PRIVACY NOTICE REGARDING THE PROCESSING OF PERSONAL DATA FOR THE USER

This privacy notice is provided pursuant to Article 13 of Regulation (EU) 2016/679 regarding the protection of natural persons with regard to the processing of personal data of the User.
image1
DATA CONTROLLER OF THE PROCESSING

Bringme S.r.l. Società Benefit

VAT Number: IT10979400016

Headquarters: Via Pier Carlo Boggio, 59, 10138 Turin (TO), Italy

Email: [email protected]

image3
DATA PROTECTION OFFICER (DPO)


The Data Protection Officer (DPO) is
Argo Business Solutions Srl, who can be contacted for any inquiries at the following email address: [email protected].

image2

SOURCE AND TYPE

OF PROCESSED DATA

The categories of data processed are:
  • Data provided by the user through the completion of contact forms on the website
  • Usage data
image5
PURPOSE OF PROCESSING
1. To allow the User to send messages to the Data Controller via a specific contact form on the Website or by sending an email (the Data will not be processed directly through interaction with the Website).
2. To collect statistics and metrics aimed at ensuring the proper functioning of the Website.
3. To exercise the rights of the Data Controller (e.g., the right to defense in legal proceedings).
image4
LEGAL BASIS
Processing necessary for the performance of a contract to which the Data Subject is a party or for the implementation of pre-contractual measures taken at the request of the Data Subject (Art. 6(b) GDPR).
Legitimate interest of the Data Controller (Art. 6(f) GDPR).
Legitimate interest of the Data Controller (Art. 6(f) GDPR).
image7
RETENTION PERIOD
1 year. 10 years for correspondence of legal and commercial relevance.
Retained for the period necessary to achieve this purpose. Metrics collected through technical and session cookies will follow the retention periods provided in the cookie policy. Any additional data will be processed in an anonymous and aggregated form, without the possibility of identifying the user.
For the duration of the litigation, or until the expiration of the terms for exercising appeals.
image6
NATURE OF PROVISION
The provision of Data for purposes 1, 2, and 3 is optional. If the Data is not provided, the Data Subject will not be able to properly interact with the Website.
image9
RECIPIENTS OF THE DATA
The acquired data may be communicated to:
  • Employees and collaborators of the Data Controller in Italy and abroad, in their capacity as authorized data processors and/or system administrators;
  • Third-party companies or other entities (e.g., credit institutions, professional firms, IT consultants, etc.) that carry out outsourced activities on behalf of the Data Controller, in the capacity of data processors.
Furthermore, the Data Controller may communicate the Data of the Data Subject to:
  • Supervisory bodies;
  • Judicial authorities;
  • Public bodies to whom communication of the Data is mandatory;
  • Entities to whom communication is required by law for the fulfillment of the aforementioned purposes.
image8
TRANSFER OF DATA OUTSIDE THE EU
Personal Data is stored on servers located within the European Union, managed by third-party companies appointed and duly designated as Data Processors. The Data Controller may transfer certain categories of User Data to countries outside the European Union. Data will be transferred exclusively to countries deemed adequate by the European Commission or to organizations that provide guarantees in accordance with Articles 44–50 of the GDPR.
image12
RIGHTS OF THE DATA SUBJECTS
The Data Subject may exercise, in relation to the processing of Data described herein, the rights provided by the GDPR (Articles 15-22), including:
  1. receive confirmation of the existence of the Data and access their content (right of access);
  2. update, modify, and/or correct the Data (right to rectification);
  3. request the deletion or limitation of the processing of Data processed unlawfully, including those whose retention is unnecessary in relation to the purposes for which the Data were collected or otherwise processed (right to be forgotten and right to restriction);
  4. object to the processing (right to object);
  5. file a complaint with the Supervisory Authority (Italian Data Protection Authority – www.garanteprivacy.it) in case of a violation of personal data protection regulations;
  6. receive a copy of the Data concerning them in electronic format when such Data has been provided in the context of the contract and request that such Data be transmitted to another Data Controller (right to data portability).
image10
COMPLAINT TO THE AUTHORITY
The Data Subject has the right to lodge a complaint with the Italian Data Protection Authority (Art. 77 GDPR).
image11
AUTOMATED DECISION-MAKING PROCESSES
The Data Controller does not carry out processing of personal data that involves automated decision-making processes.
Version No. 1 of September 23, 2025