Privacy policy.

The Customer acknowledges and accepts that the Company collects and processes certain personal data. 

All processing of personal data will be carried out in accordance with the applicable legislation on the protection of personal data and privacy. 

The Company collects and processes personal data for the following purposes: 

  • the management and processing of files within the framework of the assignment entrusted to the Company; 

  • risk management and quality control; 

  • customer and contact management, including informational or promotional communications; 

  • compliance with its legal and regulatory obligations. 

The Customer acknowledges and accepts that the Company may transfer personal data to third parties for the purposes of providing the Services. 

The Company shall take appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction or damage to such data. 

When personal data is communicated by the Customer or at their request, the Customer guarantees to the Company that this communication takes place with the consent of the persons concerned and in accordance with applicable legislation, and indemnifies the Company against any claims by these persons. 

Any person concerned has the right to access and rectify personal data concerning them at any time. They also have the right to request the erasure of certain data, to object to any processing of their data for direct marketing purposes, and to lodge a complaint with the supervisory authority. 

To exercise these rights, the person concerned simply needs to send a written request to the data controller, Bruce Douglas SRL. Any questions regarding this clause may also be sent to this address. However, the Company has the right to oppose requests that are manifestly abusive, in particular due to their number, repetitive or systematic nature. 

The Company retains personal data for the period necessary to perform the Services and achieve the purpose for which it was collected, unless otherwise required or authorised by applicable law or by the data subject.