This policy applies to the processing of personal data of users (hereinafter, "User / Users") processed through the website www.oamc.com (hereinafter, "Site") also in relation to e-commerce services performed there (hereinafter, "Services"). By using the Services, the User will make purchases from Triboo Digitale S.r.l., whose full address is visible at point 6 below and in the general conditions of sale.
Through this document, OAMC S.r.l., with registered office in Via Cassia 69, 50023 Tavarnuzze - Impruneta (FI)., P.I. 06868090488, as the controller of the processing of personal data (hereinafter, "Controller"), intends to convey the information referred to in Articles. 13 et seq. of EU Regulation 679/2016 (hereinafter, the "Regulation"), in relation to the processing of personal data through the Site.
1. Type of data processed and types of processing
a) Navigation data: the computer systems and software procedures used to operate this Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified interested parties, but by their nature could, through processing and associating data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of computers used by Users connected to the Site, URI (Uniform Resource Identifier) of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc..) and other parameters relating to the operating system and computer environment. These data are used only to obtain anonymous statistical information on the use of the Site and to check its proper functioning and are deleted immediately after processing.
b) Data provided voluntarily by the User to purchase a product on the Site and / or use of a Service: the finalization of the sale of a product through the Site and/or use of the Services involves the processing of User data, with the sole purpose of offering the Services and to fulfill its contractual and administrative obligations, including, for example, process the order and payment, send the product purchased. The data subject of the treatment are: name, e-mail address, domicile, and other data which may be useful to conclude and execute the sale contracts; data included in special categories are excluded.
c) Data provided voluntarily by the User for sending promotional communication relating to the Services: in the event where the interested party subscribes the newsletter Service or expresses his consent to the receipt of commercial communication by the Controller, the data will be processed for sending such communication by e-mail or postal mail to the addresses provided by the interested party. The data subject of the treatment are: name, e-mail address, domicile, and other data which may be useful to address the promotional communication; data included in special categories are excluded.
d) Cookies: for the processing of data through cookies, please see the relevant policy.
2. Purpose and legal basis of the processing
The data of the Users collected will be processed by the Controller for:
- Website operation: to pursue a legitimate interest of the Controller, consisting in ensuring the security of the Site and of the information exchanged on it, i.e. the ability of this Site to withstand, at a given level of security, unforeseen events or unlawful or malicious acts that compromise the availability, authenticity, integrity, and confidentiality of personal data stored or transmitted and the security of the related Services offered or made accessible. The legal basis for the processing is Article 6(1)(f) of the Regulation.
- Use of Services: to use the Services offered through the Site, for example, to allow the User to purchase a product, etc. The legal basis for the treatment is art. 6, par. 1, letter. b) of the Regulation being the processing necessary for the execution of the contract of which the person concerned is a party;
- Sending of advertising/marketing communication of the Controller: if the interested party has given his explicit consent, to send invitations to training courses, events organized by the Controller or to send promotional communication of the activities of the Controller, including marketing research. The legal basis for the processing is art. 6, letter a) of the Regulation, i.e. the consent of the interested party.
3. Duration of processing and storage period of data
For the purposes of Article. 2) above, personal data will be processed for the period strictly necessary to achieve the above objectives and also subsequently, for the performance of legal obligations and/or for purposes of a defensive nature; in this second case, the processing shall consist exclusively in storing the contractual information for ten years i.e. the period set as statute of limitation for civil and tax/fiscal purposes.
The data provided for commercial communications, opinion surveys and market researches will be kept until the request of the interested party to interrupt the activity, or for 2 years.
4. Modalities of the treatment
The processing will be carried out both on paper and by telematic means, with the help of modern computer systems and with manual methods, only by persons expressly appointed for this purpose. The data will be processed with logic and through forms of organization of the data strictly related to the obligations, tasks or purposes mentioned above. The Controller uses technical and organizational measures to protect the data in his possession from manipulation, loss, destruction and against access by unauthorized persons. Security measures are constantly improved according to technological development.
5. Mandatory or optional nature of data provision
The provision of the data referred to in point 1, letter b) is optional. In case of refusal, however, the User will not be able to purchase on the Site.
The provision of the data referred to in point 1, letter c) is optional. The user may revoke his or her consent at any time and without giving reasons. The easiest way to do this is to click on the "Unsubscribe" link, which is found in each newsletter or communication received. Alternatively, the user can send the unsubscription request to the Controller, at the address [email protected]
6. Scope of communication and dissemination
The User's personal data will be processed by persons authorised to carry out these tasks, duly appointed as data processors or persons in charge of processing, equipped with security measures to guarantee the confidentiality of the persons concerned to whom the data refer and to avoid undue access to third parties or unauthorised personnel. If necessary, the data collected may be communicated, within the limits strictly pertinent to the obligations, tasks or purposes referred to in paragraph 2, to public or private entities (insurers, auditing and certification companies, etc..) or to the competent authorities for the purposes of prevention, detection or repression of crime, with the observance of the rules governing the matter. No data will be disclosed.
With specific regard to the e-commerce platform, Triboo Digitale S.r.l. (with registered office in Viale Sarca 336, Building 16, 20126 Milan, VAT number and registration number with the Register of Companies of Milan 02912880966) is appointed processor for the processing of personal data of Users for purposes related to the sale through the Site, in all its phases (navigation on the site and its use based on the conditions of use, registration, administrative activity, legal obligations), delivery, returns, customer care.
The updated list of all the processors is available near the center of OAMC S.r.l. and will be able to be demanded to the following address e-mail: [email protected] Such list can be subsequently integrated and/or updated to the need.
The data of the Users, memorized on electronic support, are guarded and filed on a server in legitimity availability of Triboo Digitale S.r.l. situated in the European Union.
7. User rights
Users are entitled to know their rights, consisting essentially in the right to receive information about the existence of the processing of their personal data, and to access their data, to obtain the rectification, integration, updating, cancellation or blocking. Furthermore, the User will also have the right to obtain a copy of his/her data, to limit the processing and/or, again, to oppose their processing, as well as the right to data portability and to lodge a complaint with the competent control authorities under the conditions and within the limits indicated in art. 13 of the Regulation.
Each data subject is guaranteed the following rights as per articles 15 et seq. of the Regulation:
- Right to information;
- Right of access to the interested party;
- Right of rectification;
- Right of cancellation (right to be forgotten);
- Right of limitation of treatment,
- Right to data portability;
- Right of opposition.
The User can then know which of his personal data are in the possession of the Controller, their origin and how they are used, request their updating, rectification or integration and, in the cases provided for by current regulations, the cancellation, limitation of treatment or oppose their treatment. Any interested party may, if they wish, request to receive a copy of the personal data held by the Controller concerning them in a format readable by electronic devices and, where technically possible, the Controller may transfer the data directly to a third party indicated by the interested party.
If the User considers that the processing of his personal data has been carried out unlawfully, he may lodge a complaint with one of the competent supervisory authorities for compliance with the rules on the protection of personal data. In Italy, the complaint can be submitted to the Guarantor for the Protection of Personal Data (http://www.garanteprivacy.it/).
8. Exercise of rights
To exercise these rights, Users may send a communication to Controller to the email address [email protected], indicating in the subject line "Privacy - exercise of rights".
*** *** ***