his/her consensus to data processing as per points E.,F. and H. after having given his/her consensus:
- by using the specific link at the bottom of the page of any advertising e-mail sent by Bft;
- by changing his/her preferences on the website under the section “My account” - “Newsletter” and/or “Marketing communications” and/or “Telemarketing” and/or “Profiling”;
PROCESSING METHODS
The personal data is handled with automated tools for the exact time and purpose required for which it was gathered. Specific safety measures have been adopted to prevent loss of data, illegal or incorrect usage and unauthorised access.
OPTIONAL STATUS OF DATA CONFERMENT
With the exception of what is specified for browsing data, the user is free to provide his/her personal data in the request forms or provide them for the purpose of obtaining a specific service, to request information material or other communications. Failure to provide personal data can, however, make it impossible to follow up on the user’s requests.
Providing data for the purposes as per points E.,F. and H. is optional. Refusing consensus for the purposes of points E. and F. will have no consequences on the provision of services, as is the also the case with the exercising of the right to oppose the processing of one’s data, so called “soft spamming” as per point G.
COMMUNICATION AND DISTRIBUTION OF DATA
The personal data provided by users who send requests for information, sales or advertising material or request services are used solely for the purpose of handling these requests, and could become known to employees or co-workers at Bft assigned to the Marketing and IT department and specifically authorised to process the data, as well as the company, Pallino & Co., Garden 65 Srl, Concerto Srl, MailChimp, (whose privacy policy can be found at the following link https://mailchimp.com/legal/privacy/) and third parties who provide services that are additional or key to BFT’s activities, all appointed Data processors pursuant to art. 28 of the Regulation.
Outside of these situations, the data will not be communicated, except where necessary to fulfil requests from the Judicial Authorities or Public Safety Body. The data gathered shall not be distributed under any conditions.
DATA STORAGE PERIOD
The processing of personal data in reference to the purposes as per points A. and B., will last for the time needed to implement the requested services, to which will be added an legally foreseen additional period in compliance with the current civil, financial and tax-related requirements.
The processing of personal data in reference to the purposes as per point C. shall be valid for 18 months starting from the date when the data is received after being entered in the “Request information” section found on this website http://www.bft-automation.com, or from the last update communicated to us by the user.
The processing of personal data in reference to the purposes as per point D. shall be valid for 18 months starting from the date when the curriculum vitae is received after being entered in the “Work with us” section found on this website http://www.bft-automation.com, or from the last update communicated to us by the user.
The processing of personal data in reference to the purposes as per point E. shall be valid for 24 months starting from the date when consensus is given, unless withdrawn by the user.
The processing of personal data in reference to the purposes as per point F. shall be valid for 12 months starting from the date when consensus is given, unless withdrawn by the user.
The processing of personal data in reference to the purposes as per points G. and H. shall continue until consensus is withdrawn by the user
At the end of this period of data processing, the latter shall be deleted or rendered permanently anonymous.
RIGHTS OF THE PARTIES INVOLVED
Specific rights are granted under the Regulation to the person to whom the personal data refers. In particular, the user, where there are the conditions and obviously where s/he does not revert to the hypothesis of a waiver of the rights granted under the Regulation (art. 23 of the Regulation), has the right to
• obtain confirmation that their personal data is being processed or not and if that is the case, obtain access to their own personal data and its communication (art. 15 of the Regulation);
• have any incorrect personal data that concerns them amended as well as the integration of any incomplete personal data, even by providing a supplementary declaration (art. 16 of the Regulation);
• withdraw their consensus, where placed at the bottom of the processed data, and have their personal data deleted without unjustifiable delay, where justifiable to do so (art. 17 of the Regulation);
• impose a restriction on the processing of their data (art. 18 of the Regulation);
• receive their personal data in a structured format, for everyday use that can be read from an automatic device as well as transmit them to another data controller (art. 20 of the Regulation);
• oppose, at any time, the processing of their personal data (art. 21 of the Regulation);
• submit a complaint to the governing authorities.
Articles from 15 to 23 of the EU Regulation can be consulted at this link: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex%3A32016R0679
The above-mentioned rights can be exercised by accessing your “Client Area” on the website where it will be possible to follow up on the above-mentioned rights.
