PRIVACY NOTICE
DATA PROCESSING FOR MARKETING PURPOSES
Users who provide their personal data through the form have the possibility of deciding whether or not to authorize the use of this information for marketing purposes. Data processing for this purpose, if authorized, is carried out by BKT Europe Srl, the processing controller, in accordance with the specifications set out hereafter.
WHO IS THE CONTROLLER AND HOW TO CONTACT THEM
The Controller of data processing for marketing purposes is BKT Europe Srl, in the person of the pro tempore legal representative, with its registered office in Viale Bianca Maria 25, 20122 Milan and offices in Viale della Repubblica 133, 20831 Seregno (province of Monza and Brianza), VAT no. 05404270968. The Company can be contacted through the email privacy@bkt-tires.com
WHAT DATA IS PROCESSED
The data processed is identifying and contact data provided by the user by compiling the specific form.
The platform used by the controller to send emails enables, through tracking systems, the detection of information such as the opening of a message, the clicks made on hypertext connections contained in the email, from which IP address or with which type of browser the email is opened, and other similar details.
WHAT ARE THE PURPOSES AND LEGAL BASES OF THE PROCESSING?
The personal data provided by the user through the specific form is used for marketing purposes (i.e. to send advertising or direct sale material or to undertake market research or commercial communication of the business and services offered by the controller through traditional means, such as phone contact with an operator, as well as automatic means, such as email, SMS and other types of message, also through DM on social networks to which the user's account refers in the case indicated).
The legal basis of the processing of the data is the agreement which can be withdrawn at any time.
Any agreement given for marketing purposes on the basis of art. 130, paragraphs 1 and 2, of Leg. Decree 196/2003 (Privacy Code), implies the receipt of promotional and commercial communications and materials, not only through automated means of contact, but also through traditional means, such as postal deliveries or operator calls.
The data acquired through the tracking system of the platform used to handle email can be processed automatically to assess the preferences and habits of the data subject (profiling) and, on the basis of this data, plan the sending of promotional communications and notices.
The legal basis of such processing is the agreement which can be withdrawn at any time.
Should it be necessary, the data can also be used given a legitimate interest of the controller, which involves verifying the security and correct functioning of the IT systems used and carrying out defensive initiatives.
HOW IS THE DATA MANAGED?
The data collected is processed with IT instruments and only residually with print-based methods. Adequate security measures are adopted to prevent the loss of data, illegal or incorrect use and unauthorized access.
Transferring data abroad
Data will be transferred outside the European Union and the European Economic Area for email services and email marketing management. In the absence of adequacy decisions by the EU Commission, data for email services will be transferred to non-EU countries, but the transfer will be accompanied by appropriate safeguards.
Data for the management of marketing campaigns will be transferred in the presence of an adequacy decision by the EU Commission; in specific, the Transatlantic Privacy Framework to which the provider adheres will be used.
Storage period
The data is kept until any request by the user to oppose its use and in any case for no more than two years from when agreement to the processing is given. The data used for profiling is kept for a year.
This is done without prejudice to any defensive needs for which the data can be kept also beyond the indicated deadlines.
WHAT HAPPENS IF THE DATA IS NOT PROVIDED
Transfer of the data is optional. Without this, it will not be possible to use the data for the marketing and profiling purposes described. Please note that the user may opt to give data for registration only, without authorizing data processing for marketing and profiling purposes.
WHO CAN SEE THE DATA
The data will be processed by employees of the Controller who are authorized to process it.
The data can be seen by companies which provide IT supply services and by consultants to manage disputes and for legal assistance should there be any disputes due to which it is necessary to involve them.
Please note that some of the indicated subjects act as controllers and others as data processors and that communication to those who operate as independent controllers is carried out since prescribed by legal obligations or is necessary to fulfil the obligations arising from the pre-contractual relationship or the legitimate interest of the controller in maintaining the security of the IT systems and in adopting defensive initiatives through legal consultants.
The data subject may request a detailed list of data recipients from the Data Controller, to the extent to which they can be identified specifically.
Please note that communication of the personal data is limited, in any event, to the data categories the transmission of which is necessary to undertake the activities and purposes being pursued.
WHAT ARE THE DATA SUBJECT'S RIGHTS?
The law recognizes for the data subject the right to ask the Data Controller for access to the personal data and its rectification or cancellation or limitation of the processing regarding them or to object to its processing, as well as the right to data portability.
In particular, it is noted that there is the possibility to object to the processing of data done for marketing purposes.
The data subject may assert their rights at any time, without formalities, by contacting the Controller through the email privacy@bkt-tires.com
Here below is a breakdown of the rights recognized by the law in force on the protection of personal data.
Please note the right to object, in particular, i.e., the data subject's right to object at any time, on grounds relating to their particular situation, to the processing of their personal data as required for the performance of a task carried out in the public interest or in connection with the exercise of the official authority vested in the controller or for the furtherance of the legitimate interests of the Data Controller or of a third party. Should the personal data be processed for direct marketing purposes, the data subject has the right to oppose at any time the processing of the personal data regarding them undertaken for these purposes, including profiling to the extent this is connected to such direct marketing.
The data subject is then informed that if they believe that the processing of their personal data is violating the provisions of the GDPR, they have the right to file a complaint with a Supervisory Authority (Art. 77 of the Regulation) or to take appropriate legal action (Art. 79 of the Regulation).