PERSONAL DATA PROCESSING NOTICE

FOR DATA SUBJECTS: Facebook Users

pursuant to Art. 13 and Art. 14 of Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data

The user’s (“Data Subject”) personal data (“Data”) will be processed by Us, “Bringme Srl Società Benefit“, as Data Controller, in compliance with the personal data protection principles established by EU Regulation 2016/679 (“GDPR”).

METHODS AND PURPOSES OF DATA PROCESSING

The user’s Data will be processed with the support of electronic means for the following purposes:

  • Responding to users’ requests and queries.
  • Managing the Facebook Page;
  • Advertising on the platform (when creating posts or other sponsored content);
  • Viewing statistics in the “Insights” section.

LEGAL BASIS

The legal basis for processing the Data Subject’s Data in order to respond to users’ requests and queries is the performance of pre-contractual measures taken at the Data Subject’s request, arising following contact initiated by the latter (cf. Art. 6(1)(b) GDPR).

With regard to the Data Controller’s viewing of the user’s Facebook profile data (profile name and picture) and the statistical data generated as a result of the user’s interaction with the page, the data will be processed under joint controllership with Facebook Ireland Ltd. (“Facebook”).

The joint controllership agreement pursuant to Art. 26 GDPR between our company and Facebook can be consulted at the following link: https://www.facebook.com/legal/terms/page_controller_addendum

CATEGORIES OF RECIPIENTS

The Data will be processed, to the extent necessary, by authorised personnel who have been adequately instructed and trained, by the Data Controller as well as by the personnel of third parties who provide services to the Data Controller and process Data on its behalf and on its instructions as data processors.

RETENTION PERIOD

The Data provided by the Data Subject will be processed for a period based on the following criterion: messages sent by potential customers and customers with legal and commercial content and relevance will be retained for 10 years. Other messages will be retained for 24 months.

DATA TRANSFER

The data may be transferred by Facebook to countries outside the EEA (European Economic Area). The data transfer complies with the GDPR since Facebook has adopted specific Standard Contractual Clauses.

DATA SUBJECT'S RIGHTS

The Data Subject may exercise, in relation to the data processing described herein, the rights provided by the GDPR (Arts. 15–22), including:

a. obtaining confirmation of the existence of the Data and accessing its content (right of access);

b. updating, amending and/or correcting the Data (right to rectification);

c. requesting the erasure or restriction of Data processed unlawfully, including data whose retention is not necessary for the purposes for which it was collected or otherwise processed (right to erasure and right to restriction);

d. objecting to the processing (right to object);

e. lodging a complaint with the Supervisory Authority (Italian Data Protection Authority – Garante per la protezione dei dati personali, www.garanteprivacy.it) in the event of a breach of personal data protection legislation;

f. receiving an electronic copy of the Data concerning them as Data Subject, where such Data was provided in the context of the contract, and requesting that such Data be transmitted to another data controller (right to data portability).

 

CONTACT DETAILS

The Data Controller is:

Bringme Srl Società Benefit, with registered office at Via Pier Carlo Boggio, 59 – 10138 Turin

You may exercise your rights at any time by sending:

  • a registered letter with return receipt to: Bringme Srl Società Benefit, registered office at Via Pier Carlo Boggio, 59 – 10138 Turin
  • an e-mail to: [email protected]

CONTACT DETAILS OF THE DATA PROTECTION OFFICER

The Data Protection Officer (DPO) can be contacted for any matter at the following e-mail address: [email protected]

When contacting us, the Data Subject must ensure that they include their name, e-mail/postal address and/or telephone number(s) so that their request can be handled correctly.

Versione aggiornata il 20/10/2022