POLICY REGARDING THE PROCESSING OF PERSONAL DATA OF USERS ONLINE
PURSUANT TO REGULATION (EU) 2016/679, (“GDPR”)
PERSONAL DATA PROCESSED
PURPOSE OF DATA PROCESSING
- Allow the browsing service to function properly on the site https://www.bullfrogbarbershop.com/
- Collect anonymous statistical information on the use of the site https://www.bullfrogbarbershop.com/
DATA STORAGE PERIOD
At the end of the aforementioned periods of conservation, the data will be destroyed, cancelled or made anonymous.
MANDATORY NATURE OF THE PROVISION OF DATA
The processed data is essential for browsing the site.
RECIPIENTS OF THE DATA
The data can be processed by external entities operating as autonomous Data controllers such as, for example, supervisory authorities and bodies.
The data may also be processed on behalf of the Company by external entities designated as Data processors, who are provided with appropriate operating instructions. Said entities are fundamentally included in the following categories:
- companies which offer services necessary for the fulfilment of the purposes indicated in this policy (media agencies, IT suppliers, web service agencies);
- companies offering support in the carrying out of market studies.
ENTITIES AUTHORISED FOR PROCESSING
The data may be processed by employees of the business functions charged with the fulfilment of the purposes indicated above, who are expressly authorised for the processing and have received appropriate operating instructions.
TRANSFER OF PERSONAL DATA TO COUNTRIES OUTSIDE OF THE EUROPEAN UNION
There is no provision for the transfer of data outside of the European Union.
RIGHTS OF THE DATA SUBJECT – LODGING OF COMPLAINTS WITH THE SUPERVISORY AUTHORITY
By contacting the Privacy Office, by mail, at the address Bullfrog S.r.l., Via Giorgio e Guido Paglia, no. 1/D, 24122, Bergamo, Italy, or by email at the address firstname.lastname@example.org, data subjects may ask the Data controller for access to the data concerning them, its erasure, the rectification of incorrect data, the completion of incomplete data, the restriction of processing in the cases provided for by article 18 of the GDPR, as well as object to processing in the eventual legitimate interests of the Data controller.
Data subjects also, in the case in which the processing is based on consent or contract and is carried out with automated tools, have the right to receive the data in a structured, commonly used, machine-readable and interoperable format, and, if technically possible, to transmit it to another controller without hindrance.
Data subjects have the right to lodge a complaint with a supervisory authority in the Member State of his or her habitual residence, place of work or place of the alleged infringement.