Privacy Policy
INTRODUCTION
The protection of personal data is an important commitment for BRITEK (hereinafter "BRITEK" or "Company").
The entry into force of Regulation (EU) 2016/679 "Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data" (hereinafter "GDPR") has provided the opportunity to further adapt the activities carried out by the Company to the principles of transparency and protection of personal data, respecting the fundamental rights and freedoms of all data subjects, whether they are employees, collaborators, customers, suppliers or third parties interested in receiving information. BRITEK has thus implemented an "Organisational Privacy Model" (MOP) aimed at analysing all data processing, organising them in a functional way and managing them in security and transparency. This section of the site contains information on the rights of the data subject and the modalities to exercise them against the Controller.
INDEX
1. DATA CONTROLLER
2 - TRANSPARENCY AND RIGHTS OF THE DATA SUBJECT
2.1 - PERSONAL DATA PROTECTION RIGHTS
2.2 - EXERCISE OF RIGHTS
2.3 - FORMS AND INFORMATION NOTICES
1 - DATA CONTROLLER
The Data Controller is:
BRITEK (hereinafter also referred to as “CONTROLLER”)
Registered office in ZI de Maltęte, 56140 Pleucadeuc (France)
Tax code FR93384114013
Tel. +33 02 9726 9191 - +33 02 9726 9496
Email: info@britek.com
2 - TRANSPARENCY AND RIGHTS OF THE DATA SUBJECT
2.1 PERSONAL DATA PROTECTION RIGHTS
The CONTROLLER, in this notice, deems it essential to inform the data subjects of the existence of some rights regarding the protection of personal data, listed below.
• Right to be informed (transparency in data processing)
The data subject has the right to be informed on how the CONTROLLER processes your personal data, the purposes and with regard to other information envisaged by art. 13 of the GDPR. To this end, the CONTROLLER has set up organisational processes that allow, at the time of acquisition or request of the personal data, the release of an information model created "ad hoc" depending on the category of data subjects to which the data subject belongs (employee, customer, supplier, etc.). This document allows all parties to whom the data refer to be adequately informed on how the data is processed by the CONTROLLER. The information form can be requested by sending a specific application addressed to the CONTROLLER.
• Right to withdraw consent (art. 13)
You have the right to withdraw your consent at any time for all processing the legitimacy of which is an expression of your consent. The withdrawal of consent does not affect the lawfulness of the previous processing.
• Right of access to the data (art. 15)
You can request a) the purposes of the processing; b) the categories of personal data in question; c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular if recipients of third countries or international organisations; (d) where possible, the foreseen retention period of the personal data or, if not possible, the criteria used to determine this period; e) the existence of the right of the data subject to request that the data controller rectify or erase personal data or limit the processing of personal data concerning him/her or to object to their processing; f) the right to lodge a complaint with a supervisory authority; g) if the data are not collected from the data subject, all information available on their origin; (h) the existence of an automated decision-making process, including the profiling referred to in article 22, paragraphs 1 and 4 and, at least in such cases, significant information on the logic used and the importance and expected consequences of such processing for the data subject. You have the right to request a copy of the personal data being processed.
• Right of rectification (art. 16)
You have the right to request the rectification of inaccurate personal data concerning you and to have incomplete personal data completed.
• Right to erasure (right to be forgotten) (art. 17)
You have the right to obtain from the data controller the erasure of personal data concerning you if the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, if you withdraw consent, where there are no overriding legitimate grounds for the processing, if the data are being processed unlawfully, if there is a legal obligation to erase them; if the data relate to web services provided to minors without the relative consent. The erasure can occur unless the right to freedom of expression and information prevails, if the data are kept for the fulfilment of a legal obligation or for the performance of a task carried out in the public interest or in the exercise of public powers, for reasons of public interest in the health sector, for purposes of archiving in the public interest, for scientific or historical research or for statistical purposes or for the establishment, exercise or defence of a right in court.
• Right to restriction of processing (art. 18)
You shall have the right to obtain from the controller restriction of processing when you have contested the accuracy of the personal data (for a period enabling the controller to verify the accuracy of the personal data) or if the processing is unlawful but you oppose the erasure of the personal data and request the restriction of their use instead, or the Controller no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims.
• Right to data portability (art. 20)
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller, if the processing is based on consent, on the contract and if the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in connection with the exercise of official powers and such transmission does not infringe the rights of third parties.
• Right to object (art. 21)
You have the right to object, in whole or in part, at any time to the processing of your personal data if the processing is carried out for the pursuit of a legitimate interest by the Controller or for the purposes of direct marketing.
• Right to lodge a complaint to the Italian Personal Data Protection Authority (art. 77).
Without prejudice to any other administrative or judicial remedy, if you deem that the processing regarding you infringes the regulation on the protection of personal data, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State in which you habitually reside, work or where the alleged infringement occurred.
2.2 EXERCISE OF THE RIGHTS For the actual exercise of your rights you can ask the CONTROLLER for information, or fill out the access forms that we have made available below.
2.3 FORMS AND INFORMATION NOTICE
1) Below is a draft document to be completed for the practical exercise of the rights of the data subject. The form can be sent to the CONTROLLER to the addresses above, in accordance with current legislation. Form to be printed and filled in, specifying the requested right
• Form for the exercise of rights
2) Information notices:
• Customers_suppliers information notice
• Information notice form requesting website information
• Information notice for job applications