This policy applies to the processing of personal data of users (hereinafter, "User / Users") processed through the website www.oamc.com (hereinafter, "Site") also in relation to e-commerce services performed there (hereinafter, "Services"). By using the Services, the User will make purchases from Triboo Digitale S.r.l., whose full address is visible at point 6 below and in the general conditions of sale.
Through this document, OAMC Manufacturing Srl, with registered office in Via Vincenzo Monti 8, 20123 Milan (MI)., C.F. e P.I.: IT 11426430960, as the controller of the processing of personal data (hereinafter, "Controller"), intends to convey the information referred to in Articles. 13 et seq. of EU Regulation 679/2016 (hereinafter, the "Regulation"), in relation to the processing of personal data through the Site.
1. Type of data processed and types of processing
a) Navigation data: the computer systems and software procedures used to operate this Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified interested parties, but by their nature could, through processing and associating data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of computers used by Users connected to the Site, URI (Uniform Resource Identifier) of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc..) and other parameters relating to the operating system and computer environment. These data are used only to obtain anonymous statistical information on the use of the Site and to check its proper functioning and are deleted immediately after processing.
b) Data provided voluntarily by the User to purchase a product on the Site and / or use of a Service: the finalization of the sale of a product through the Site and/or use of the Services involves the processing of User data, with the sole purpose of offering the Services and to fulfill its contractual and administrative obligations, including, for example, process the order and payment, send the product purchased. The data subject of the treatment are: name, e-mail address, domicile, and other data which may be useful to conclude and execute the sale contracts; data included in special categories are excluded.
c) Data provided voluntarily by the User for sending promotional communication relating to the Services: in the event where the interested party subscribes the newsletter Service or expresses his consent to the receipt of commercial communication by the Controller, the data will be processed for sending such communication by e-mail or postal mail to the addresses provided by the interested party. The data subject of the treatment are: name, e-mail address, domicile, and other data which may be useful to address the promotional communication; data included in special categories are excluded.
d) Cookies: for the processing of data through cookies, please see the relevant policy.
2. Purpose and legal basis of the processing
The data of the Users collected will be processed by the Controller for:
- Website operation: to pursue a legitimate interest of the Controller, consisting in ensuring the security of the Site and of the information exchanged on it, i.e. the ability of this Site to withstand, at a given level of security, unforeseen events or unlawful or malicious acts that compromise the availability, authenticity, integrity, and confidentiality of personal data stored or transmitted and the security of the related Services offered or made accessible. The legal basis for the processing is Article 6(1)(f) of the Regulation.
- Use of Services: to use the Services offered through the Site, for example, to allow the User to purchase a product, etc. The legal basis for the treatment is art. 6, par. 1, letter. b) of the Regulation being the processing necessary for the execution of the contract of which the person concerned is a party;
- Sending of advertising/marketing communication of the Controller: if the interested party has given his explicit consent, to send invitations to training courses, events organized by the Controller or to send promotional communication of the activities of the Controller, including marketing research. The legal basis for the processing is art. 6, letter a) of the Regulation, i.e. the consent of the interested party.
3. Duration of processing and storage period of data
For the purposes of Article. 2) above, personal data will be processed for the period strictly necessary to achieve the above objectives and also subsequently, for the performance of legal obligations and/or for purposes of a defensive nature; in this second case, the processing shall consist exclusively in storing the contractual information for ten years i.e. the period set as statute of limitation for civil and tax/fiscal purposes.
The data provided for commercial communications, opinion surveys and market researches will be kept until the request of the interested party to interrupt the activity, or for 2 years.
4. Modalities of the treatment
The processing will be carried out both on paper and by telematic means, with the help of modern computer systems and with manual methods, only by persons expressly appointed for this purpose. The data will be processed with logic and through forms of organization of the data strictly related to the obligations, tasks or purposes mentioned above. The Controller uses technical and organizational measures to protect the data in his possession from manipulation, loss, destruction and against access by unauthorized persons. Security measures are constantly improved according to technological development.
5. Mandatory or optional nature of data provision
The provision of the data referred to in point 1, letter b) is optional. In case of refusal, however, the User will not be able to purchase on the Site.
The provision of the data referred to in point 1, letter c) is optional. The user may revoke his or her consent at any time and without giving reasons. The easiest way to do this is to click on the "Unsubscribe" link, which is found in each newsletter or communication received. Alternatively, the user can send the unsubscription request to the Controller, at the address firstname.lastname@example.org.
6. Scope of communication and dissemination
The User's personal data will be processed by persons authorised to carry out these tasks, duly appointed as data processors or persons in charge of processing, equipped with security measures to guarantee the confidentiality of the persons concerned to whom the data refer and to avoid undue access to third parties or unauthorised personnel. If necessary, the data collected may be communicated, within the limits strictly pertinent to the obligations, tasks or purposes referred to in paragraph 2, to public or private entities (insurers, auditing and certification companies, etc..) or to the competent authorities for the purposes of prevention, detection or repression of crime, with the observance of the rules governing the matter. No data will be disclosed.
With specific regard to the e-commerce platform, Triboo Digitale S.r.l. (with registered office in Viale Sarca 336, Building 16, 20126 Milan, VAT number and registration number with the Register of Companies of Milan 02912880966) is appointed processor for the processing of personal data of Users for purposes related to the sale through the Site, in all its phases (navigation on the site and its use based on the conditions of use, registration, administrative activity, legal obligations), delivery, returns, customer care.
The updated list of all the processors is available near the center of OAMC Manufacturing Srl and will be able to be demanded to the following address e-mail: email@example.com. Such list can be subsequently integrated and/or updated to the need.
The data of the Users, memorized on electronic support, are guarded and filed on a server in legitimity availability of Triboo Digitale S.r.l. situated in the European Union.
7. User rights
Users are entitled to know their rights, consisting essentially in the right to receive information about the existence of the processing of their personal data, and to access their data, to obtain the rectification, integration, updating, cancellation or blocking. Furthermore, the User will also have the right to obtain a copy of his/her data, to limit the processing and/or, again, to oppose their processing, as well as the right to data portability and to lodge a complaint with the competent control authorities under the conditions and within the limits indicated in art. 13 of the Regulation.
Each data subject is guaranteed the following rights as per articles 15 et seq. of the Regulation:
- Right to information;
- Right of access to the interested party;
- Right of rectification;
- Right of cancellation (right to be forgotten);
- Right of limitation of treatment,
- Right to data portability;
- Right of opposition.
The User can then know which of his personal data are in the possession of the Controller, their origin and how they are used, request their updating, rectification or integration and, in the cases provided for by current regulations, the cancellation, limitation of treatment or oppose their treatment. Any interested party may, if they wish, request to receive a copy of the personal data held by the Controller concerning them in a format readable by electronic devices and, where technically possible, the Controller may transfer the data directly to a third party indicated by the interested party.
If the User considers that the processing of his personal data has been carried out unlawfully, he may lodge a complaint with one of the competent supervisory authorities for compliance with the rules on the protection of personal data. In Italy, the complaint can be submitted to the Guarantor for the Protection of Personal Data (http://www.garanteprivacy.it/).
8. Exercise of rights
To exercise these rights, Users may send a communication to Controller to the email address firstname.lastname@example.org, indicating in the subject line "Privacy - exercise of rights".
*** *** ***
Pursuant to art. 13 of EU Regulation 2016/679 of 27 April 2016 concerning the protection of individuals with regard to the processing of personal data (hereinafter, the "Regulation"), this Policy will explain how these data are collected, for what purposes and what are your rights. This document is an integral part of the information on the processing of personal data, available at the following link:
If you want to update your cookie preferences click here
WHAT ARE COOKIES?
Cookies are small text files that the sites visited by the user send directly to their terminal (usually the browser), where they are stored before being re-transmitted to the same sites at the next visit by the same user (so-called first-party cookies). While browsing a site, the user can also receive cookies from different sites or web servers on their terminal (so-called third-party cookies); this happens because on the visited website there may be elements such as, for example, images, maps, sounds, specific links to web pages of other domains that reside on servers other than the one on which the requested page is located. In other words, they are cookies that are set by a website other than the one you are currently visiting.
Cookies may have a duration limited to a single browsing session on the browser (so-called session cookies), and in this case they are automatically deactivated when the user closes the browser; or they may have a predetermined expiry date and, in this case, they will remain stored and active on your hard disk until that expiration date, continuing to collect information during different browsing sessions on the browser (so-called permanent cookies).
Cookies are used for various functions. Some are necessary to allow you to browse the Site and take advantage of its functions (so-called technical cookies). Others are used to obtain statistical information, in aggregate or not, on the number of users who access the Site and how the Site is used (so-called monitoring or analytics cookies). Finally, others are used to trace your consumer profile and display advertisements on the Site that may be of interest to you, as they are consistent with your tastes and consumption habits (so-called profiling cookies).
To learn more about these different categories of cookies, continue reading this information. Find out how they work and what they are for, and freely choose whether to consent to their use or prevent it.
FIRST PARTY COOKIES
The Site uses the following types of first-party technical cookies, for whose installation no consent is required by the user but for which OAMC Manufacturing Srl is obliged to provide adequate information:
(a) Navigation or session cookies: essential to allow the user to move normally within our Site and to properly use the related services; not being stored on the user's computer, they disappear when the browser is closed;
(b) "Functionality cookies: solely aimed at improving and speeding up navigation on the Site, by storing certain choices made by the user (such as language preferences).
These are therefore tools used by OAMC Manufacturing Srl to ensure, among other things, efficient navigation, session stability, persistence of the login throughout the session and the country of navigation selected. They are also used to save the choices made by the user relating to the display of certain elements of the page, such as information and communication banners.
Pursuant to the regulations in force, the use of technical cookies and the carrying out of the processing related to them does not require the prior consent by the user.
In any case, the possibility remains for the latter to prevent the installation of technical cookies at any time through the settings of their browser, in the knowledge that such a choice could complicate, slow down and sometimes block navigation on the Site.
OAMC Manufacturing Srl acts as data controller exclusively with reference to the first party cookies installed on the Site.
THIRD PARTY COOKIES
It is possible that while a user is browsing our Site, some cookies may be stored on their device that are not directly controlled and managed by OAMC Manufacturing Srl. This happens, for example, when the user visits a page that includes the contents of a third party website.
In this regard, it should be noted that OAMC Manufacturing Srl has no role in the processing of data deriving from this type of cookies, being, in this case, a simple technical intermediary.
Third-party profiling cookies are used to display personalised advertisements on the Site and on other websites and their operation is based on the browsing activities of each user. This type of cookies could also be used by third parties to show their products and services on the Site.
The Site also uses some types of third-party analytical cookies through which the following information is collected, by way of example but not limited to:
(a) number of visitors, page views and navigation within the Site;
(b) effectiveness of acquisition campaigns based on the source of web traffic;
(c) details on products displayed and possibly downloaded on the Site.
These cookies, as well as the purposes for which they are used outside the Site, fall under the direct and exclusive responsibility of the third party who installs them on the user's terminal and are used to show the user advertisements in line with their interests (this is the case of third-party cookies for profiling / retargeting).
If users do not wish to receive third-party cookies on their terminal equipment, they may at any time, via the links below, or via the selection/deselection options in the "Customise" area of the cookie banner (accessible at any time via the "Modify your consent" button below) exclude their receipt.
The following table shows all the cookies present on the Site, with the evidence of their specific characteristics and, in the case of third-party cookies, links to the respective privacy policies so that you can consciously decide whether to consent to their use and which cookies block or delete, if any.
COOKIE MANAGEMENT AND CONSENT
On your first visit to the Site, you may (i) accept all cookies by clicking on the "Accept All" button; (ii) give no consent and continue with the default settings, which only include the use of technical cookies necessary for the operation of the Site, by clicking on the "Close and Continue (necessary only)" button or (iii) select in a granular manner only certain purposes or third parties, by clicking on "Customise", interacting with the cookie banner that is shown on your first visit.
However, as most browsers are programmed to accept cookies automatically, you may choose not to receive them by accessing your browser settings and disabling their use, following the procedures described at the following links:
For more information on cookies, you can connect to the website www.youronlinechoices.com (limited to the services registered by this platform), to obtain information on how to delete or manage cookies based on the browser used and how to set the preferences for the use of those of third parts. www.youronlinechoices.eu/it/
Your Online Choices is an Internet site managed by the non-profit association European Interactive Digital Advertising Alliance (EDAA), the Italian version of which can be reached at www.youronlinechoices.eu/it/ , which provides information on behavioural advertising based on profiling cookies ( http://www.youronlinechoices.com/it/a-proposito ) and allows Internet users to easily oppose (opt-out) the installation of the main profiling cookies installed by advertisers and used on Internet sites ( http://www.youronlinechoices.com/it/le-tue-scelte ). Before using this tool, we advise you to carefully read the general conditions of service of the Your Online Choices website ( http://www.youronlinechoices.com/it/condizioni-generali-di-servizio ), frequently asked questions (FAQ) ( http://www.youronlinechoices.com/it/faqs ) and the user guide ( http://www.youronlinechoices.com/it/help ).
To disable analytical cookies and to prevent Google Analytics from collecting data about your browsing, you can download the browser add-on component for disabling Google Analytics: https://tools.google.com/dlpage/gaoptout.
We will retain user preferences about cookies thanks to a special technical cookie with the characteristics specified in the table above.
METHODS OF PROCESSING AND TIME OF DATA RETENTION
As highlighted in the premise of this statement, OAMC Manufacturing Srl collects and processes some of your personal data through the cookies it conveys directly on the Site (first-party cookies). OAMC Manufacturing Srl acts as data controller, in accordance with the provisions of the Regulation. OAMC Manufacturing Srl will process your data only with electronic tools, in a totally automated way and without human intermediation. Therefore, the employees and collaborators of OAMC Manufacturing Srl will never access the content of your personal data obtained through cookies, which means that they will never be able to access and / or have direct personal identification information (IPI).
Some of the employees and collaborators of OAMC Manufacturing Srl, appointed by us as data processors, may carry out maintenance interventions on the computer systems that host your data, without being able to access their actual content. Personal data may be stored on servers managed by third parties (e.g. computer systems suppliers) or may be managed by individuals specializing in online advertising, acting as external data processors on the basis of a specific appointment in writing by the Company. OAMC Manufacturing Srl informs you that, in compliance with the conditions and guarantees established by the Regulation, your data may be transferred to countries not belonging to the European Economic Area, which may not offer a level of privacy and personal data protection comparable to that guaranteed by the Italian and European laws on privacy, but as data controller OAMC Manufacturing Srl will take the security of the data into consideration, therefore it will proceed in the management of such transfers with all due precautions and guarantees. Your personal data will not be communicated to third-party data controllers nor will they be disclosed.
The personal data of the Site users will be stored for the time strictly necessary to carry out the primary purposes described in this statement, or in any case for the time necessary to protect the rights and interests of both Users and OAMC Manufacturing Srl.
- By sending a registered letter to the registered office Via Cassia 69, 50023, Tavarnuzze - Impruneta (FI)., OAMC Manufacturing Srl;
- By sending an e-mail message to the address email@example.com
Pursuant to the Regulation, OAMC Manufacturing Srl informs that Users have the right to be informed about (i) the origin of personal data; (ii) the purposes and methods of processing; (iii) the logic applied in the case of processing carried out with the aid of electronic tools; (iv) the identification data concerning the data controller and data processors; (v) the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as managers or agents.
In addition, users have the right to obtain:
(a) access, updating, rectification or, where interested, integration of the data;
(b) the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed;
(c) the attestation that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data have been communicated or disseminated, except in the event that such compliance proves impossible or involves a manifestly disproportionate use of resources with respect to the protected right.
Moreover users can withdraw consent at any time,
(a) if the treatment is based on their consent;
(b) (where applicable) the right to data portability (right to receive all personal data concerning them in a structured, commonly used and self-readable format), the right to restrict the processing of personal data and the right to cancellation ("Right to Oblivion");
(c) the right to oppose:
- in whole or in part, for legitimate reasons to the processing of personal data, even if pertinent for collection purposes;
- in whole or in part, to the processing of personal data for the purpose of sending advertising materials or direct selling or for carrying out market research or commercial communication.
(d) If they believe that the treatment which concerns them violates the regulation, the right to complain to a supervisory authority (in the Member State where they usually reside, in the one where they work or in the one where the alleged violation occurred). The Italian supervisory authority is the Data Protection Authority (Garante per la protezione dei dati personali), with headquarters in Piazza Venezia 11 - 00187 Rome. (http://www.garanteprivacy.it/).
OAMC Manufacturing Srl is not responsible for updating all the links that can be viewed in this Information Notice, therefore whenever a link is not functional and/or updated, Users hereby acknowledge and accept that they must always refer to the document and/or section of the websites referred to by this link.