Dear Customer,
In compliance with the obligations set out in the European Privacy Regulation EU / 2016/679 (GDPR), we hereby inform you that Borgata SRL, with registered office in Via Farini 21, CAP 40124, City Bologna, Province BO, PEC borgata@pec.it, VAT number 03380951206, tax code 03380951206, registered in the Companies Register of BO, number REA BO 514779, as Data Controller will process personal data concerning you and that have been or may have come to us – from you or from other subjects – conferred / communicated during the relationship with our structure.
The processing of data, freely provided by you or otherwise collected, will be carried out in compliance with the privacy regulations in force; based on the principles of correctness, lawfulness and transparency and carried out in compliance with the principles of relevance, completeness and not excess.
The data will be collected and recorded only for the purposes referred to in point 1) and will be kept for these purposes for a period not exceeding 10 years from their collection for administrative and accounting purposes and not exceeding 24 months from their collection for the purpose of marketing.

1.Therefore, according to the provisions of article 13) of the European Privacy Regulation EU / 2016/679 (GDPR), we inform you that the data you provide will be processed for the following purposes:

• For the smooth performance of institutional and / or activities envisaged by the corporate purpose;
• For needs related to the stipulation of contracts and assignments, to the relative execution, to subsequent modifications or variations and for any obligation foreseen for the fulfillment of the same;
• For operational, organizational, managerial, fiscal, financial, insurance and accounting needs related to the contractual and / or pre-contractual relationship established;
• To fulfill any type of obligation provided for by laws, regulations or community legislation;
• For the registration, management and storage of logs of any access to the company website, the company information system and company offices;
• For access control, corporate security and video surveillance purposes;
• For the purposes of monitoring the methods of delivery of products / services, the progress of relations with suppliers and the analysis and management of the risks associated with the contractual relationship;
• For traditional marketing activities such as: sending brochures, catalogs and commercial and / or technical documentation by paper mail and phone calls with the operator (after obtaining your explicit consent);
• For marketing activities with automated or similar tools such as: E-mail, Instant Messaging, Chat and phone calls without operator (subject to the acquisition of explicit consent by you);
• For online marketing, web marketing and web advertising activities (subject to the acquisition of your explicit consent). – n) For profiling and / or management of automated decision-making processes (after the acquisition of Your explicit consent).

2. The treatment will be carried out in a partially automated way and may consist of the following operations:

• Collection, registration, organization and conservation;
• Consultation and use;
• Selection, extraction, comparison;
• Interconnection.

The treatment will be carried out both with the use of paper supports and with the aid of electronic, IT and telematic tools suitable for guaranteeing the security and confidentiality of the data in accordance with the provisions of art. 32) of the European Privacy Regulation EU / 2016/679 (GDPR).
In carrying out the processing operations, however, all technical, IT, organizational, logistical and procedural security measures will always be adopted, so that the minimum level of data protection required by law is guaranteed. The methodologies mentioned above, applied for the treatment, will guarantee access to the data only to the subjects specified in points 4) and 5).

3.The provision of data is:

• Indispensable and does not require your consent for all essential personal data for a correct establishment, management and continuation of the commercial and / or contractual relationship;
• Optional for data whose consent is required.

Any refusal, albeit legitimate, to provide all or part of the above data, could compromise the smooth running of the relationship with our structure and in particular, for the personal data defined as mandatory and indispensable, could result in the impossibility on our part to carry out the normal course of business operations and the regular supply of the requested products / services.

4. The subjects or categories of subjects who may become aware of the data or to whom the data may be communicated are as follows:

• Legal representative of the Data Controller;
• Data Processors (Customer Service, Marketing);
• Persons in charge of the treatment.

Personal data may also be disclosed, but only in aggregate, anonymous form and for statistical purposes.

5. If the processing could also concern personal data falling within the category of “particular” data (ie data suitable to reveal racial and ethnic origin, religious, philosophical or other beliefs, political opinions, adherence to parties , trade unions, associations or organizations of a religious, philosophical, political or union nature, as well as personal data suitable for revealing the state of health and sexual life), the treatment will be carried out within the limits indicated by the General Authorizations of the Privacy Guarantor, according to the methods provided for by Legislative Decree 196/03, as modified by Legislative Decree no. 101/2018, and for the purposes strictly necessary for the smooth conduct of the business, the operations relating to the supply of products / services and the fulfillment of contractual and / or legal / regulation obligations.
In this case, the subjects or categories of subjects who may become aware of the sensitive data or to whom the data may be communicated are as follows:

• Legal representative of the Data Controller;
• Persons in charge of the treatment.

6. Personal data may also be disclosed to public bodies, police forces or other public and private subjects, but exclusively for the purpose of fulfilling legal obligations, regulations or community legislation. The data in question will not be disclosed to other subjects other than those provided for in this statement and the data suitable for revealing the health status of the interested party will not in any case be disclosed.

7. The data may be processed and transferred, for the purposes referred to in point 1) and in the manner referred to in point 2), also to subjects allocated in countries belonging to the European Union and / or outside the European Union on the basis of an Adequacy Decision of the European Commission.

8. In any case, you can always ask the Legal Representative of the Data Controller at any time for a copy of your personal data, information regarding the location where your personal data are processed and an updated list with the identification details of all the Data Processors. and System Administrators authorized to process your data.

9.At any time, you can freely revoke the consent given, without any burden and prejudice for the lawfulness of the processing carried out up to that moment, and exercise the following rights of the interested party towards the Data Controller as provided for by the European EU Privacy Regulation / 2016/679 and Legislative Decree 196/03, as modified by Legislative Decree no. 101/2018:

• Access
• Correction
• Cancellation
• Opposition

Borgata SRL