User’s Personal Data are used by BLOOM SRL, who is the owner for the processing, in compliance with the principles of protection of personal data established by GDPR 2016/679 and national legislation in force.

 

SOURCE OF PERSONAL DATA

The personal data collection is carried out by BLOOM SRL recording data:

• collected directly by the subject involved, at the moment of initial contact or through following communications
• provided by third parties

 

METHODS AND PURPOSES OF DATA PROCESSING

1. We inform you that data will be processed through the following methods:

• Computerised method

And with the following purposes:

• Attività di consulenza
• Fulfilment of legal obligation
• Consulting activities
• Marketing activities
• Data communication to third parties in order to carry out technical tasks and activities that are necessary for the service
• Providing of the service
• Planning of activities
• Profiling for promotional purposes
• Staff recruiting, selection, evaluation, monitoring: employee placement abroad
• Staff recruiting, selection, evaluation, monitoring: vocational training
• Marker search, statistical studies, checks of customer satisfaction regarding products
• Corporate activities

 

LEGAL BASIS

2. The legal basis on which data processing for common data is based, according to Art. 6 of GDPR are: 

• Law;
• Contract;
• Consent;

The legal basis on which data processing for particular categories of data is based, according to Art. 9 of GDPR are:

• Law;
• Contract;
• Consent;

Data provision is mandatory for all that is required by legal and contractual obligations. Therefore, any total or partial refusal to provide them might prevent the company from fully provide the requested services.

The company processes user’s optional data according to consent, through explicit approval of the present privacy policy and in relation to methods and purposes described below.

 

CATEGORIES OF RECIPIENTS

3. Notwithstanding the communications made in compliance with legal and contractual obligations, all data collected and processed may be communicated exclusively for the purposes listed above to the following categories of recipients:
   • Consultants and freelancers also in associated form;
   • Subjects involved;
   • Vocational training institution;
   • Authorized subjects;
   • External responsible;
   • Internal responsible;
   • Companies and enterprises;

In addition, while processing your data, other categories of authorized persons a/o internal and external persons may be made aware of your data. It is necessary to provide those persons with specific written instructions concerning the processing of the data.

 

CATEGORIES OF PERSONAL DATA

4. According to Art. 14 of GDPR, the following personal data, subjected to processing, have not been collected from the data subject:
   • Customer database;
   • Curriculum of studies, publications, articles, monographs, reports, audiovisual material, educational qualifications, etc. ;
   • Electronic communication data
   • Marketing and sales data;
   • Identification data (company name, name and surname of natural persons, address, telephone, fax, e-mail, tax data, etc
   • Data related to the family and personal situations (marital status, minors, children, dependents, relatives, other members of the family)
   • Data related to work performance;
   • Data on behaviour (creation of user profiles, consumers, taxpayers, etc.; personality and character profiles)
   • Employment (current and previous employment, information on recruitment, traineeship or vocational training, information on suspension or termination of employment or transition to other employment, curriculum vitae;
   • Name, address or other personal identification information (first name, surname, age, sex, place and date of birth, private address, working address);
   • Special categories (sensitive);
   • Personal;

 

STORAGE PERIOD

5. The data storage period is:

• Commercial activities: 5 years
• Training activities: data will be processed for as long as necessary to carry out the existing relationship and for the following ten years from the date of the data acquisition.
• Consulting and training activities for Coaching and Nova Profile projects: 5 years

 

RIGHTS OF THE DATA SUBJECT

6. According to GDPR 679/2016 and to the national legislation in force, the data subject is able to exercise his rights, through the methods and the limitations envisaged in the current legislation:

• Ask for confirmation of the existence of personal data concerning him (right of access by the data subject – art. 15 GDPR 679/2016);
• Become aware of its origin;
• Receive intelligible communication;
• Have information about the logic, methods and purposes of the processing;
• Request the updating, rectification, integration, cancellation, transformation into anonymous form, the blocking of data processed in violation of the law, including those no longer necessary for the pursuit of the purposes for which they were collected (right of rectification and erasure – art. 16 and 17 of GDPR 679/2016)
• Right to restriction of processing (art. 18 of GDPR 679/2016);
• Right to withdraw;
• Right to data portability (art. 20 of GDPR 679/2016);
• In case of processing based on consent, receive the data provided to the holder in a structured and readable form by a data processor and in a format commonly used by an electronic device;
• Right to lodge a complaint with a supervisory authority (right of access by the data subject – art. 15 of GDPR 679/2016).

 

7. The data controller for your data is BLOOM SRL, vat 13739691007
8. The responsible for the processing of your data is VIRDIA LUCA, c.f. VRDLCU71D30H501P

 

Email: info@bloomlife.it;

Certified e-mail: bloom_srl@pec.it

Telephone: 3924342601