This policy refers to the processing of personal data of the users of the Blossom website. Personal data are processed in compliance with the regulatory requirements set out in EU Regulation 2016/679, Legislative Decree 101/2018, and as described in this privacy policy.
1 - Data Controller, Joint Controllers and Data Protection Officer (DPO)
The Data Controller is Blossom S.r.l., Via Milano 8, 20831 Seregno (MB), e-mail: privacy@blossom.it. The Data Controller has appointed a Data Protection Officer ("DPO") who can be reached at the e-mail address dpo@blossom.it. With reference to some processing operations and data subjects, Blossom S.r.l. operates in co-ownership with the subsidiary IT's B S.r.l., also with registered office in Via Milano, 8 - 20831 Seregno, MB, Italy, email: hello@blossom.it.Il essential contents of the co-ownership agreement pursuant to art. 26 GDPR is at your disposal at Blossom Srl's head office.
2 - Information on personal data processing
Below you can find information on the personal data collected.
Purpose I - Website browsing
Categories of data processed: Non-particular personal data (including IP address)
Legal basis of the processing: legitimate interest of Blossom Srl in maintaining the security of the website and that it is not used in a way that infringes the rights of others or as a channel for committing offences or fraud
Retention period: up to 6 months from the collection of personal data
Purpose II - Contacting the user to respond to requests for information or advice
Categories of data processed Non-particular personal data
Legal basis of the processing: to fulfil specific pre-contractual requests made by the user
Retention period: two years
Purpose III - Contacting the data subject for future initiatives and activities concerning Blossom (marketing)
Categories of data processed Non-particular personal data
Legal basis for processing: consent freely given by the data subject and revocable at any time
Retention period: 24 months/until revocation of consent by the user
Purpose IV - Registration for the "SNAP" service offered by Blossom Srl
Categories of data processed Non-particular personal data
Legal basis of the processing: to fulfil specific pre-contractual requests made by the user
Retention period: until the user deletes the profile
3 - Social Network
FACEBOOK & INSTAGRAM
When you visit the Blossom page on Facebook or Instagram, these platforms collect your personal data as a data controller. Information regarding data collection and further processing by Facebook and Instagram can be found in Facebook's privacy policy and Instagram's privacy policy.
Blossom S.r.l. does not get full access to such collected data or to any of the user's profiles, but can only access the user's "public" profile information.
The Company receives anonymous statistics based on legitimate interest in the use of its page. The following anonymous information may be provided:
Follower: the number of people who follow Blossom S.r.l. - including growth and development over a defined period of time.
Range: number of people who see a specific piece of content. Number of interactions on a post. For example, it is possible to deduce which content is better than others in the community.
Ads performance: how many people saw an ad or article or interacted with it
Demographics: average age of visitors, gender, place of residence, language.
These statistics are used to constantly improve our online content and to better respond to the interests of our users. We cannot link statistical data with the profiles of our fans or individual users.
When you visit Blossom S.r.l.'s page on Linkedin, this platform collects your personal data in its capacity as data controller. Information regarding data collection and further processing by LinkedIn can be found in LinkedIn's privacy policy.
Blossom S.r.l. does not obtain full access to such collected data or to any user profile. The Company only has access to public profile information.
The Company receives anonymous statistics based on legitimate interest in the use of its page. The following anonymous information may be provided:
Follower: the number of people who follow Blossom S.r.l. - including growth and development over a defined time period.
Range: number of people who see a specific piece of content. Number of interactions on a post. For example, it is possible to deduce which content is better than others in the community.
Ads performance: How many people have seen an ad?
Demographics: average age of visitors, gender, place of residence, language.
These statistics are used to constantly improve our online LinkedIn content and to better respond to the interests of our users. We cannot link statistical data with the profiles of our fans or individual users.
If you apply via Linkedin for a position at Blossom S.r.l., your personal data is processed according to the candidate policy on this website.
4 - Disclosure of personal data to third parties and data transfer outside the European Union
The data may only be accessed by parties authorised by the Data Controller pursuant to Article 29 of the GDPR.
Moreover, the data may be accessed by subjects in their capacity as autonomous data controllers (for example: Authorities) or data processors pursuant to art. 28 of the GDPR (for example: companies that support the Data Controller in the Site administration activities; professionals and consultants appointed by the Data Controller).
If the user's request concerns an audiovisual project, the data may be communicated to the co-owner company IT's B S.r.l. The data shall not be transferred outside the European Union.
5 - Provision of personal data and consequences of refusal to provide them
The provision of personal data for Purposes I and II is compulsory; if the user decides not to provide such data, he/she will not be able to navigate on the Website and will not be able to access the functions provided by the same.
The provision of personal data for purpose IV is compulsory in order to use the "SNAP" service offered by Blossom Srl; if the user decides not to provide such data, he/she will not be able to use the service in question.
Providing personal data for purpose III is not compulsory; if you decide not to provide such data, you will not be able to receive Blossom Srl's newsletter.
6 - Data subject rights
The data subject may exercise his or her rights at any time, and in particular
7 - Exercise of data subject rights and complaints
The data subject may exercise his/her rights at any time by contacting the Controller by sending an email to privacy@blossom.it, without any formality or payment of any additional cost. Any request received by the Controller shall be taken into consideration after verifying the identity of the person entitled and safeguarding the rights of third parties. Requests shall be satisfied as soon as possible and in any case within thirty days, except in the event of objective difficulties about which written notice shall be given within the aforesaid term. In the event of unsatisfaction with the methods of processing and complaints and for any clarification, the interested party may write to the Data Controller, without prejudice to his right to appeal to the Data Protection Authority www.garanteprivacy.it.
Seregno, 13 of February 2024
Blossom S.r.l.
