INFORMATION SHEET PURSUANT TO ART. 13 REG. (EU) 2016/679 – GDPR
This information sheet describes which of your personal data is collected by BLISS CORPORATION S.r.l. as controller, for which purposes and how they will be used. You will also find below the information to exercise your rights under the GDPR.
We generally collect your data when you access our www.blisscorporation.com website and to its linked pages/websites, when you fill in the fields present on the website, when you send us a “music demo”, when you send us an email or call to request assistance. We inform you that the personal data collected during such processes will be treated to meet your requests, thus allowing you to benefit from the services provided by our company.
1. Who processes your data: controllers and processors
BLISS CORPORATION S.r.l. with its registered office in Strad Basse di Dora, 42 - 10146 Turin (Italy), (from now on the “Controller”). It is possible to write to email@example.com to seek information on data processing.
2. Which data we process - Types of information we control
Your contact information and account data. We will store the data information that you provide us (name, surname, address, phone number, email, age, sex, TAX ID number, place and date of birth, bank account data or payment details, links to personal profiles on social networks) when you access our site.
3. Where we retrieve your data - Modes of data collection
Directly from you. For example when you ask us a question or you send us your music or when you sign a contract with us.
Providing these details is optional. However, refusing to provide your information precludes the possibility to elaborate and answer to your requests.
4. Why and how long we will process your data. - Purpose and legal basis of the processing; retention period.
Your personal data will only be used to elaborate and answer to your requests.
We could use your email or your phone number, together with your name, to give you assistance in case you need help.
The personal data you provide is processed lawfully based on the consent pursuant to Article 6(1), letter b) GDPR for the pre-contractual measures and the contractual obligations you requested.
The personal data will be processed long enough to sort out the stated purposes.
The personal data you provided is used to fulfil administrative purposes.
Your data will be treated for purposes related to royalties management and legal requirements, as referred to in Article 6(1), letters b) and c) GDPR, as well as for the legitimate interest of the Controller, as in Article 6(1), letter f) GDPR, with reference to:
fulfilment of all the stages of the calculation and management of royalties, through the MyBlissCo section;
respect of internal administrative procedures and compliance to legal obligations or Italian legislation.
To prevent or control malfeasances or to protect and invoke one’s rights.
For example, we could use your information to prevent the violation of our intellectual property rights (such as the falsification of our brands or those of our partners) or other crimes, in accordance with the relevant legal provisions.
The legal basis of such processing is the legitimate interest of the co-owners of the processing.
The retention period of your data is equal to the time reasonably needed to assert our rights from the moment we become aware of the crime or of its potential commission.
To send our newsletter.
Only with your consent, you will receive our newsletter to give you personalized information on our products and services (information on our music label, on the participation to events and all the news dedicated to the BLISS CORPORATION S.r.l. supporters).
Our newsletter is sent through the Mail Chimp service.
The legal basis of this processing is your explicit consent.
The subscription and processing will be effective until you will unsubscribe from the newsletter through the link present in every email you have received or, in case you have subscribed to the website, by accessing the specific section. If the frequency of emails is lower than one for each semester, you will receive a communication every six months to verify your subscription and with an unsubscribe link.
Other purposes permitted by law. In some circumstances we might process your data, provided there is a legitimate interest of Bliss Corporation S.r.l., as referred to in Article 6(1), letter f) GDPR.
As for the aforementioned purposes, the processing of personal data is taken care of manually, with computer or telematic tools and with modalities strictly related to the purposes and, however, so as to guarantee the safety and secrecy of the data in accordance with the law.
5. Where is your data processed? - Transferring the data.
The data will be processed and retained at BLISS CORPORATION S.r.l.’s registered office in Strada Basse di Dora, 42 - 10146, Torino.
6. Who do we share your data with? Personal data recipients.
The personal data you provided can be shared with employees and collaborators of the Controller, as well as the other societies directly related to the Controller that have administrative management tasks (GZ 2538 S.r.l.) and that will process them according to the Controller’s instructions.
If necessary, for activities such as those related to the website maintenance, the supply of specific services related to the nature of the product of the company and the administrative management, the personal data can be processed by consultant and companies that support Bliss Corporation S.r.l. and that are appointed external controllers of the processing as referred to in Article 28 of Reg. (EU) 2016/679.
The updated list of controllers and other subjects authorized to the processing is guarded at the Controller’s registered office.
7. Data communication and its outsourcing
Your email address and your name will be treated to send you emails related to our services through the Mailchimp platform (that manages newsletters), owned by “The Rocket Science Group LLC” (Atlanta, USA), that operates as Controller and adheres to the Privacy Shield agreement that regulates the data transfer from the European Union to the USA.
This constitutes an extra UE data transfer, covered by appropriate safeguards. The Data Protection Officer and processing Controller can be contacted at the following address: firstname.lastname@example.org
Our website is not intended for children under 14 years of age, but it is destined to an adult audience. If you are a parent or representative and you think that your child has sent us his data, you can contact us.
9. Security Measures
We adopt security measures to protect your data. The standard security measures we use depend on the type of data that we treat and comply with the legal requirements.
10. Your Rights
Pursuant to Articles 13 (2), and from 15 to 21 of the Regulation, we inform you that regarding the processing of your personal data you can claim the following rights:
- Right to access your personal data and the following information:
A confirmation as to whether or not data related to you is being processed;
the purpose of the processing;
the categories of personal data;
the addressees or categories of addressees to which the personal data has been or will be transferred;
where the personal data are not collected from the data subject, any available information as to their source;
the existence of an automated decision-making process, including profiling;
a copy of the personal data undergoing processing;
- The right to have personal data corrected and completed;
- The right to the erasure of data (“right to be forgotten”) where one of the following grounds applies:
the personal data are no longer necessary for the purposes for which they have been collected or processed;
the data subject withdraws consent on data processing and there is no legal basis for the processing;
the data subject objects the processing and there is no legitimate ground to proceed with it;
the personal data has been processed illicitly;
the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
- Right to the restriction of processing in case:
the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;
the data subject has objected to processing pending the verification whether the legitimate grounds of the controller override those of the data subject.
- Right to bring a complaint to the Personal Data Protection Authority, following the procedures and indications published on the official website of the Authority: www.garanteprivacy.it
- Right to data portability, or rather the right to receive in a structured, commonly used and legible format, the personal data related to him and potentially sending them to another controller of the processing, where processing is based on consent or on a contract and has been carried out with automated processes.
When technically possible, the data subject has the right to obtain direct transmission of the data from a processing controller to another.
- Right to object to the data processing anytime, including profiling, especially when:
the processing is carried out with the legitimate interest of the data controller, prior to specifying the grounds of the opposition;
the personal data is processed for direct marketing purposes.
- The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, unless the decision is necessary for the conclusion or the performance of a contract between the data subject and a Controller; or unless it is authorised by Union or Member State law to which the controller is subject or is based on the explicit consent of the data subject.
- Right to revoke this consent at any time; the data, where they do not have another legal basis (as meeting a legal obligation or performing a contract) must be deleted by the Controller.
The exercise of rights has no restriction and it is free.
Procedure for the exercise of any right
You can exercise your rights anytime by sending:
A registered mail to BLISSCORPORATION S.r.l., with its registered office in Strada Basse di Dora 42, 10146 Torino
an e-mail to the address email@example.com
10. What happens if we edit this information sheet
March 8, 2019