1.6 Specific privacy policies provided by the Controller on or off Bakel sites or through different IT channels from the Websites will remain in place.
2.1 Bakel will process your Personal Data (hereinafter, the "Data Processing") in full compliance with Articles 6, 7 and 8 of the GDPR and, in particular, with the principles of fairness, lawfulness, transparency and protection of confidentiality.
2.2 Your Personal Data will be processed in accordance with Article 4.2 of the GDPR and specifically by: collection, recording, organization, storage, consultation, disclosure by transmission, dissemination, erasure and destruction of your Data.
2.3 Personal Data Processing will take place both manually and by means of electronic devices, computerized, telematic and/or automated instruments, in accordance to the purposes and in compliance with the principles stated within the GDPR. The Data Processing will always be carried out through appropriate technical and organizational measures to guarantee the protection, security and confidentiality of your Personal Data. These measures have been specifically implemented by Bakel to prevent losses or destructions of data, unauthorized accesses, processing that are not allowed or not in accordance with the purposes for which Personal Data were collected.
2.4 Your Personal Data will be stored for a period of time not exceeding the period of time necessary to achieve the Purposes (as defined in Paragraph 4.1 below) for which they have been collected and in full compliance with the provisions of GDPR. In particular, Personal Data processed by Bakel in order to fulfill the accounting obligations and the general rules, relating to the ordinary prescription terms of contractual actions, will be stored for the period required by local regulations in force from time to time.
2.5 Personal Data processed for newsletter and marketing purposes (as defined in Paragraph 4.2 below) will be stored until Bakel shall have received a specific request to change your preferences in relation to Personal Data Processing for the aforementioned Purposes.
3. As you browse on the Websites, Bakel may acquire different types of information (hereafter, collectively, "Personal Data"), such as:
Your Personal Data will be used for the following purposes (hereinafter, collectively, the "Purposes"):
4.1 Your Personal Data will be used even without your express consent:
4.2 Your Personal Data will be used only and exclusively upon your express consent:
4.3 The consent provided for the aforementioned Purposes in the previous Paragraph 4.2 may be at any time withdrawn and the Processing for those Purposes will stop. The withdrawal of consent shall be communicated to Bakel as set forth in Paragraph 7 below. The withdrawal of consent is presumed to be completed but you may in any event choose to continue using the Services in part.
4.4 Your Personal Data may be crossed with other Personal Data in lawful possession of Bakel (such as those you provided through other IT channels other than the Websites or through paper forms).
5.1 Personal Data, as defined herein in Paragraph 3, point (i), are granted through access to the Websites (hereinafter, “Data Granting”).
5.2 Personal Data Granting for the Purposes foreseen by Paragraph 4.1 above is optional. In the event of non-submission of Personal Data qualified as “mandatory", in accordance with Paragraph 3, point (ii) above, in the specific forms, you will not be able to use the Services of the Websites. The non-submission of Personal Data qualified as “non-mandatory”, as defined in Paragraph 3, point (iii) above, instead, will allow you to use such Services with reduced functionality.
5.3 Personal Data Granting for newsletter and marketing purposes, as set forth in the preceding Paragraph 4.2, points (i) and (ii), is always free and optional but is necessary to ensure you a high performance while using the Services offered from the Websites. The non-submission of those Personal Data will, in fact, prevent Bakel from providing you such Services.
5.4 On the contrary Personal Data granting for the profiling purposes set forth in Paragraph 4.2, point (iii) above, is needed for a better use of the Services foreseen by Paragraph 4.2, points (i) and (ii) above, whereby the withdrawal of consent will not affect the provision of the latter.
6.1 Your Personal Data may be processed only by parties that Bakel - in accordance with the provisions of GDPR - have appointed as Processor(s) (hereinafter “Data Processor(s)”).
6.2 Your Personal Data may also be disclosed to third parties, acting on behalf of Bakel under specific contractual obligations and, in any case, appointed as entrusted persons (hereinafter, “Data Entrusted”) or External Managers of Data Processing, as well as distributors.
6.3 Personal Data processed by Bakel are stored on servers established in countries that are members of the European Union. Bakel, in case of need, will have the right to move servers in countries that are non UE Members. In such cases, Bakel hereby ensures you that the transfer of Personal Data in non-EU servers will take place in accordance with the applicable legal provisions, and with the standard contractual clauses to be adopted by European Commission.
6.4 Your Personal Data may be disclosed to third parties in compliance with legal obligations, or orders from public authorities, or in order to enforce a right in court.
6.5 The cases foreseen in the previous Paragraphs are mandatory. Consequently, Personal Data processed by Bakel will not be disclosed but for the cases foreseen by previous Paragraphs.
7.1 Bakel informs you that you have the right to:
8.1 The Data Controller is Bakel S.r.l., represented by the managing director in charge from time to time and with registered office in Viale del Ledra, 56 - 33100 Udine (UD).
8.2 Moreover, the interested party can send an email to Bakel Data Processor attention to the address firstname.lastname@example.org , in order to know the full list of Data Processor(s) and Data Entruster(s), or to have any further information concerning privacy issue.
Data Processing shall be governed by additional provisions of the GDPR not mentioned herein and, as still in force, by those of the Privacy Code.