Privacy notice on the subscription to the Inspectorate Malta Ltd newsletter service

PRIVACY NOTICE ON THE SUBSCRIPTION TO THE INSPECTORATE MALTA LTD NEWSLETTER SERVICE pursuant to Article 13 of EU Regulation 2016/679 (the "GDPR")

The Bureau Veritas newsletter is sent by e-mail to those who make explicit requests, by completing the form and authorizing Bureau Veritas to process their personal data.

1.    DATA CONTROLLER
The Data Controller is Inspectorate Malta Ltd, with registered office in Spencer Hill, Marsa (MRS), 1959, Malta, VAT no. MT19326831 (hereinafter "Bureau Veritas" or the "Data Controller"). 

2.    DATA CONTROLLED
The Data Controller processes your contact data, such as your e-mail address, collected by filling in the newsletter subscription form on the www.bureauveritas.gr (website the "Data").

3.    PURPOSE AND LEGAL BASIS OF THE PROCESSING
The Data provided by users is processed for the sole purpose of sending the Data Controller's newsletter and to allow users to benefit from this service. 

Such processing finds its legal basis in the consent of the interested party. 

Users can withdraw their consent and cancel their subscription to the newsletter service at any time by clicking on the Unsubscribe link in the newsletters and then clicking on the Confirm button on the unsubscribe page. Alternatively, users may send a specific notification to the Data Controller, at the addresses found in the "Rights of the interested parties” section, expressing the desire to unsubscribe from the newsletter service and to delete the data held by the Data Controller. The withdrawal of consent does not affect the processing that has already taken place.

Providing the Data is optional. Any refusal to provide the Data will make it impossible to use the newsletter service.

4.    PERSONAL DATA RECIPIENTS
The recipients of the User Data will be the expressly designated employees of the Data Controller's marketing department, who operate under the authority of the Data Controller.

Finally, the Data may be disclosed to external subjects operating as autonomous controllers such as, for example, Authorities and supervisory and control bodies and in general to subjects, including private individuals, entitled to request the data (such as accounting consultants, legal consultants), Public Authorities that make an express request for administrative or institutional purposes, in accordance with the provisions of current national and European legislation.

5.    RETENTION PERIOD
The Data collected will be kept for a maximum period of 24 months upon subscription to the newsletter service. With one month's notice, we will ask you if you wish to continue receiving the newsletter: in case of refusal, the Data provided will be deleted; in case of consent, it will be kept and processed for a further period of 24 months.

6.   TRANSFER OF DATA TO THIRD COUNTRIES
Data will be managed and stored on Bureau Veritas servers located within the European Union and/or third-party companies duly appointed as data controllers. The Data will not be transferred outside the European Union. 

7.    RIGHTS OF THE DATA SUBJECTS
Users who subscribe to the Data Controller's newsletter service, as data subjects (i.e., subjects to whom the Data refers), are holders of rights conferred by the GDPR. 

In particular, pursuant to Articles 15-22 of the GDPR, data subjects have the right to request and obtain, at any time, access to their personal data, information on the processing carried out, the correction and/or updating of personal data, the deletion and limitation of the processing. 

Additionally, they also have the right to object to the processing and to request data portability (i.e. to receive personal data in a structured, commonly used, machine-readable format). Finally, data subjects always have the right to revoke their consent at any time (this, in any case, will not affect the lawfulness of the processing carried out on the basis of the consent given before the revocation) and to lodge a complaint with a supervisory authority.

The above-mentioned rights may be exercised at any time by simply sending a request to the Data Controller:
• by post, in in Spencer Hill, Marsa (MRS), 1959, Malta; 
• through the portal for the exercise of rights, available at the link https://personaldataprotection.bureauveritas.com/#/HomePage