Information on the Processing of Personal Data

Information provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679.

This page sets out the Privacy Policy of this website and is intended to provide information on how the personal data of users who interact with this website and use the services made available through it are processed, as well as to provide the information required under Articles 13 and 14 of Regulation (EU) 2016/679.

This notice applies solely to this website (www.turbo-search.com/en) and does not apply to any other websites that users may access through links available on this website.

Regulation (EU) 2016/679 on the protection of personal data (hereinafter, the “Regulation”) establishes rules relating to the protection of natural persons with regard to the processing of personal data, as well as rules relating to the free movement of such data, and protects the fundamental rights and freedoms of natural persons, particularly their right to the protection of personal data.

Article 4(1) of the Regulation defines “Personal Data” as any information relating to an identified or identifiable natural person (hereinafter, the “Data Subject”).

Article 4(2) of the Regulation defines “Processing” as any operation or set of operations performed on Personal Data or sets of Personal Data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Pursuant to Articles 12 et seq. of the Regulation, Data Subjects must also be provided with appropriate information concerning the Processing activities carried out by the Data Controller and the rights available to them.

Data Controller

Blhack S.r.l.
Via Pegoraro 26, 21013, Gallarate (VA)
Partita Iva IT03793170121
Email: info@blhack.it

Data Protection Officer

The Data Protection Officer appointed by the Data Controller may be contacted at the following email address: dpo@blhack.it

Purposes of Processing and Legal Bases

The user’s Personal Data will be processed for the following purposes and on the legal bases indicated below:

to enter into and properly perform a contract to which the Data Subject is a party, or to take pre-contractual measures at the Data Subject’s request; the legal basis for this Processing is Article 6(1)(b) of Regulation (EU) 2016/679;
to respond to requests submitted by the user via email, forms and/or chat available on the website; the legal basis for this Processing is Article 6(1)(b) of Regulation (EU) 2016/679;
to comply with obligations imposed by law, regulations, European Union legislation or orders issued by an Authority; the legal basis for this Processing is Article 6(1)(c) of the Regulation;
to establish, exercise or defend legal claims; the legal basis for this Processing is the legitimate interest of the Data Controller pursuant to Article 6(1)(f) of the Regulation;
to enable and support the proper functioning of the website and ensure an adequate level of security, integrity and availability; the legal basis for this Processing is the legitimate interest of the Data Controller pursuant to Article 6(1)(f) of the Regulation;
to analyse statistical information based on aggregated or anonymous data in order to monitor the proper functioning of the website, traffic, usability and user interest; the legal basis for this Processing is the legitimate interest of the Data Controller pursuant to Article 6(1)(f) of the Regulation.

Types of Data

The data necessary to pursue the purposes described above will be collected and processed, including:

identification data;
contact details;
data relating to the contractual relationship;
browsing data.

Browsing Data

The information systems and software procedures used to operate this website acquire, during their normal operation, certain Personal Data whose transmission is implicit in the use of Internet communication protocols.

This information is not collected in order to be associated with identified Data Subjects. However, by its nature, it could allow users to be identified through processing and association with data held by third parties.

This category of data includes IP addresses or domain names of the computers used by users connecting to the website, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server response (successful, error, etc.), and other parameters relating to the user’s operating system and IT environment.

This data is used solely to obtain anonymous statistical information on the use of the website and to verify its proper functioning, and is deleted immediately after processing.

The data may be used to establish liability in the event of suspected cybercrime against the website. Except in such circumstances, data relating to web contacts is currently retained for no longer than seven days.

Data Voluntarily Provided by Users

The optional, explicit and voluntary sending of emails to the addresses provided on this website results in the subsequent acquisition of the sender’s email address, which is necessary in order to respond to requests, as well as any other Personal Data included in the message.

Refusal to Provide Data

Except for browsing data as described above, users and visitors are free to provide their Personal Data.

In certain cases, providing Data is necessary. Refusal to provide such Data may prevent the conclusion or proper performance of a contract to which the Data Subject is a party and/or prevent the Data Controller from complying with its legal obligations.

Where Processing requires consent, providing the relevant Data is always optional. Failure to provide such Data will not prevent the user from accessing the services offered by the Data Controller.

Even where the Data Subject has provided consent, they retain the right to withdraw it and subsequently object, in whole or in part, to the Processing of their Personal Data for the purposes described above by submitting a request to the Data Controller using the contact details provided above.facoltativo. Inoltre, il mancato conferimento non comporterà l’impossibilità di poter usufruire dei servizi offerti dal Titolare. Anche nel caso in cui l’interessato abbia conferito il proprio consenso, lo stesso avrà comunque il diritto di revocarlo e di opporsi successivamente, in tutto o in parte, al trattamento dei propri Dati personali per le finalità sopra esposte, facendone semplice richiesta al Titolare ai recapiti sopra indicati.

Source of Data

Data will be provided by the Data Subject or collected from third parties.

Processing Methods

In accordance with Article 5 of the Regulation, the Personal Data subject to Processing will be:

processed lawfully, fairly and transparently in relation to the Data Subject;
collected and recorded for specified, explicit and legitimate purposes and subsequently processed in a manner compatible with those purposes;
adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed;
accurate and, where necessary, kept up to date;
processed in a manner that ensures an appropriate level of security;
retained in a form that permits identification of the Data Subject for no longer than is necessary for the purposes for which the Personal Data is processed.

Processing will be carried out using manual and/or electronic and telematic tools, according to organisational and processing methods strictly related to the purposes described above and, in any event, in a manner designed to ensure the security, integrity and confidentiality of the Data in accordance with the organisational, physical and technical measures required under applicable law.

Disclosure of Data

Personal Data may be disclosed to persons authorised to process it, as well as to external data processors appointed by the Data Controller and responsible for managing the purposes described above.

A complete list of external data processors is available from the Data Controller.

For the purposes described above, Data may also be disclosed to other parties acting as independent data controllers.

Dissemination of Data

Personal Data will not be publicly disseminated unless required by specific provisions of law.

International Data Transfers

For the purposes described above, Personal Data will be processed within the European Economic Area (EEA).

Where Personal Data is transferred to third countries and no adequacy decision has been adopted by the European Commission, the requirements established by applicable legislation governing transfers of Personal Data to third countries will nevertheless be complied with, including, where appropriate, the Standard Contractual Clauses approved by the European Commission.

Data Retention

As a general rule, Personal Data will be retained for no longer than is strictly necessary to achieve the purposes for which it was collected and processed, including any retention periods required by applicable law.

In any event, Personal Data will be retained for a maximum period of 10 years following the termination of the relationship with the Data Controller, without prejudice to any further retention that may be necessary for the Data Controller to establish, exercise or defend legal claims.

Data Subject Rights

Pursuant to Article 15 et seq. of Regulation (EU) 2016/679 and applicable national legislation, Data Subjects may, in accordance with the procedures and within the limits established by applicable law, exercise the following rights:

request confirmation as to whether Personal Data concerning them is being processed (right of access);
obtain information about the source of such Data;
receive such Data in an intelligible form;
obtain information about the logic, methods and purposes of the Processing;
request the updating, rectification, completion, erasure, anonymisation or restriction of Personal Data processed unlawfully, including Data that is no longer necessary for the purposes for which it was collected;
lodge a complaint with the competent supervisory authority (the Italian Data Protection Authority – Garante per la protezione dei dati personali);
more generally, exercise all rights granted under applicable law.

Data Subjects may exercise their rights by submitting a request to the Data Controller, without any particular formal requirements, using the contact details provided above.

Before responding to a request, the Data Controller may need to verify the identity of the Data Subject and may therefore request a copy of an identity document.

A written response will be provided without undue delay and, in any event, no later than one month from receipt of the request.