This information notice (hereinafter, "Privacy Policy") relates to the processing of your personal data while browsing the website www.blissmilano.it (hereinafter, the "Website") carried out by EuroMilano S.p.A., with registered office in Via Lambruschini 36, 20156 Milan, VAT No. IT02775550151, e-mail euromilano@legalmail.it (hereinafter, "Data Controller"), in compliance with the applicable data protection regulations, including the EU Regulation 2016/679 ("GDPR").
The Data Controller is EuroMilano S.p.A.
As the Data Controller has registered offices in the EU, no representative has been appointed.
To complete the connection to the Website, some of your personal data are acquired. This data set includes, for example:
● the IP address of the device you are using;
● the date and time of access;
● the type of browser;
● the operating system used.
To subscribe to the Data Controller's newsletter, the following will be processed:
● first name, surname;
● e-mail.
In order to complete the 'Contact Form' request, personal and contact data (first name, last name, e-mail and telephone number) will be processed, as well as any additional information you may enter via the 'Message' field on the Contact Form.
Your personal data will be processed for the following purposes:
a) Personal data processed while browsing the Website: the provision of such personal data is a contractual obligation, without which the Website's own services could not function correctly.
b) Personal data processed through newsletter subscription in order to send commercial communications, through traditional and remote means of communication including email, SMS, social networks, instant messages, mobile applications, banners, mail and telephone, for the promotion and/or sale of products and/or services marketed by the Data Controller: the communication of such personal data is optional, and is based on your consent, without which you could not finalise your subscription to the newsletter service offered by the Data Controller.
c) Personal data processed through the Contact Form: the communication of such personal data is optional, and is based on the legitimate interest of the Data Controller in following up your contact requests through the contact form on the Website. In the absence thereof, the Data Controller will not be able to respond to such requests.
Only personal data provided in accordance with the Privacy Policy will be processed. The Data Controller will not process personal data from publicly accessible sources.
The following may be recipients of personal data:
● companies offering information society services, including, in particular, those offering hosting services, newsletters;
● companies providing sales and marketing services on behalf of the Data Controller;
● the companies that make the software available in the cloud;
● the website management and maintenance company.
● third-party service providers who assist us with client insight analysis, such as Google Analytics.
● parties performing, on behalf of or for the Controller, the duties and services of a real estate broker;
● companies associated directly or indirectly with the Data Controller.
Subjects belonging to the above-mentioned categories may act as data controllers where carried out on behalf of the Data Controller, or they may operate independently as separate data controllers. The Data Subject's Data processed by the Data Controller will not be published or disseminated in any other way.
Personal data necessary to complete your connection to the Website, subscription to the newsletter and sending your request via the Contact Form will be processed. Under no circumstances shall special personal data as defined in Article 9 of the GDPR be processed.
The Controller intends to transfer Personal Data to entities established in a country outside the European Union in compliance with applicable regulations, specifically: United States of America and Canada. Any transfer of your Data to countries outside the European Economic Area will, in any event, take place in accordance with the appropriate and adequate safeguards for the purposes of such transfer, pursuant to Articles 44 et seq. of the GDPR.
Such parties could be represented, by way of example, by:
● communications companies carrying out communications activities on behalf of the Data Controller;
● companies offering information society services;
● companies offering hosting services;
● the service providers of the communication company.
To obtain a copy of these data or the place where they were made available, simply send a request to the Data Controller at the addresses listed above.
● Personal data processed and stored for the purposes set out in point 3.a (contractual purposes) shall be processed and stored by the Data Controller in accordance with the provisions of the legislation in force, in any case for a period of time not exceeding 10 years from the termination of the effects of the contract in the event of its conclusion, unless otherwise required by law.
● Personal data processed and stored for the purposes referred to in point 3.b (marketing purposes) shall be processed and stored by the Data Controller until consent is revoked, unless otherwise required by law.
● Personal data processed for the purposes set out in point 3.c (purpose of responding to requests) voluntarily provided by e-mail or form and processed to respond to your requests shall be kept for the period of time strictly necessary to achieve this purpose and, in any event, for no longer than 12 (twelve) months from the date of individual collection.
● In relation to personal data processed for the purposes set out in Section 3.a of this Privacy Policy (contractual purposes), the disclosure of personal data is an obligation. If you do not provide such personal data, it will not be possible to provide the service of connecting and browsing the Website.
● With regard to personal data processed for the purposes set out in point 3.b of this Privacy Policy (consent), the disclosure of personal data is optional. If you do not provide such personal data, the newsletter service cannot be provided.
● In relation to personal data processed for the purposes set out in point 3.c of this Privacy Policy (legitimate interest), the disclosure of personal data is optional. If you do not provide such personal data, it will not be possible to reply to requests via the Contact Form.
As a Data Subject, you have the right to object as follows:
● the right to object at any time, on grounds relating to your particular situation, to the processing of Personal Data relating to you pursuant to Article 6(1)(e) or (f) of the GDPR. The Data Controller shall refrain from further processing your personal data, unless the Data Controller demonstrates the existence of compelling legitimate grounds for processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims;
● where personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you carried out for such purposes, including profiling insofar as it is related to direct marketing;
● in the case of opposition to processing for direct marketing purposes, personal data are no longer processed for such purposes. You may object to the processing of your personal data for direct marketing purposes even in part, e.g. by objecting only to the sending of promotional communications by automated and/or digital means, or to the sending of paper communications and/or the receipt of telephone communications;
● if your personal data are processed for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) GDPR, you have the right to object to the processing of your personal data on grounds relating to your particular situation, unless the processing is necessary for the performance of a task carried out in the public interest.
The Data Controller also wishes to inform you of the existence of the following rights:
● Right of access: you have the right to obtain from the Data Controller confirmation as to whether or not personal data concerning you are being processed and access to your personal data and specific information, in accordance with Article 15 of the GDPR;
● Right of rectification: you have the right to obtain from the Data Controller the rectification of inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you have the right to obtain the integration of incomplete personal data, including by providing a supplementary declaration, in accordance with Article 16 of the GDPR;
● Right to data deletion, including the right to withdraw consent: you have the right to obtain from the Data Controller the deletion of your personal data without undue delay or to withdraw your consent to the processing, if the grounds defined in Article 17 of the GDPR exist. You have the right to revoke your consent at any time, without affecting the lawfulness of the processing based on the consent you gave before revocation;
● Right of restriction of processing: you have the right to obtain from the Data Controller the restriction of processing when the cases defined in Article 18 of the GDPR apply;
● Right to data portability: you have the right to receive, in a structured, commonly used and machine-readable format, your personal data provided to the Data Controller and you have the right to transmit it to another Data Controller without hindrance from the Data Controller named in this Privacy Policy, as provided for in Article 20 of the GDPR;
● Contractor's right to object to commercial communications: as a contracting party, you have the right to object at any time, free of charge, to receiving commercial communications from the Data Controller;
● Right to lodge a complaint with the Data Protection Authority: you have the right to lodge a complaint with the Data Protection Authority to complain about a breach of data protection regulations, in accordance with Article 77 of the GDPR.
You may exercise the rights indicated in the Privacy Policy by addressing your requests directly to the Data Controller at the e-mail address euromilano@legalmail.it, or by sending the relevant communication by registered letter with return receipt to the address Via Lambruschini 36, 20156 Milan. You may lodge a complaint with the Italian Data Protection Authority in the manner provided for on the official website, by addressing it to the contact details available at https://www.garanteprivacy.it/home/footer/contatti.
The Privacy Policy is available on the Website or at the Data Controller's premises. If expressly requested, the Data Controller may provide the information orally, subject to proof of your identity, by means of a telephone request to the following number: +39 02 8800011.
The Data Controller may amend the Privacy Policy, also to adapt to changes in national and/or European Union legislation, or to technological innovations. Any new versions of the Privacy Policy will be posted on the Website. Please check the Privacy Policy periodically. Any changes will in any case be communicated to you by means of a pop-up on the Website or by different methods and/or computer tools.
If the Data Controller substantially modifies the Privacy Policy, providing for new purposes of processing and/or categories of personal data processed, it will inform you, requesting the necessary consents, by means of a pop-up on the Website or different modalities and/or IT tools.