In order to offer the personalized and non-personalized services, provided by its website, Nuova Osmo s.r.l. based in Via Dr Bellosta 46, San Maurizio D’Opaglio (NO) email Privacy Officer email@example.com, as Data Controller, must process some identification data necessary for the provision of the same. Pursuant to art. 13 GDPR 679/2016 – “European Regulation on the Protection of Personal Data” and in relation to personal data concerning you and that will be the subject of treatment, Nuova Osmo s.r.l. guarantees, within the framework of regulatory provisions, that the processing of personal data takes place in respect of the rights and fundamental freedoms and dignity of the person concerned with particular reference to confidentiality, personal identity, right and protection of personal data. This document describes how to manage the site www.graffiodesign.it in relation to the processing of personal data of those who interact with the services provided: the information is provided pursuant to the European Regulation on the protection of personal data” 679/2016 (hereinafter GDPR) only for the site in question and not to other sites accessed via links, which Nuova Osmo s.r.l. is not in any way responsible. This information is therefore drafted and customized for visitors to the site www.graffiodesign.it and this document cancels and fully replaces any other document that had been previously published about web privacy and cookies.
Specific additional and contextual information are reported in the pages of the site, prepared for particular services on request that provide forms for data collection.
TYPES OF DATA PROCESSED
Personal data may be collected automatically during navigation and use of the site and its services or may be entered voluntarily by the user.
Among the personal data collected by the Owner independently or through third parties, there could be, by way of example and not limited to: cookies, usage data, passwords, name, surname and email.
Navigation data and other data
Computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the communication protocols of the Internet. This information is not collected to be associated with identified interested parties, but by their
nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of computers used by users who connect to the site, URI (Uniform Resource Identifier) of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the response from the server (successful, error, …) and other parameters regarding the operating system and computer environment. These data are used for the sole purpose of obtain anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site at the request of the competent authorities.
Failure by the user to provide certain personal data may prevent the site from providing its services.
Personal data provided voluntarily by the user
At various points on this site the user can transmit personal data (e.g. e-mail address, name, postal code, other personal and non-personal data) also by filling in forms or sending e-mail messages. The conferment of these data is optional, explicit and voluntary, and involves the subsequent acquisition of the sender’s email address, necessary to respond to requests, and any other personal data entered for the purposes of the service and those further granted by the user. Specific information summaries are present in the pages that provide the forms, with any indication of the mandatory nature of the provision of data necessary to use the specific service.
The user assumes responsibility for the personal data of third parties that may be published or shared through this site and guarantees to have the right to communicate or disseminate them, freeing the Owner from any liability to third parties.
LEGAL BASIS OF THE TREATMENT
Personal data are processed, as better described in the next paragraph, exclusively for purposes related to the activity of Nuova Osmo s.r.l. and to the fulfilments connected to it; the legal bases are found in the consent (e.g. for the processing of “special categories of personal data” or for marketing/profiling) and/or in the execution of a contract or a service of our management to which the user is part or in the execution of pre-contractual measures taken at the request of the user and/or in fulfilling legal obligations to which the undersigned Data Controller is subject and/or in the legitimate interest of the same.
PURPOSE OF TREATMENT
The user’s data are collected and processed for the following purposes:
- performance of operations closely related and instrumental to the management of relations with users or visitors to the site, such as:
- collection, storage and processing of user data for:
- statistical analysis also in anonymous and/or aggregate form;
FACULTY TO GIVE DATA, CONSEQUENCES OF A POSSIBLE REFUSAL AND MANAGEMENT OF CONSENT, WHERE REQUIRED
The conferment of data is optional, except for those indicated as mandatory to allow the user to access the services offered.
The processing of data for the fulfillment of the purpose, referred to in paragraph 1 of the preceding paragraph, is mandatory and any non-communication, or incorrect communication of any of the information may limit and / or prevent the full use of features and services on the site.
With regard to the optional provision of information, more information is provided on the cookies present on the site in the document “Cookies Policy” which can be accessed both from this comprehensive information and from the short information contained in the banner published on the site.
In accordance with current legislation, the user may be asked to give consent, for the processing of data for which such consent is mandatory, by ticking the appropriate box in the specific registration form. It is understood that the consent refers to the processing of data except for those strictly necessary for the operations and services requested by the user, at the time of its accession as for these activities the consent is not necessary. In addition, only with the express consent of the user, the data can be used for communications for market research or commercial information on products and promotional initiatives of the owner through mailing, e-mail, telemarketing, sms, mms.
At any time, it will be possible to reread the information and possibly change the consents previously provided, check and / or change the status of active services and possibly request additional services.
MODALITIES OF TREATMENT
The processing of personal data may be carried out with or without the help of electronic or automated means, including associating and integrating them with other databases, and through cookies. In any case, the treatment will be carried out in observance of all precautionary measures that guarantee security and confidentiality, for the time necessary to perform the service requested by the user, or required by the purposes described in this document, and the user can always ask for the interruption of treatment or deletion of data. Nuova Osmo s.r.l. has also taken all the necessary steps to ensure the security of the data, in accordance with the procedures set out in the GDPR, by adopting security measures that are deemed appropriate in order to reduce to a minimum the risk of violation of users’ privacy by third parties, and which are updated on an ongoing basis and whenever necessary.
The data are processed at the operational headquarters of the Owner and in any other place where the parties involved in the treatment are located. For further information, it is possible to contact the Data Controller at the addresses specified below.
Personal data will be processed for the time strictly necessary to achieve the purposes, described above, to fulfill contractual, legal and regulatory obligations without prejudice to prescriptive and legal terms, in respect of the rights and in compliance with the consequent obligations.
In particular, the criteria used to determine the storage period are established by specific laws (which regulate the sector in which Nuova Osmo s.r.l. operates), and by fiscal regulations regarding the processing of administrative-accounting data.
With reference to data collected for commercial purposes (referred to in point 2), the details are limited – for profiling activities – to 1 year from the date of acquisition and 2 years for direct marketing activities.
The personal data of the user of the site, finally, can be stored also until the time allowed by the Italian law to protect the legitimate interests of the owner company (art. 2947, co. 1 and 3 c.c.)”.
SCOPE OF KNOWLEDGE OF THE DATA
The processing of personal data will be carried out, within the limits of the general authorizations issued by the Guarantor for the protection of personal data, by persons expressly and specifically authorized by Nuova Osmo s.r.l.. The data may also be processed by third parties (outsourcer), which we use for the provision of services related to the pursued purpose, which our organization binds with appropriate contractual clauses or acts of formal appointment to External Managers for the treatment by them put in place. In all cases, these subjects will process the data in accordance with the instructions received from the Owner, according to operational profiles attributed to them in relation to the functions performed, limited to what is necessary and instrumental to the execution of specific operations within the scope of the services requested and exclusively for the achievement of the purposes indicated in this statement. The list of data processors, which is constantly updated, can be requested by sending a communication in the manner indicated in the following point concerning the rights of the interested party.
COMMUNICATION AND DIFFUSION
The data can be communicated, with this term meaning the giving of knowledge to one or more determined subjects, in the following terms:
- subjects who need access to data for purposes ancillary to the relationship between the parties, to the extent strictly necessary to perform ancillary tasks (for example, banks and credit institutions, companies providing services, carriers and shipping companies)
- to companies (which provide ancillary services, including computer), after signing appropriate contractual clauses imposing the duty of confidentiality and security.
The data will not be disclosed, by this term meaning the knowledge of unspecified subjects in any way, including by making them available or consultation, unless a specific consent, free and informed, granted for each type of treatment.
Defense in court
The user’s personal data may be used for the defense by the owner in court or in the preparatory stages of its possible establishment, from abuse in the use of the same or related services by the user. The user declares to be aware that the Owner may be required to disclose data at the request of public authorities.
Owner of the processing of personal data is Nuova Osmo s.r.l. Nuova Osmo s.r.l. with headquarters in Via Dr Bellosta 46, San Maurizio D’Opaglio (NO) email Privacy Officer firstname.lastname@example.org. The owner keeps an up-to-date list of the persons responsible for data processing and guarantees that the data subject will be able to view it at the above-mentioned offices.
RIGHTS OF THE INTERESTED PARTY
The interested parties, to whom the personal data refer, have the right to exercise their rights at any time (Right of access to personal data and other rights), in particular: right to obtain confirmation
of the existence or not of their personal data, to access them and to know their content and origin, to verify their correctness, to ask for their integration or updating, limitation of the treatment or portability. The rectification and blocking may be required if the data are incomplete, incorrect or
The rectification and blocking can be requested if the data are incomplete, incorrect or collected in violation of the regulations in force and in this sense it is also possible to oppose their processing for legitimate reasons or any automated decision-making process (including profiling), as well as it is possible to request, for the same reasons, the cancellation provided that in accordance with the regulations in force and if there are no other obligations of conservation and treatment by Nuova Osmo s.r.l. with headquarters in Via Dr Bellosta 46. Interested parties also have the right to oppose the processing of their personal data for marketing purposes (indicated in point 2), even if carried out by automated means of contact; this right also extends to traditional ones and interested parties may exercise these rights in whole or in part (e.g. only to communications via sms, e-mail or telephone or opposing only the sending of promotional communications carried out by automated means, etc.). With regard to the exercise of their rights listed above, as well as to know the updated list of those responsible for the processing of personal data, the person concerned may make their requests through specific communication by mail addressed to the same Company, or through the mailbox: email@example.com, also by sending communication to the e-mail address indicated, in order to obtain timely response.
If the data subject has given consent to the processing of personal data for a specific purpose, he/she has the right to revoke it at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation.
Please also note that the data subject always has the right to lodge a complaint with the Data Protection Authority to exercise his or her rights or any other matter relating to the processing of his or her personal data.
APPLICATION AND CHANGES TO THIS POLICY
Publication Date December 2019