Privacy Policy

PRIVACY POLICY PURSUANT TO ARTICLE 13 OF REGULATION (EU) NO. 2016/679

Pursuant to Article 13 of Regulation (EU) No. 2016/679 (hereinafter, the "GDPR"), Business Integration Partners S.p.A. (hereinafter, "BIP" or the "Data Controller") informs that personal data (hereinafter, the "Data"), collected during the enrolment and registration phase to the Alumni Platform (hereinafter, "BIP Alumni"), will be processed in compliance with the provisions of the GDPR and in accordance with the following Privacy Notice.

DATA CONTROLLER

The Data Controller is BIP, with registered office in Piazza San Babila no. 5 (20122 - Milan), tel. 02.4541521, e-mail privacy@bip-group.com.

DATA PROTECTION OFFICER - DPO

The Data Protection Officer (hereinafter, the 'DPO'), designated by the Controller, can be contacted via:

• Ordinary Mail (Raccomandata A/R), to the address: Piazza San Babila no. 5 (20122 - Milan), addressed to the DPO;
• Telephone: +39 02.4541521; and
• E-mail, at: dpo@bip-group.com.

PURPOSE, LEGAL BASIS AND METHOD OF PROCESSING 

The Data will be processed to: 

1. Allow the Data Subject to: (i) register and subscribe to BIP Alumni; (ii) network with other BIP Alumni members; (iii) actively participate in initiatives and events promoted by BIP Alumni; 
2. Allow BIP to verify the existence of the requirements for access to BIP Alumni;
3. Send to the Data Subject, by means of newsletters, informative and promotional material regarding contents, events and initiatives reserved to BIP Alumni members and professional opportunities;
4. Allow BIP to organize and manage events and initiatives reserved for BIP Alumni members.

The Processing of Data for the purpose sub a) does not require the consent of the Data Subject, as the Processing is necessary for the performance of contracts to which the Data Subject is a party or for the adoption of pre-contractual measures taken at the request of the Data Subject, pursuant to Article 6, c. 1, letter b) of the GDPR.

The Processing of Data for the purpose sub b) does not require the consent of the Data Subject, as it is necessary for the pursuit of the legitimate interest of the Data Controller, pursuant to Article 6, c. 1, lett. f) of the GDPR.

The Processing of Data for the purposes sub c) is subject to the provision of consent by the Data Subject, pursuant to Art. 6, c. 1, lett. a) of the GDPR.

The Processing of Data for the purpose sub d) does not require the consent of the Data Subject, as it is necessary for the pursuit of the legitimate interest of the Data Controller, pursuant to Article 6, c. 1, lett. f) of the GDPR.

Bip will process the Data in electronic, computerized and/or telematic form using instruments that guarantee security and confidentiality and will process the Data in accordance with the principles of correctness, lawfulness, transparency and protection of the confidentiality and rights of each Data Subject.

The Data will be included in the relevant databases and/or document archives to which only duly authorized personnel will have access.

PROVISION OF DATA

The provision of Data for the purposes under a), b) and d) is necessary in order to properly register with BIP Alumni, as well as to be able to join sponsored events and initiatives.

The provision of Data for the purpose referred to in sub c) is optional, and failure to provide consent shall not result in any obstacle to the Data Subject’s registration to BIP Alumni; however, if consent is not provided, the Data Subject may not be aware of the most recent promotions and initiatives that the Controller will offer from time to time through BIP Alumni.

CATEGORIES OF DATA RECIPIENT

The Data may be made accessible, brought to the attention of or communicated to the Data Controller's personnel duly authorized to carry out the Processing, as well as may be communicated to subjects outside the Data Controller’s organisation, who will act, as the case may be, as Data Processors or Autonomous Data Controllers.

By way of example, but not limited to, the Data may be disclosed to the following entities:

• Data Controller’s Employees and consultants;
• BIP Services S.r.l., as Data Processor, for the management and organization of the activities sponsored through BIP Alumni;
• EnterpriseJungle, Inc., as Data Processor, for the provision and usage of the BIP Alumni;
• Professional firms and/or freelancers, engaged from time to time, to enable the Data Controller to fulfil any legal obligations; 
• Bodies or Authorities to whom the Data must be communicated by virtue of legal provisions or orders of the Authorities.

TRANSFER OF DATA TO THIRD COUNTRIES

For the entire duration of the Processing, the Data will circulate within the European Union and national territory; however, for requirements strictly linked to the correct management and execution of commercial and/or contractual relations established, the Data Controller may communicate the Data to other Companies of the Bip Group or to third party companies based in countries not belonging to the European Union or the European Economic Area (hereinafter, "Foreign Companies").

In such cases, the transfer will be communicated to the Customer in advance and will be carried out only after the Standard Contractual Clauses have been concluded with the Foreign Companies, pursuant to Art. 46(1) and (2)(c) of the GDPR.

DATA RETENTION

The Data will be kept for the duration of the registration to BIP Alumni; the Data collected will be deleted upon unsubscription from BIP Alumni.

The Data for the purposes referred to in sub c) will be processed until the Data Subject proceeds to revoke the consent previously given, by means of an opt-out procedure that can be used by means of a specific link in each e-mail received.

DATA SUBJECTS’ RIGHTS

Each Data Subject is granted the rights set out in Articles 15 to 20 of the GDPR. By way of example, each Data Subject may:

1. Obtaining confirmation as to whether or not Data concerning him/her is being processed;
2. If a Processing is in progress, obtain access to your Data and information relating to the Processing, and request a copy of the Data;
3. Obtain the rectification of inaccurate Data, as well as the integration of incomplete Data;
4. Obtain, if one of the conditions set out in Article 17 of the GDPR applies, the deletion of Data concerning him/her;
5. Obtain, in the cases provided for in Article 18 of the GDPR, the restriction of Processing;
6. Receive the Data concerning him/her in a structured, commonly used and machine-readable format and request their transmission to another Data Controller, if technically feasible;
7. In the event that consent is required for the Processing of Data, each Data Subject may also revoke the consent already given at any time, without prejudice to the lawfulness of the Processing based on the consent given before revocation.

Moreover, each Data Subject has the right to object at any time to the Processing of his/her Data carried out in pursuit of a legitimate interest of the Controller. In case of opposition, his/her Data will no longer be processed, unless there are legitimate reasons to proceed with the Processing that prevail over the interests, rights and freedoms of the Data Subject or for the establishment, exercise or defense of a right of the Data Controller in court.

Finally, each Data Subject may lodge a complaint with the Italian Supervisory Authority (so called Garante per la Protezione dei Dati Personali) if he or she considers that his or her rights under the GDPR have been violated, according to the procedures indicated on the website accessible at: www.garanteprivacy.it.

The rights of the Data Subject may be exercised via the contact details of the Data Controller and/or the DPO indicated above.