Privacy Policy

This policy refers to the processing of personal data of the users of the Blossom website. Personal data are processed in compliance with the regulatory requirements set out in EU Regulation 2016/679, Legislative Decree 101/2018, and as described in this privacy policy.

1 - Data Controller, Joint Controllers and Data Protection Officer (DPO)

The Data Controller is Blossom S.r.l., Via Forcella 3 Milano (MI) e-mail: privacy@blossom.it. The Data Controller has appointed a Data Protection Officer ("DPO") who can be reached at the e-mail address dpo@blossom.it. 

2 - Information on personal data processing

Below you can find information on the personal data collected.

Purpose I - Website browsing

Categories of data processed: Non-particular personal data (including IP address)

Legal basis of the processing: legitimate interest of Blossom Srl in maintaining the security of the website and that it is not used in a way that infringes the rights of others or as a channel for committing offences or fraud

Retention period: up to 6 months from the collection of personal data

Purpose II - Contacting the user to respond to requests for information or advice

Categories of data processed Non-particular personal data

Legal basis of the processing: to fulfil specific pre-contractual requests made by the user

Retention period: two years

Purpose III - Contacting the data subject for future initiatives and activities concerning Blossom (marketing)

Categories of data processed Non-particular personal data

Legal basis for processing: consent freely given by the data subject and revocable at any time

Retention period: 24 months

Purpose IV - Join US/Careers

Categories of data processed Personal data, including special categories

Legal basis for processing: fulfilment of the data subject's request and processing of data for labour law purposes

Retention period: CVs are deleted six months after receipt.

3 - Social Network

FACEBOOK & INSTAGRAM

When you visit the Blossom page on Facebook or Instagram, these platforms collect your personal data as a data controller. Information regarding data collection and further processing by Facebook and Instagram can be found in Facebook's privacy policy and Instagram's privacy policy.

Blossom S.r.l. does not get full access to such collected data or to any of the user's profiles, but can only access the user's "public" profile information.

The Company receives anonymous statistics based on legitimate interest in the use of its page. The following anonymous information may be provided:

Follower: the number of people who follow Blossom S.r.l. - including growth and development over a defined period of time.

Range: number of people who see a specific piece of content. Number of interactions on a post. For example, it is possible to deduce which content is better than others in the community.

Ads performance: how many people saw an ad or article or interacted with it

Demographics: average age of visitors, gender, place of residence, language.

These statistics are used to constantly improve our online content and to better respond to the interests of our users. We cannot link statistical data with the profiles of our fans or individual users.

LINKEDIN

When you visit Blossom S.r.l.'s page on Linkedin, this platform collects your personal data in its capacity as data controller. Information regarding data collection and further processing by LinkedIn can be found in LinkedIn's privacy policy.

Blossom S.r.l. does not obtain full access to such collected data or to any user profile. The Company only has access to public profile information.

The Company receives anonymous statistics based on legitimate interest in the use of its page. The following anonymous information may be provided:

Follower: the number of people who follow Blossom S.r.l. - including growth and development over a defined time period.

Range: number of people who see a specific piece of content. Number of interactions on a post. For example, it is possible to deduce which content is better than others in the community.

Ads performance: How many people have seen an ad?

Demographics: average age of visitors, gender, place of residence, language.

These statistics are used to constantly improve our online LinkedIn content and to better respond to the interests of our users. We cannot link statistical data with the profiles of our fans or individual users.

If you apply via Linkedin for a position at Blossom S.r.l., your personal data is processed according to the candidate policy on this website.

4 - Disclosure of personal data to third parties and data transfer outside the European Union

The data may only be accessed by parties authorised by the Data Controller pursuant to Article 29 of the GDPR.

Moreover, the data may be accessed by subjects in their capacity as autonomous data controllers (for example: Authorities) or data processors pursuant to art. 28 of the GDPR (for example: companies that support the Data Controller in the Site administration activities; professionals and consultants appointed by the Data Controller).

5 - Provision of personal data and consequences of refusal to provide them

The provision of personal data for Purposes I and II is mandatory; if the user decides not to provide such data, he/she will not be able to navigate on the Website and will not be able to access the functions provided by the same.

The provision of personal data for purposes III and IV is not mandatory; if you decide not to provide such data, you will not be able to use the services. 

6 - Data subject rights

The data subject may exercise his or her rights at any time, and in particular

• confirmation as to whether or not personal data concerning him are being processed and to obtain access to the data and to the following information: purpose of processing; categories of personal data; recipients; retention period; existence of the right to rectification, erasure and restriction; origin of data not collected from the data subject
• the deletion or rectification of inaccurate personal data concerning him/her and/or the integration of incomplete personal data if he/she has an interest to do so, also by providing a supplementary declaration
• the limitation of the processing consisting in the blocking of processing for the period necessary for the checks required in the cases provided for by current legislation
• the portability of the data provided to the Data Controller, including the direct transmission of the data to another data controller; the Data Controller shall deliver the personal data available in a commonly used electronic format in order to allow their migration to other media
• opposition at any time to processing based on the legitimate interest of the Controller;
• withdrawal of consent where processing is based on that legal basis.

7 - Exercise of data subject rights and complaints

The data subject may exercise his/her rights at any time by contacting the Controller by sending an email to privacy@blossom.it, without any formality or payment of any additional cost. Any request received by the Controller shall be taken into consideration after verifying the identity of the person entitled and safeguarding the rights of third parties. Requests shall be satisfied as soon as possible and in any case within thirty days, except in the event of objective difficulties about which written notice shall be given within the aforesaid term. In the event of unsatisfaction with the methods of processing and complaints and for any clarification, the interested party may write to the Data Controller, without prejudice to his right to appeal to the Data Protection Authority www.garanteprivacy.it