INFORMATION RELATING TO THE PROCESSING OF PERSONAL DATA

Pursuant to Leg. Dec. 196/2003, adapted by Leg. Dec. 101/2018 to GDPR 679/16 EU (Articles 13, 14)

DATA CONTROLLER
B.L. Mediterraneo S.r.l. a single shareholder
Galleria Cavour, 4 40124 Bologna (BO)
VAT number 02598631204 C.F. 02598631204
Telephone 051.6606044
Email: privacy@bl-bagline.it Pec: bl@pec.bl-bagline.com Web: www.bl-bagline.it

RESPONSIBLE FOR DATA PROCESSING
- The data controller has decided not to appoint a person responsible for the protection of personal data, not falling within the categories identified by the European Regulation for the protection of personal data (GDPR 679/16 EU) art. 37 pp. 1, 4, by the National Guarantor for the protection of personal data and by the European working group "European data protection board", hereinafter "EDPB");

PURPOSE OF DATA PROCESSING
- Study, design, construction and sale of systems and supervision systems for complete packaging lines;
- Administrative management of relationships with customers and suppliers;
- Protection of the Data Controller's rights in court in the event of legal disputes;

LEGAL BASES OF THE PROCESSING OF PERSONAL DATA
- Art. 6 par 1 b) the processing is necessary for the execution of a contract of which the interested party is a party or for the execution of pre-contractual measures adopted at the request of the same;
- Art. 6 par 1 c) the processing is necessary to fulfil a legal obligation to which the data controller is subject;
- Art. 9 par 2 f) the processing is necessary to ascertain, exercise or defend a right in court or whenever the jurisdictional authorities exercise their jurisdictional functions;

INFORMATION COLLECTED BY THE DATA CONTROLLER
Customers: individual companies or partnerships;
- Name, surname, company name;
- Address of residence and domicile;
- Date and place of birth;
- Tax code and VAT number;
- Telephone and email contact details;
- Payment data and bank data;
- Judicial data in case of litigation;
Customer employees and collaborators
- Name surname;
- Telephone and email contact details;
- Task

METHODS OF PROCESSING OF PERSONAL DATA
- Data processing with centralized computer network;
- Processing on paper;
- IT connections with protected data connection;
- IT connections with platforms of bodies and institutions for regulatory compliance;
- Connections with home banking platforms and other payment platforms;
- Connection with electronic invoicing platforms for sending and receiving documents through the S.D.I.;
- Sending and receiving computer communications in e-mail mode;
- Processing of information by authorized personnel trained and with access to authorization profiles;

RECIPIENTS OF THE INFORMATION
• Employees, collaborators, interns and administrators of the data controller, as authorized to process personal data, duly trained on the appropriate measures to be adopted in order to protect personal data, pursuant to art. 29 of the reg. (EU);
• Subjects external to the organizational structure whose suitability requirements have been previously verified by the data controller. These subjects may operate as managers, co-owners or independent data controllers for activities related to the achievement of the purposes described, including:
- Consultants and providers of services necessary to achieve the objectives;
- Consultants and service providers necessary to fulfil regulatory obligations;
- External subjects who operate as data controllers for the provision of employment consultancy services;
- Subjects who operate as suppliers of IT technical assistance services;
• Bodies and Authorities for legal obligations;

NATURE OF THE PROVISION OF DATA AND CONSEQUENCE OF FAILURE TO PROVIDE IT
- The nature of the provision is optional, however failure to provide it would not allow the objectives to be achieved;

TRANSFER OF INFORMATION OUTSIDE THE EU TERRITORY
- Personal data are not transferred to territories outside the European Union. The possible
transfer takes place in compliance with the articles. 45, 46 OF GDPR 679/16 EU;

CHANGING YOUR CONSENT OPTIONS
- The information processed following the provision of consent provides for the possibility of revocation at anytime
by contacting the contact details indicated in this information at the email address privacy@bl-bagline.it;

RIGHTS OF THE INTERESTED PARTY
- The rights of the interested party (articles 15 to 22) provide for the possibility of
• Ask the Data Controller for access to the personal data and information relating to the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom the data are communicated, the data retention period,
• Ask the Data Controller to rectify your personal data
• Ask the Data Controller to delete personal data
• Ask the Data Controller to limit the processing of personal data
• Ask the Data Controller for portability of personal data
• Object to the processing of personal data in the foreseen cases
• Object to automated decision-making processes relating to personal data, including profiling
• Exercise the revocation of consent to the processing of personal data in the foreseen cases
• Make a complaint to a supervisory authority
Detailed description of the rights of the interested party can be consulted in the text of the Regulation for the protection of personal data GDPR 679/16 EU Articles 15 to 22;