PRIVACY POLICY

PRIVACY STATEMENT TO CUSTOMERS AND THEIR REPRESENTATIVES ON THE PROTECTION OF THEIR PERSONAL DATA

(Article 13 of Regulation (EU) 2016/679)

BEAR Project Management Srl, based in Milan, Via Giovanni Prati 9, respects your privacy concerns. Hence, hereby wishes to inform you for what purposes your personal data is used and how it is protected, and to request that you give your consent to its processing.
Your personal data may be processed for the following purposes:

• for contractual requirements;
• for service provision requirements;
• to fulfil legal and tax obligations;
• for administrative purposes;
• for the purpose of monitoring your satisfaction or handling complaints;

The processing of data for purposes other than the above can only take place with your explicit consent.

Processing scope

BEAR Project management’s data processing scope covers: the collection, registration, organisation, storage, modification, extraction, portability, limitation, cancellation and destruction of your data.

Processing method

Your data will be processed either in hard copy or in electronic form, depending on the purpose for which it is processed, either by internal or external collaborators of BEAR Project Managemente. Both the internal or external collaborators of BEAR Project Management have signed specific letters of appointment, in compliance with the obligations of fairness, lawfulness and transparency imposed by the Regulation and protecting your
privacy and rights.
The databases in which your personal data is stored meet the security requirements established pursuant to articles 24 and 25 of the EU Regulation. Access to the databases by both internal and external persons in charge of processing is regulated by our Privacy Organisational Model. Access is enabled depending on the tasks and responsibilities of the persons in charge of processing who liaise with you.

Nature of personal data

The following data may be subject to processing:
Personal and business contact information (such as name, surname, company role, company name, postal address, e-mail address, telephone and fax number), and other personal information we may require to customise a service according to contract.

Mandatory nature of the conferment of personal data

The conferment of your data is necessary to fulfil contractual, legal, administrative and fiscal obligations. Failure to communicate or the incorrect disclosure of your personal data may affect the Data Controller’s ability to comply with the contractual agreements or the obligations imposed by current legislation.

Scope of communication and dissemination of data

Your data will not be disseminated externally. BEAR Project Management may only communicate
same to:

•  competent authorities, for auditing or inspection purposes;
• banks and credit institutions, for purposes related to contractual and administrative obligations;
• BEAR Project Management agents, to finalise the business relationship;
• lawyers, accountants, insurance companies, for purposes related to the implementation of the contractual relationship;
• staff and consultants (for the provision of services at special times or locations, requiring you and the BEAR Project Management professional to be put into direct contact), for purposes exclusively related to the fulfilment of the service covered by the contract with BEAR Project Management.

In this regard, please note that BEAR Project Management Srl accepts no liability for the processing of your personal data by a consultant appointed by BEAR Project Management whom you allow to use your personal data after the conclusion of the service contracted with BEAR Project Management. BEAR Project Management requests its staff and consultants to sign a binding confidentiality agreement based on the relationship between BEAR Project Management and the
professional.
Any further communication will take place only with your explicit consent.

Maximum retention period

Your data collected for mandatory purposes will be stored by BEAR Project Management for the period of time provided for by current legislation; instead, data collected for other purposes will be stored and used until you exercise your right of revocation.

Rights of the data subject

You can exercise your rights of access (Article 15), rectification (Article 16), erasure/’right to be forgotten’ (Article 17), restriction of processing (Article 18), and data portability (Article 20) under the EU regulation, by contacting the Data Controller or the Data Processor (e-mail: segreteria@bearpm.com).

Revoking consent

In accordance with the available choices and as required by current law, you may revoke your previous consent or raise objections to the processing of your data at any time, for legitimate reasons and without charges, by contacting the Data Controller or the Data Processor (e-mail: segreteria@bearpm.com), and in the future we will apply the preferences expressed by you.
The Data Controller is BEAR Project Management, in the person of its legal representative, and sole administrator We hereby offer you some choices on how we can communicate with you and the information that concerns you that we can collect:

• You may choose not to receive commercial communications by e-mail by clicking on the link found therein (this cancels registration).
• You can also ask us not to send you further commercial communications by contacting us via our website or by sending an email to segreteria@bearpm.com.