Information pursuant to Article 13 of Legislative Decree no. 196/2003 and Article 13 of EU Regulation no. 2016/679

Pursuant to Art. 13 of Legislative Decree 196/2003 (hereinafter “Privacy Code”) and Art. 13 of EU Regulation no. 2016/679 (hereinafter “GDPR 2016/679”), containing provisions on the protection of persons and other subjects with regard to the processing of personal data, we wish to inform you that the personal data you provide will be processed in compliance with the above-mentioned legislation and the confidentiality obligations to which Bluefoundation S.r.l. is bound.

Data controller
The Data Controller is Bluefoundation S.r.l., C.F. and PIVA 08987490961, with registered office in Via Fabio Filzi 5 – 20124 Milan, info@bluefoundation.it, info@bluefoundation.it (hereinafter the “Data Controller”).

Purpose of processing
The personal data you provide is collected and processed by the Data Controller for the following purposes:
a) Communication: The primary purpose of collecting your personal data is to facilitate communication between you and the Data Controller. By providing your information, you enable Bluefoundation to respond to your inquiries, requests, or comments effectively.
b) Customer Support: The Data Controller may use your provided contact details to address any support or assistance you require. This includes resolving issues, providing information, or addressing any concerns you might have.
c) Service Improvement: Your feedback and inquiries help the Data Controller enhance its products/services and user experience. The Data Controller may analyze the information you provide to identify trends, common questions, and areas for improvement.
d) Legal Compliance: In certain cases, the Data Controller may need to process your personal data to comply with legal obligations or respond to lawful requests from public authorities.

Methods of treatment and conservation
The treatment will be carried out in an automated and/or manual form, in compliance with the provisions of art. 32 of the GDPR 2016/679 and Annex B of Legislative Decree 196/2003 (articles 33-36 of the Code) on the subject of security measures, by specifically appointed persons and in compliance with the provisions of art. 29 GDPR 2016/679.
We point out that, in compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to art. 5 GDPR 2016/679, subject to your free and explicit consent expressed at the bottom of this information, your personal data will be kept for the period of time necessary to achieve the purposes for which they are collected and processed.

Scope of communication and dissemination
We also inform you that the data collected will never be disclosed and will not be communicated without your explicit consent, except for the necessary communications which may involve the transfer of data to public bodies, consultants or other subjects for the fulfillment of legal obligations ..

Rights of the interested party
At any time, you may exercise, pursuant to art. 7 of Legislative Decree 196/2003 and articles from 15 to 22 of EU Regulation no. 2016/679, the right to:
a) request confirmation of the existence or otherwise of your personal data;
b) obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, when possible, the retention period;
c) obtain the rectification and cancellation of data;
d) obtain the limitation of the treatment;
e) obtain data portability, i.e. receive them from a data controller, in a structured format, commonly used and readable by an automatic device, and transmit them to another data controller without impediments;
f) oppose the treatment at any time and also in the case of treatment for direct marketing purposes;
g) oppose an automated decision-making process relating to natural persons, including profiling.
h) ask the data controller to access personal data and correct or cancel them or limit their processing or to oppose their processing, in addition to the right to data portability;
i) withdraw the consent at any time without prejudice to the lawfulness of the treatment based on the consent given before the revocation;
j) lodge a complaint with a supervisory authority.

To assert your rights, please send a written request with “Privacy – exercise of your Privacy rights”, in the subject line to the following e-mail address:  info@bluefoundation.it