Information pursuant to Art. 13 GDPR
EU Regulation 2016/679 and Legislative Decree 196/2003
We inform you that your personal data will be processed in compliance with the applicable data protection legislation, EU Regulation 2016/679 (“GDPR”) and Legislative Decree 196/2003 as amended (“Privacy Code”).
Data Protection Officer (DPO)
The Company has appointed a Data Protection Officer (DPO), who can be contacted at the following email address:
luca.confalonieri@bongiornosrl.com
Categories of personal data processed
The following categories of data will be processed:
- Personal data of individuals who contact the Company through the website or other channels to request quotations or information.
- Corporate data of entities other than individuals involved in shipping requests or shipment management.
- Data relating to goods to be shipped.
- Data relating to pick-up and delivery locations.
- Data concerning the suitability of transport vehicles and drivers for shipments requiring specific authorizations/restrictions (e.g., ADR/IMO goods, oversized loads).
- Contact person data for quotations, shipping assignments, information requests, invoicing, payments, management of outstanding amounts and disputes.
- Data required to fulfil transport, customs or administrative obligations requested by Public Authorities, Customs, Carriers, Shipping Lines, Airlines, Customs Brokers, Insurance Companies, Banks, Transport Auxiliaries and Law Enforcement, both nationally, within the EU, and outside the EU.
Purposes and legal basis of the processing
Personal data is processed exclusively for the purposes indicated by the Data Controller.
The legal basis of the processing is:
- Consent;
- Execution of pre-contractual/contractual measures of which the data subject is a party;
- Compliance with legal obligations to which the Data Controller is subject;
- Protection of vital interests of the data subject or another natural person;
- Performance of a task carried out in the public interest or in the exercise of official authority;
- Pursuit of the legitimate interest of the Data Controller or third parties.
Methods of processing
Processing may be carried out with or without the use of manual, IT or electronic tools.
Appropriate measures are adopted to ensure the security and confidentiality of the data, in compliance with legal requirements.
No automated decision-making processes will be used during processing.
Provision of personal data
Providing personal data is strictly necessary for the purposes indicated.
Total or partial refusal to provide the data may result in the impossibility of performing the shipping service.
Communication of personal data
For the purposes indicated above, personal data may be communicated to:
- Authorized personnel pursuant to Art. 29 GDPR and Art. 2-quaterdecies of the Privacy Code;
- Third-party companies appointed as Data Processors pursuant to Art. 28 GDPR.
Transfer of data abroad
Personal data may be transferred to EU countries, non-EU countries or international organizations depending on the service requested.
In the event of transfers to non-EU countries, the data subject provides explicit authorization as an exception to Arts. 45 et seq. GDPR, due to the operational needs and territorial context related to the execution of the assignment.
Rights of the data subject
The data subject may exercise at any time the rights provided for in Arts. 15–22 GDPR, including:
- Access to personal data and information on purposes, categories of data, recipients and retention period;
- Rectification of inaccurate data or completion of incomplete data;
- Erasure of data in the cases provided by GDPR;
- Restriction of processing;
- Data portability to another Data Controller;
- Withdrawal of consent without prejudice to the lawfulness of processing based on consent before the withdrawal;
- Objection to processing pursuant to Art. 21 GDPR;
- Right to lodge a complaint with the Data Protection Authority (www.garanteprivacy.it).
How to exercise your rights
The data subject may exercise their rights by writing to the Data Controller or the DPO at the contacts indicated in this policy.
Data Controller Email: bongiornosrl@bongiornosrl.com
PEC: bongiornosrl@legalmail.it
DPO Email: luca.confalonieri@bongiornosrl.com