Privacy Policy — BTC srls

1. Data Controller

BTC srls
VAT: 11731170012
Email: info@btcsrl.com

2. Purpose of Processing

Personal data collected is used for:

Management of contractual and pre-contractual relationships;
Provision of agreed-upon services;
Administrative, accounting, and tax obligations;
Sending promotional communications (only with specific consent pursuant to Art. 23 of Legislative Decree 196/2003 and Art. 6 and 7 of the GDPR);
Responding to information and contact requests submitted through the website form.

3. Legal Basis

Processing is based on:

Contract performance (Art. 6.1.b GDPR);
Legal obligation (Art. 6.1.c GDPR) for tax and accounting obligations;
Data subject's consent (Art. 6.1.a GDPR) for promotional communications.

4. Processing Methods

Processing is carried out using electronic and/or paper means, with logic strictly related to the purposes indicated and in compliance with current regulations on personal data protection. All operations are performed in accordance with the security measures set out in Annex A of Legislative Decree 196/2003 and the GDPR.

5. Categories of Data Processed

Identification data: first name, last name, company name, address, VAT number;
Contact data: email, phone;
Financial data: bank details, billing information;
Browsing data: IP address, cookies (see Cookie Policy).

6. Data Retention Period

Data will be retained for the duration of the contractual relationship and subsequently for the statutory limitation periods required by law:

Contractual and tax data: 10 years from the last transaction (Art. 2220 of the Italian Civil Code);
Data for promotional purposes: until consent is withdrawn;
Browsing data: maximum 12 months.

7. Data Subject's Rights

The data subject has the right to:

Access (Art. 15 GDPR): obtain confirmation as to whether or not personal data processing is taking place;
Rectification (Art. 16 GDPR): obtain the rectification of inaccurate data;
Erasure (Art. 17 GDPR): obtain the deletion of data ("right to be forgotten");
Restriction (Art. 18 GDPR): obtain restriction of processing;
Portability (Art. 20 GDPR): receive data in a structured format;
Objection (Art. 21 GDPR): object to processing for legitimate reasons;
Complaint: file a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

8. Categories of Recipients

Data may be disclosed to:

Commercial and tax consulting firms;
Social security and tax authorities;
Consultants and third parties engaged by the Company in the performance of the contract;
IT and cloud service providers (exclusively as data processors pursuant to Art. 28 GDPR).

9. Transfers Outside the EU

No transfers of personal data are planned outside the European Economic Area (EEA), except for technical requirements related to the use of cloud services compliant with the EU-US Privacy Shield or based on Standard Contractual Clauses (SCC).

10. Automated Decision-Making

No automated decision-making, including profiling, is envisaged that produces legal effects or similarly significant effects on the data subject.

11. Changes to This Privacy Policy

BTC srls reserves the right to update this Privacy Policy. Changes will be published on this page with the date of the last update.