This page provides access to privacy notices for our suppliers. Please select the BPI legal entity you work with to read the applicable privacy notice.
Privacy Notice for Suppliers and Their Representatives
Data Controller:
Business Performance Institute S.r.l. (BPI)
P.IVA 10045050019
Corso Giacomo Matteotti, n. 12
10121 Torino
Contact details:
Email: privacy@bpilearn.com
Tel. +39 0110609055
All personal data exchanged between BPI and the Supplier or the Supplier’s representatives in the course of performing the contract will be processed solely for the purpose of managing the contract and complying with applicable laws and regulations.
By supplier representatives we mean the supplier’s employees, collaborators or other contacts who communicate with BPI on behalf of the supplier.
Personal data will be processed in accordance with the principles of lawfulness and fairness, ensuring the confidentiality and rights recognised, and in compliance with the appropriate security and data protection measures set forth by EU Regulation No. 2016/679, hereinafter the “GDPR”, and the Italian Privacy Code.
- What Data Do We Process? How is it processed?
BPI receives personal data from the Supplier (either their own data or that of their representatives) for the purpose of taking any pre-contractual measures or for the execution of the contract.
Specifically, BPI receives from the Supplier and processes the following personal data: first name, last name, telephone number, e-mail address, and, more generally, the contact details of individuals acting as the Supplier’s representatives. For ease of reference, such representatives will hereinafter be referred to as the “Data Subject.”
In the event of any change to the personal data, the Supplier will promptly inform BPI of the updated information.
BPI will process the data only to the extent strictly necessary in relation to the purposes described below and as required by law. BPI processes personal data in both digital and paper format. No automated decision-making or profiling activities are carried out.
- Why and How Do We Process Personal Data?
The Data Subject’s personal data will be processed for the following purposes:
- execution of the contract and/or pre-contractual measures: personal data provided by the Supplier are processed to draft, conclude, and perform the contract.
- compliance with legal obligations.
- management of disputes.
The provision of personal data by the Supplier or the Data Subject for the above purposes is optional, but failure to do so may prevent BPI from executing the contract.
- Who Do We Share Personal Data With?
The Data Subject’s personal data may be shared with:
- individuals authorized by BPI to process personal data, subject to a confidentiality agreement (e.g., BPI employees and collaborators);
- consultants and financial institutions for accounting and administrative purposes;
- affiliated companies and foreign branches, contractors or subcontractors that collaborate, even partially, in the performance of the activities, some of which act as Data Processors (a full and updated list of processors is available upon request from BPI);
- law firms and competent authorities for the management of disputes or for the protection of BPI’s rights;
- any entities, bodies, or authorities to whom personal data must be communicated for legal requirements or orders issued by authorities.
BPI transfers personal data outside the EU only to subjects that ensure security measures equivalent to those required by the GDPR, based on appropriate safeguards pursuant to Articles 44–49 of the GDPR (e.g. Standard Contractual Clauses or adequacy decisions). Further information is available from BPI.
- How do we use Artificial Intelligence?
BPI may use Artificial Intelligence (“AI”) systems as operational support tools. Such systems are used under human supervision and never as substitutes for professional judgment or responsibility. All outputs are reviewed and approved by qualified BPI personnel. AI providers act as data processors.
Data is not used by providers to train or improve their AI models, unless the Data Subject has given separate consent when required.
- How Long Do We Keep Personal Data?
Personal data will be retained only for as long as necessary to achieve the purposes for which they were collected, in accordance with the data minimization principle.
Personal data will be kept for as long as needed to carry out the activities under the contract. In any case, the data may be retained for an additional 10 years as foreseen by the applicable law (Article 2946 of the Italian Civil Code). Further details are available from BPI.
- Data Protection Rights: What They Are and How to Exercise Them
The Data Subject has the right to request from BPI, at any time, access to their personal data, as well as its update, rectification, integration, or erasure. The Data Subject may also request restriction of processing or obtain their personal data in a structured, commonly used, and machine-readable format, in the cases provided for by Article 20 of the GDPR.
The Data Subject also has the right to object to the processing of their personal data, pursuant to Article 21 of the GDPR, on legitimate grounds, either initially or in connection with any subseqauent communications relating to such processing. Requests must be submitted in writing to BPI using the contact details provided above. In any case, the Data Subject has the right to lodge a complaint with the competent supervisory authority (the Italian Data Protection Authority – Garante per la Protezione dei Dati Personali), pursuant to Article 77 of the GDPR, if they believe that the processing of their personal data is in breach of the applicable legislation.
Informativa privacy per i fornitori ed i loro referenti
Titolare del trattamento:
Business Performance Institute S.r.l. (BPI)
P.IVA 10045050019
Corso Giacomo Matteotti, n. 12
10121 Torino
Dati di contatto:
Email: privacy@bpilearn.com
Tel. +39 0110609055
Tutti i dati personali che verranno scambiati fra BPI e il Fornitore o i referenti del Fornitore nel corso dello svolgimento del Contratto saranno trattati solo per gestire il contratto e rispettare la normativa.
Per referenti del fornitore intendiamo i dipendenti, collaboratori o altri contatti del fornitore che comunicano con BPI per conto del fornitore.
Il trattamento dei dati avverrà secondo principi di liceità e correttezza ed in modo da tutelare la riservatezza e i diritti riconosciuti, nel rispetto di adeguate misure di sicurezza e di protezione dei dati, previsti dal Regolamento UE n. 2016/679, di seguito anche solo “GDPR”, e dal Codice Privacy.
- Quali dati trattiamo? Come vengono trattati?
BPI riceve i dati personali dal Fornitore (propri o dei suoi referenti) per eventuali misure precontrattuali o l’esecuzione del contratto.
Nello specifico, BPI riceve dal Fornitore e tratta i seguenti dati personali: nome, cognome, numero di telefono, indirizzo e-mail ed in generale i dati di contatto delle persone nella loro qualità di referente del Fornitore stesso. Per praticità, di seguito si farà riferimento ai referenti del Fornitore con il termine “Interessato”.
In caso di modifica dei dati personali, il Fornitore si impegna a comunicare senza ritardo a BPI i dati aggiornati.
BPI tratterà i dati soltanto nella misura in cui siano indispensabili in relazione alle finalità di seguito indicate ed obbligatori per disposizioni di legge. BPI tratta i dati personali in formato sia digitale che cartaceo. Non è presente un processo decisionale automatizzato né vi è alcuna attività di profilazione.
- Perché trattiamo i dati personali?
I dati personali dell’Interessato saranno trattati per le seguenti finalità:
- esecuzione del contratto e/o di misure precontrattuali: i dati personali comunicati dal Fornitore vengono trattati per poter redigere, concludere ed adempiere il contratto;
- assolvimento eventuali obblighi di legge;
- gestione del contenzioso.
Il conferimento dei dati personali da parte del Fornitore o dell’Interessato stesso per le finalità sopra indicate è facoltativo, ma in mancanza la BPI potrebbe essere impossibilitata ad eseguire il contratto stesso.
- A chi comunichiamo i dati personali?
I dati Personali dell’Interessato potranno essere condivisi con:
- persone fisiche autorizzate da BPI al trattamento di dati personali previa sottoscrizione di un accordo di riservatezza (es. dipendenti e collaboratori di BPI);
- consulenti e istituti di credito per finalità contabili-amministrative;
- filiali estere e società collegate, società appaltatrici in caso di affidamento dei lavori, anche parziali, ad imprese esterne, alcuni dei quali agiscono in qualità di responsabili del trattamento (per l’elenco completo ed aggiornato dei responsabili invitiamo a contattare BPI ai recapiti sopra indicati);
- studi legali e autorità competenti per la gestione di eventuali contenziosi o la tutela dei diritti di BPI;
- soggetti, enti o autorità a cui sia obbligatorio comunicare i dati personali in forza di disposizioni di legge o di ordini delle autorità.
BPI trasferisce i dati personali fuori dall’UE unicamente verso soggetti che garantiscono misure di sicurezza pari a quelle richieste dal GDPR, sulla base di adeguate garanzie ai sensi degli articoli 44–49 del GDPR (ad esempio Clausole Contrattuali Standard o decisioni di adeguatezza). Maggiori informazioni presso BPI.
- Come utilizziamo l’intelligenza Artificiale?
BPI può utilizzare sistemi di Intelligenza Artificiale (“AI”) come strumenti di supporto operativo. Tali sistemi sono impiegati sotto supervisione umana e non sostituiscono mai il giudizio o la responsabilità professionale. Tutti i risultati sono rivisti e approvati da personale qualificato di BPI.
I fornitori di provider di AI operano, in qualità di responsabili del trattamento.
I dati non vengono utilizzati dai fornitori per addestrare o migliorare i propri modelli di AI, salvo diverso consenso dell’Interessato quando necessario.
- Per quanto tempo conserviamo i dati personali?
I dati personali saranno conservati solo per il tempo necessario ai fini per cui sono raccolti, rispettando il principio di minimizzazione. In ogni caso, i dati personali saranno conservati per il tempo necessario per l’esecuzione delle prestazioni previste nel contratto. È fatto salvo in ogni caso l’ulteriore conservazione di 10 anni prevista dalla normativa applicabile (art. 2946 Cod. Civ.). Maggiori informazioni sono disponibili presso BPI.
- I diritti privacy: quali sono e come esercitarli
L’Interessato ha diritto di chiedere a BPI, in qualunque momento, l’accesso ai propri Dati, l’aggiornamento, la rettifica, l’integrazione, la cancellazione, di richiedere la limitazione al trattamento o di ottenere in un formato strutturato, di uso comune e leggibile da dispositivo automatico i dati personali che riguardano l’Interessato stesso nei casi previsti dall’art. 20 del GDPR.
Informiamo, inoltre, che l’Interessato ha il diritto di opporsi al trattamento, ai sensi dell’art. 21 del GDPR, per motivi legittimi, inizialmente o in occasione di successive comunicazioni di tale trattamento. Le richieste vanno presentate per iscritto a BPI ai recapiti indicati in epigrafe. In ogni caso l’Interessato ha sempre diritto di presentare reclamo all’autorità di controllo competente (Garante per la Protezione dei Dati Personali), ai sensi dell’art. 77 del GDPR, qualora ritenga che il trattamento dei propri dati sia contrario alla normativa in vigore.
Privacy Notice for Suppliers and Their Representatives
Data Controller:
BPI Learning Consulting Spain SL (BPI)
VAT ES B16782096
Calle de José Abascal, 41
28003, Madrid, Spain
Contact details:
Email: privacy@bpilearn.com
All personal data exchanged between BPI and the Supplier or the Supplier’s representatives in the course of performing the contract will be processed solely for the purpose of managing the contract and complying with applicable laws and regulations.
By supplier representatives we mean the supplier’s employees, collaborators or other contacts who communicate with BPI on behalf of the supplier.
Personal data will be processed in accordance with the principles of lawfulness and fairness, ensuring the confidentiality and rights recognised, and in compliance with the appropriate security and data protection measures set forth by EU Regulation No. 2016/679, on the protection of personal data (hereinafter the “GDPR”)and the Spanish Organic Law No. 3/2018 (hereinafter, the “LOPDGDD”).
- What Data Do We Process? How is it processed?
BPI receives personal data from the Supplier (either their own data or that of their representatives) for the purpose of taking any pre-contractual measures or for the execution of the contract.
Specifically, BPI receives from the Supplier and processes the following personal data: first name, last name, telephone number, e-mail address, and, more generally, the contact details of individuals acting as the Supplier’s representatives. For ease of reference, such representatives will hereinafter be referred to as the “Data Subject.”
In the event of any change to the personal data, the Supplier will promptly inform BPI of the updated information.
BPI will process the data only to the extent strictly necessary in relation to the purposes described below and as required by law. BPI processes personal data in both digital and paper format. No automated decision-making or profiling activities are carried out.
- Why and How Do We Process Personal Data?
The Data Subject’s personal data will be processed for the following purposes:
- execution of the contract and/or pre-contractual measures: personal data provided by the Supplier are processed to draft, conclude, and perform the contract.
- compliance with legal obligations.
- management of disputes.
The provision of personal data by the Supplier or the Data Subject for the above purposes is optional, but failure to do so may prevent BPI from executing the contract.
- Who Do We Share Personal Data With?
The Data Subject’s personal data may be shared with:
- individuals authorized by BPI to process personal data, subject to a confidentiality agreement (e.g., BPI employees and collaborators);
- consultants and financial institutions for accounting and administrative purposes;
- affiliated companies and their foreign branches, contractors or subcontractors that collaborate, even partially, in the performance of the activities, some of which act as Data Processors (a full and updated list of processors is available upon request from BPI);
- law firms and competent authorities for the management of disputes or for the protection of BPI’s rights;
- any entities, bodies, or authorities to whom personal data must be communicated for legal requirements or orders issued by authorities.
BPI transfers personal data outside the EU only to subjects that ensure security measures equivalent to those required by the GDPR, based on appropriate safeguards pursuant to Articles 44–49 of the GDPR (e.g. Standard Contractual Clauses or adequacy decisions). Further information is available from BPI.
- How do we use Artificial Intelligence?
BPI may use Artificial Intelligence (“AI”) systems as operational support tools. Such systems are used under human supervision and never as substitutes for professional judgment or responsibility. All outputs are reviewed and approved by qualified BPI personnel. AI providers act as data processors.
Data is not used by providers to train or improve their AI models, unless the Data Subject has given separate consent when required.
- How Long Do We Keep Personal Data?
Personal data will be retained only for as long as necessary to achieve the purposes for which they were collected, in accordance with the data minimization principle.
Personal data will be kept for as long as needed to carry out the activities under the contract. In any case, the data may be retained for an additional 6 years as foreseen by the applicable law (Art. 30.1 of Spanish Commercial Code). Further details are available from BPI.
- Data Protection Rights: What They Are and How to Exercise Them
The Data Subject has the right to request from BPI, at any time, access to their personal data, as well as its update, rectification, integration, or erasure. The Data Subject may also request restriction of processing or obtain their personal data in a structured, commonly used, and machine-readable format, in the cases provided for by Article 20 of the GDPR.
The Data Subject also has the right to object to the processing of their personal data, pursuant to Article 21 of the GDPR, on legitimate grounds, either initially or in connection with any subseqauent communications relating to such processing. Requests must be submitted in writing to BPI using the contact details provided above. In any case, the Data Subject has the right to lodge a complaint with the competent supervisory authority (Spanish Agency for the Protection of Personal Data, AEPD), pursuant to Article 77 of the GDPR, if they believe that the processing of their personal data is in breach of the applicable legislation.
Privacy Notice for Suppliers and Their Representatives
Data Controller:
BPI Learning Consulting UK (BPI)
VAT GB 263869755
1 Fore Street Avenue
EC2Y 9DT, London
Contact details:
Email: privacy@bpilearn.com
All personal data exchanged between BPI and the Supplier or the Supplier’s representatives in the course of performing the contract will be processed solely for the purpose of managing the contract and complying with applicable laws and regulations.
By supplier representatives we mean the supplier’s employees, collaborators or other contacts who communicate with BPI on behalf of the supplier.
Personal data will be processed in accordance with the principles of lawfulness and fairness, ensuring the confidentiality and rights recognised, and in compliance with the appropriate security and data protection measures set forth by the retained EU law version of the General Data Protection Regulation (EU 2016/679), hereinafter the “UK GDPR”, and the Data Protection Act 2018 (the “DPA”).
- What Data Do We Process? How is it processed?
BPI receives personal data from the Supplier (either their own data or that of their representatives) for the purpose of taking any pre-contractual measures or for the execution of the contract.
Specifically, BPI receives from the Supplier and processes the following personal data: first name, last name, telephone number, e-mail address, and, more generally, the contact details of individuals acting as the Supplier’s representatives. For ease of reference, such representatives will hereinafter be referred to as the “Data Subject.”
In the event of any change to the personal data, the Supplier will promptly inform BPI of the updated information.
BPI will process the data only to the extent strictly necessary in relation to the purposes described below and as required by law. BPI processes personal data in both digital and paper format. No automated decision-making or profiling activities are carried out.
- Why and How Do We Process Personal Data?
The Data Subject’s personal data will be processed for the following purposes:
- execution of the contract and/or pre-contractual measures: personal data provided by the Supplier are processed to draft, conclude, and perform the contract.
- compliance with legal obligations.
- management of disputes.
The provision of personal data by the Supplier or the Data Subject for the above purposes is optional, but failure to do so may prevent BPI from executing the contract.
- Who Do We Share Personal Data With?
The Data Subject’s personal data may be shared with:
- individuals authorized by BPI to process personal data, subject to a confidentiality agreement (e.g., BPI employees and collaborators);
- consultants and financial institutions for accounting and administrative purposes;
- parent company and its affiliated companies, contractors or subcontractors that collaborate, even partially, in the performance of the activities, some of which act as Data Processors (a full and updated list of processors is available upon request from BPI);
- law firms and competent authorities for the management of disputes or for the protection of BPI’s rights;
- any entities, bodies, or authorities to whom personal data must be communicated for legal requirements or orders issued by authorities.
BPI transfers personal data outside the UK only to subjects that ensure security measures equivalent to those required by the UK GDPR, based on appropriate safeguards pursuant to Articles 44–49 of the UK GDPR (e.g. Standard Contractual Clauses or adequacy decisions). Further information is available from BPI.
- How do we use Artificial Intelligence?
BPI may use Artificial Intelligence (“AI”) systems as operational support tools. Such systems are used under human supervision and never as substitutes for professional judgment or responsibility. All outputs are reviewed and approved by qualified BPI personnel. AI providers act as data processors.
Data is not used by providers to train or improve their AI models, unless the Data Subject has given separate consent when required .
- How Long Do We Keep Personal Data?
Personal data will be retained only for as long as necessary to achieve the purposes for which they were collected, in accordance with the data minimization principle.
Personal data will be kept for as long as needed to carry out the activities under the contract. In any case, the data may be retained for up to 10 years after the termination of the contractual relationship, for uniformity of processing with the parent company, except for data that must be retained for longer as required by applicable law or in the event of legal disputes. Further details are available from BPI.
- Data Protection Rights: What They Are and How to Exercise Them
The Data Subject has the right to request from BPI, at any time, access to their personal data, as well as its update, rectification, integration, or erasure. The Data Subject may also request restriction of processing or obtain their personal data in a structured, commonly used, and machine-readable format, in the cases provided for by Article 20 of the UK GDPR.
The Data Subject also has the right to object to the processing of their personal data, pursuant to Article 21 of the UK GDPR, on legitimate grounds, either initially or in connection with any subsequent communications relating to such processing. Requests must be submitted in writing to BPI using the contact details provided above. In any case, the Data Subject has the right to lodge a complaint with the competent supervisory authority (UK Supervisory Authority: the Information Commissioner’s Office – ICO), pursuant to Article 77 of the UK GDPR, if they believe that the processing of their personal data is in breach of the applicable legislation.