On this page, the methods and principles of processing the personal data of users (hereinafter also referred to as Users) who browse the website www.beeduty.com (hereinafter also referred to as the Site) are described. This privacy notice is provided in accordance with Article 13 of GDPR No. 679/2016 and Legislative Decree 196/2003 (Personal Data Protection Code) to all Users who, by interacting with the Site, provide their personal data to BEEDUTY. The validity of the information contained on this page is limited to the Site only and does not extend to other websites that may be accessible via hyperlinks. The Data Controller for the collected data is: BT consulting S.r.l., with registered office at Via Viani, 15 24026 Leffe (BG) – Tax Code and VAT No.: 04503440168 (hereinafter referred to as the Controller), which can be contacted at the email address: [email]. The processing of data related to the information request form takes place at the company’s registered office and is carried out using electronic tools, with the adoption of appropriate security measures, by personnel assigned to the processing.
Types of Data, Purposes of Processing, and Legal Bases
All personal data provided through the Site will be processed lawfully and fairly to provide the requested services and respond to user inquiries and communications, always in pursuit of the Controller’s institutional purposes.
- Data voluntarily provided Users can send requests and communications through the contact details provided on the Site. Providing such data is not mandatory; however, it is necessary to respond to the requests submitted and provide feedback, as well as to recontact the sender for further clarifications. Therefore, if the User (data subject) wishes to avoid the processing of their personal data by the Controller, they are advised not to submit any requests or to provide the minimum amount of personal data possible (e.g., in case of an email submission). The data collected for this purpose include name, surname, email, and phone number. The processing of such data is based on pre-contractual or contractual measures pursuant to Article 6(1)(b) of the GDPR.
- Data provided by the data subject for service provision Through registration and service activation, providing such data is necessary for service provision (see terms and conditions). Failure to provide the required data will prevent the requested service from being delivered and compliance with legal obligations related to the service provided (e.g., administrative, accounting obligations, etc.). The processing of such data is based on pre-contractual or contractual measures and compliance with legal obligations related to the execution of the contract (Article 6(1)(b)(c) of the GDPR).
- Browsing data This category includes IP addresses or domain names of computers used by Users who connect to the Site, addresses in URI (Uniform Resource Identifier) notation of requested resources, request times, methods used to submit requests to the server, file sizes obtained in response, numerical codes indicating the response status from the server (success, error, etc.), and other parameters related to the User’s operating system and computing environment. Browsing data is acquired not for the purpose of identifying Users but solely to collect anonymous statistical information on the use of the Site and its services, as well as to verify the proper functioning of IT systems. Data may also be used to determine liability in cases of hypothetical cybercrimes or damages to the Controller or third parties. If unlawful conduct is detected, it may be necessary to identify the perpetrator to defend a right in judicial proceedings, either for the Controller or a third party (including the data subject), pursuant to Article 6(1)(f) of the GDPR or upon request from judicial authorities or law enforcement agencies.
- Data provided for newsletter subscription Through a request to subscribe to the newsletter, providing such data is optional but necessary to receive information and updates about the industry and intervention-related topics. Failure to provide data will result in the inability to receive the newsletter. Subscription can be canceled at any time via the link included in all received emails. The data collected for this purpose include name, surname, and email. The processing of such data is based on pre-contractual or contractual measures pursuant to Article 6(1)(b) of the GDPR.
- Location-based interactions Non-continuous geolocation, data used: geographic location. The processing of such data is based on the data subject’s consent, pursuant to Article 6(1)(a) of the GDPR. Refusal does not result in any consequences, except for the inability to interact with information or services offered via the App based on the User’s location.
- Viewing content from external platforms Google Maps Widget, YouTube Video Widget, and Google Fonts, data used: Cookies and usage data. The processing of such data is based on the data subject’s consent, pursuant to Article 6(1)(a) of the GDPR. Refusal does not result in any consequences, except for the inability to view content from external platforms.
Additionally, the Controller, pursuant to Article 130, paragraph 4, of Legislative Decree 196/2003, may send Users direct marketing communications regarding products or services similar to those already purchased by the same User (so-called soft spam) without prior consent, unless the User objects to such use, either initially or in subsequent communications.
Data Disclosure, Dissemination, and Transfer
Personal data will not be disclosed and may be communicated to competent authorities or public or private entities to fulfill legal obligations. Additionally, data may be communicated to companies and professionals used by the Controller to protect its rights (e.g., accountants, lawyers, tax consultants, advisors, etc.).
Personal data collected may be processed by third-party providers acting as data processors concerning the services provided on behalf of the Controller based on specific contractual agreements, occasionally for maintenance operations, and as necessary to execute services under specific requests.
Data will not be disseminated or transferred outside the EU and/or the European Economic Area (EEA).
Criteria for Determining Data Retention Period
User data will be retained for the period necessary to fulfill legal obligations.
The data retention period depends on the purposes for which the data is processed and may vary. The criteria used to determine the applicable retention period include: (i) managing the contractual relationship with the User, (ii) handling complaints or specific requests from the User, (iii) asserting rights in judicial proceedings, (iv) compliance with applicable legal obligations (e.g., statutes of limitation for administrative and accounting obligations).
Additionally, for personal data processing carried out through cookies, please refer to the cookie policy.
User Rights
As a data subject, the User may exercise the following rights under Articles 15 to 22 and 77 of the GDPR:
- Right of access: to know which data is being processed and all related information.
- Right to rectification: to request modifications to inaccurate or outdated data.
- Right to data portability: to obtain a copy of processed data in a structured, commonly used, and machine-readable format.
- Right to restriction of processing: to limit data processing under specific conditions.
- Right to erasure: to request the deletion of data.
- Right to object: to request cessation of data processing.
- Right to lodge a complaint with the supervisory authority.
Requests to exercise these rights should be sent to app@beeduty.com or via postal mail to the Controller’s registered address. The User may also request an updated list of all data processors appointed by the Controller.
Updates
The Privacy Policy of this Site is subject to updates; Users are encouraged to periodically review its content.