Privacy Policy pursuant to Article 13 Reg. UE 27 April 2016 n. 679

Dear User,
We wish to inform you that the European Regulation no. 2016/679 ("GDPR") provides that the subject processing personal data is required to inform the interested party (i.e. the subject to whom the data refer) on certain elements that qualify the processing, which must be done with correctness, lawfulness and transparency, protecting the privacy and rights of the individual concerned. In accordance with the art. 13 of the aforementioned Regulation. We therefore provide you with the following information.

GENERAL PRINCIPLES OF TREATMENT
The processing will be carried out through the collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction and will be carried out by the owner, by the managers and by the persons authorized to process.
The data will be processed in a lawful, correct and transparent manner; they will be collected for specific, explicit and legitimate purposes and processed in a way that is not incompatible with these purposes; they will be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed, accurate and updated; they will be treated with the utmost confidentiality, mainly with electronic and computerized tools and stored both on computer media and on paper, and on any other type of suitable support, in compliance with the principles set by the European Regulation on the protection of personal data, prescriptions issued by the Supervisory Authority and in any case in such a way as to guarantee adequate security, including protection, with appropriate technical and organizational measures, unauthorized or illicit treatment or even accidental loss. The data will be stored in a form that allows the identification of the data subject for the time strictly necessary to achieve the purposes for which they were processed.

1. DATA CONTROLLER
Data Controller is BrainSoftware S.r.l. located in Onè di Fonte (TV), Via Roma 25/A, VAT number: 02411190263.
For the purposes of exercising the rights provided for by the Regulations and for any request relating to your personal data, you may contact the Data Controller, sending a communication to the email address: This email address is being protected from spambots. You need JavaScript enabled to view it..

2. PURPOSES
Data are collected and processed for sending informative and promotional material and / or for commercial communications regarding the products supplied by BrainSoftware S.r.l. and news on existing products, also by sending newsletters.
The treatments referred to in this statement are based on the art. 6 paragraph 1 letter. a) of the European Regulation: "the interested party has given his consent to the processing of his personal data for one or more specific purposes".

3.PROCESSING METHODS
Data collected are processed, exclusively by authorized parties, with automated and non-automated tools, in ways that guarantee the security and confidentiality of the data and for the time necessary to achieve the purposes for which they were collected. The provision of data is optional for the purposes described above. Any refusal to provide us, in whole or in part, with your personal data or authorization for processing could make it impossible for BrainSoftware S.r.l. to provide the services indicated under "Purpose". The personal data covered by this information are not processed by automated decision-making processes.

4. CATEGORIES OF PROCESSED DATA
Data collected for the aforementioned purposes are common personal data such as: name, surname, e-mail address, name of the company, nr. phone.

5. RECIPIENTS OR CATEGORIES OF RECIPIENTS
Personal data of which the writing Structure will come into possession are not subject to disclosure. The same may be the subject of communication within BrainSoftware S.r.l. and may be known by authorized persons and data processors appointed by BrainSoftware S.r.l.

6. DATA RETENTION
Personal data you provide will be stored by the Structure in accordance with the requirements of current legislation in civil, fiscal and administrative matters concerning the storage of data and, in any case, for a period of time not exceeding 24 months from the consent. A longer period of data storage may possibly be determined by requests made by the Public Administration or by another judicial, governmental or regulatory body or by the participation of the undersigned company in judicial procedures that involve the processing of the personal data supplied by you.

7. DATA TRANSFER TO THIRD COUNTRIES
BrainSoftware S.r.l. does not intend, at present, to transfer your personal data to third countries with respect to the European Union.
In any case, if this happens, BrainSoftware S.r.l. guarantees that this transfer will take place:
- to countries outside the EU that the European Commission has deemed to guarantee an adequate level of protection (Article 45 of the GDPR) or upon the stipulation of standard contractual clauses approved by the European Commission;
Any exceptions to the above can only take place in compliance with art. 49 GDPR.

8. RIGHTS RECOGNIZED TO INTERESTED PARTY
The interested party has the right to obtain access to personal data from the data controller. In particular, the interested party has the right to obtain the indication: a) of the origin of personal data; b) of the purposes and methods of the processing; c) of the logic applied in case of treatment carried out with the aid of electronic instruments; d) updating or correction; e) the deletion or limitation of the processing of data concerning him (transformation into anonymous form, blocking of data processed in violation of the law, including those whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed).
The data subject also has the right to data portability.
The interested party has the right to withdraw consent to the processing of personal data. In any case, the withdrawal of the consent to the processing does not affect the lawfulness of the treatment based on the consent given before the revocation.
The interested party has the right to lodge a complaint with the Supervisory Authority, represented in Italy by the Personal Data Protection Authority, based in Roma, Piazza Monte Citorio, 121.

9. NON - EXISTENCE OF AN AUTOMATED DECISION MAKING PROCESS
The undersigned organization does not use automated decision-making processes.

Data controller
BrainSoftware S.r.l.