INFORMATION ON THE PROCESSING OF PERSONAL DATA
In compliance with art. 13 EU Reg. 2016/679 (hereinafter also GDPR), the following information is provided on the processing of personal data of individuals carried out as part of the sales operations of the “Bossum” product through the dedicated e-commerce platform .
Holder of the treatment
The Data Controller is BEREMENTE S.R.L., c.f. and VAT number 15356981009, with registered office in Rome, Viale Carso 57, 00195, which can be contacted at the email address berementesrl@gmail.com
Categories of interested parties
The interested parties are customers (natural persons and / or legal representatives of legal persons) who purchase the product (beer and / or any merchandising) under the “Bossum” brand directly from the Data Controller through the e-commerce service.
Type of personal data processed
The personal data of the data subjects processed are personal data, such as name, surname and the address for the delivery of the product (if coinciding with the subject’s residence / domicile) as well as contact details, i.e. email address and / or telephone number.
As for the data relating to the payment method (eg credit card), these are not processed by this Data Controller. The payment of the product is made through special payment platforms (Paypal, Stripe) which process the data as an independent owner.
Source of personal data
The data of the interested party is collected directly by the Data Controller through orders placed by customers through the Bossum e-commerce platform.
Purpose of the processing
The Data Controller processes the data for the purposes described below:
Correct fulfillment of the sales contract, in particular: 1) order management and processing; 2) drafting of specific documentation, such as purchase receipts, invoices or transport documents; 3) preparation and execution of the delivery of the product, which can also take place through qualified suppliers (shipping companies).
Tracing the distribution of the product for food safety needs according to the current legislation on the subject and in particular in compliance with the HACCP protocols and the relative procedures for withdrawal and / or recall of the product in case of non-compliance of the same according to the standards required by the same regulations .
Fulfillment of legal obligations of a fiscal and / or accounting and / or other nature by the Owner.
Creation, on the e-commerce platform, of a personal account by the interested party, through which the same can manage their orders.
With regard to the email address, the sending of commercial communications referring exclusively to “Bossum” branded products by the Data Controller, such as discounts, promotions or commercial initiatives, pursuant to art. 130 co. 4 Legislative Decree 196/2003 (and amendments pursuant to Legislative Decree 101/2018).
Obligation to provide data
For the above purposes, the provision of personal data IS MANDATORY with reference to points a) to c). In the absence of this provision, it would not be possible to proceed with the sale of the product.
The purpose referred to in point d) is optional. Failure to create an account does not affect the ability to purchase the product.
As for the email address, its use for the purposes referred to in point e) is permitted to the Data Controller even in the absence of the prior consent of the interested party, in compliance with the conditions set out in art. 130 co. 4 Legislative Decree 196/2003 (and amendments pursuant to Legislative Decree 101/2018). The interested party is without prejudice to the possibility of opposing the treatment referred to in point e) at any time by communicating to the Data Controller at the contacts indicated in the paragraph on the rights of the interested party.
Methods of data processing
Data processing takes place electronically. These are registered on the e-commerce site in case of creation of an account by the interested party and protected by adequate security measures.
In the event that it is necessary to transfer these data on paper, the data will be stored in special locked cabinets and archives, located at the Data Controller’s registered office or at the operational headquarters.
Communication of personal data to third parties
The Data Controller makes use of third party service providers to carry out its business, with which specific contracts have been signed. The communication of data to these subjects takes place to the extent strictly necessary for the correct execution of the sales contract with the interested party, or for the fulfillment of fiscal, fiscal, accounting obligations.
These third party suppliers process your personal data as autonomous Data Controllers and they are therefore required to comply with the obligations set out in EU Reg. 2016/679. The interested party can contact the Data Controller at the address indicated for more information on suppliers.
Transfer of data outside the European Union
The Data Controller does not transfer personal data outside the EU borders.
Data retention period
The data provided will be kept for the time strictly necessary for the fulfillment of the aforementioned purposes. Since the provision of data takes place for the performance of contractual relationships, the limits established by law for the management of any disputes that may arise from such relationships may in any case apply.
Rights of the interested party
Pursuant to art. 15-22 GDPR, the interested party always has the right to request from the Data Controller access to his data, the correction or cancellation of the same, the limitation of the treatment or the possibility of opposing the treatment, to request the portability of data, to withdraw consent to processing. The interested party can assert their rights by simply communicating to the Data Controller at berementesrl@gmail.com
The interested party can also lodge a complaint with the Privacy Authority.
The Data Controller
BEREMENTE S.R.L.
Italiano