WHO IS THE DATA CONTROLLER?
Bbrand with registered office in Viale Cassala, 57, 201434 Milan (MI), Italy (bbrand) acts as data controller for the purposes of marketing and profiling of your data, where you provide your express consent to such processing. For any clarification, question or need related to your privacy and the processing of your personal data you can contact us at any time by sending a request to firstname.lastname@example.org.
WHAT DATA DO WE PROCESS AND WHY?
Bbrand processes, with your consent, the data you provide when you wish to receive promotional communications or information from bbrand, such as your first and last name, e-mail address, date of birth, mobile phone number, profession, preferences (e.g. interest in receiving communications about our products). bbrand also processes data relating to your purchases when you expressly consent to the recording of your consumption habits, preferences and lifestyle in order to use them for the creation of group and individual profiles (“profiling”) that are used to send you personalised communications and to carry out market and statistical research with anonymous data, organised in aggregate form.
Your personal data are processed for the following purposes:
- to provide you with the services of the Site such as subscription to the newsletter;
- to allow you to register on the Site and use the services reserved for registered users;
- to manage your requests forwarded to our customer service.
In the above cases, the processing of your personal data is legitimate insofar as it is necessary to execute a contract concluded with you or to provide you with the service you have specifically requested.
On the other hand, we process your personal data only with your express consent in order to:
- carry out commercial communications activities;
- analyse your consumption habits in order to create individual or group profiles;
WHO WILL PROCESS YOUR DATA?
Your personal data is processed by duly trained staff of our company and, for organisational and functional needs relating to the provision of services on the Site, by our suppliers. These suppliers have been assessed and selected by bbrand for their proven reliability and competence.
Details of the processing of Personal Data
Personal Data is collected for the following purposes and using the following services:
Managing contacts and sending newsletters
This type of service allows the management of a database of email contacts used to communicate with the User.
These services may also allow the collection of data relating to the date and time of viewing the newsletters by the User, as well as the User’s interaction with them, such as information on clicks on links included in the emails.
- MailChimp (The Rocket Science Group, LLC.)
- MailChimp is an address management and email messaging service provided by The Rocket Science Group, LLC.
- Personal data collected: last name, first name, email.
The services contained in this section allow the Data Controller to monitor and analyse traffic data and serve to keep track of the User’s behaviour.
- Google Analytics (Google Inc.)
- Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google uses the Personal Data collected in order to track and examine the use of bbrand.biz, compile reports and share them with other services developed by Google.
- Google may use the Personal Data to contextualise and personalise the advertisements of its advertising network.
- Personal Data Collected: Cookies and Usage Data.
HOW LONG DO WE KEEP YOUR DATA?
WHAT ARE YOUR RIGHTS?
At any time, depending on the specific processing, you may: revoke your consent to the processing; know what personal data we hold about you, where it came from and how it is used; request that it be updated, corrected or supplemented; and, in the cases provided for by the provisions in force, request that it be deleted, restricted or oppose its processing. If you wish, you may request to receive the personal data held by bbrand about you in an electronically readable format and, where technically possible, we may transfer your data directly to a third party specified by you. If you believe that your personal data have been processed unlawfully, you may lodge a complaint with the data protection authority (http://www.garanteprivacy.it/), which is responsible for ensuring compliance with data protection regulations. This document may be amended and supplemented over time, so please check its contents periodically. Wherever possible, we will endeavour to inform you of any changes in good time.
The company bbrand as data controller informs you of the following about the processing of your personal data pursuant to Article 13 of the EU Regulation 2016/679 on the protection of personal data (“Regulation”).
- PURPOSES OF THE PROCESSING AND CONSEQUENCES IF YOU REFUSE TO PROVIDE YOUR PERSONAL DATA
- a) Purposes necessary for the performance of a requested service.
Bbrand processes the personal data that you provide in order to allow you to take advantage of the services on the Website, including requesting information on our products and their availability, requesting assistance, and being contacted. For these purposes, bbrand processes data such as your title, first and last name, e-mail address, mobile phone number, profession, place of residence (city, country) and date of birth. For the above-mentioned purposes, it is necessary for you to provide your personal data, and any refusal to do so would prevent you from making use of the requested service.
- b) Additional purposes: marketing and profiling.
With your consent, which is optional, bbrand will use your personal data for marketing purposes, i.e. to send you promotional newsletters, commercial communications or advertising about bbrand’s events and initiatives, market research and satisfaction surveys, as well as to conduct statistical analyses using anonymous data, organised in aggregate form. Marketing activities are carried out by e-mail, newsletters, telephone calls by operator, sms, MMS, chat, instant messaging, social networks and traditional mail, including the sending of invitations to events organised by bbrand or in which bbrand participates. You may at any time indicate your preferred method of contact from among those listed above and may object to receiving promotional communications through all or some of the above communication channels.
With your consent, which is optional, bbrand in its shops and online through the Website or bbrand’s social media accounts, collects information relating to your preferences, habits, lifestyle and details of purchases made in order to use it to create group and individual profiles (“profiling”) that are used to send personalised communications and to carry out market and statistical research with anonymous data, organised in aggregate form. Personalised marketing activities are carried out by e-mail (newsletters), telephone, SMS, MMS, chat, instant messaging, social networks and traditional mail, including invitations to events. You may at any time indicate your preferred method of contact from among those listed above and you may object to receiving promotional communications through all or some of the above communication channels.
Providing your personal data for the purposes of marketing and profiling your data as indicated above is optional and any refusal will have no effect on your registration on the Website.
- PROCESSING METHODS AND LEGAL BASES
Bbrand processes your personal data with and without the use of electronic means, on the basis of logic and procedures consistent with the purposes set out below and in compliance with the Regulation, including confidentiality and security profiles. The data may be provided by you when you register on the Website, acquired during visits to our boutiques, provided during interaction with our digital initiatives (websites, social media), or during events organised by bbrand or in which bbrand participates. In accordance with the Regulations, the personal data relating to you that are collected from time to time by you or by authorised third parties are used to update and correct previously collected information. Bbrand processes your personal data on the basis of the following legitimacy criteria:
- your consent
- the legitimate interest of bbrand in carrying out its activities
- the fulfilment of a specific request from you
- the fulfilment of legal obligations.
- COMMUNICATION OF YOUR PERSONAL DATA TO THIRD PARTIES
Personal data is accessible to our duly authorised personnel on a need-to-know basis and is communicated to third parties when such communication is required by applicable laws and regulations with respect to legitimate third party recipients of communications, such as authorities and public bodies for their respective institutional purposes.
Your personal data are also shared with our service providers, e.g. providers of technical and organisational services that are functional to the above-mentioned purposes, companies that manage our Website, companies that offer e-mail and SMS services, law firms, companies specialising in market research and data processing, advertising companies, etc.. We only provide these entities with the data necessary to perform the agreed services and they act as data processors on the basis of instructions received from bbrand. Bbrand does not pass on your data to third parties so that they can use it for their own marketing or profiling purposes.
- TRANSFERS OF PERSONAL DATA OUTSIDE THE EUROPEAN UNION
Personal data are processed and stored in clouds and on servers located within the European Union owned and/or available to bbrand or to third-party companies duly appointed as data controllers. Your personal data will not be disseminated.
- STORAGE OF PERSONAL DATA
Personal data processed to respond to your specific request are kept for the time necessary to perform the service requested. For marketing and profiling purposes, the data is kept for the time strictly necessary to pursue said purposes, within the limits allowed by the Regulations. In particular, your data will be kept for a period of 12 months for profiling purposes and 24 months for marketing purposes. You may at any time request the deletion of your data for such purposes and object to the processing of your data for marketing purposes.
- DATA CONTROLLER
The Data Controller is bbrand, with registered office in Via Piave 24/26, 20016 Pero (MI), Italy, available at the following e-mail address: email@example.com.
- YOUR RIGHTS
You may contact bbrand in its capacity as Data Controller at the above-mentioned addresses to obtain an updated list of our data processors (i.e. our service providers), the entities to which your data is disclosed and to exercise at any time the following rights under Art. 15 ff. of the Regulation; to obtain confirmation of the existence or not of your data, to verify their content, origin, accuracy, to ask for their integration, updating, rectification, cancellation, anonymisation, to ask for the portability of the data, the limitation of the processing, the opposition to the processing for legitimate reasons, e.g. opposition to marketing activities, to submit a petition to the Control Authority (the Guarantor for the Protection of Personal Data).