INFORMATION REGARDING THE PROCESSING OF PERSONAL DATA
1. PURPOSE OF THE TREATMENT
a) The following personal data are collected and processed by OBLŌS in this disclosure to manage contractual relationships with customers and for the related legal obligations: name, surname, address, identification document. The provision of personal data is generally optional. Only in certain cases failure to provide data may make it impossible to access specific services and obtain what may be requested (eg registration – and the provision of personal data, e-mail address, delivery address, credit/debit card details or bank details and telephone number – it is necessary to proceed with the purchase of products online); failure to provide such data may therefore prevent OBLŌS from allowing access to the Site’s services or responding to user requests. The data necessary from time to time are indicated in the data collection forms on the Site – eg. indicating them with an asterisk (*) – and the consequences of their failure to provide them are reported in the specific information on the data collection pages.
2. PROVISION OF DATA
The provision of personal data with respect to the purposes referred to in paragraph 1 letter a) is mandatory and in case of refusal, OBLŌS and any associated companies will not be able to carry out the contractual services requested. For the purposes referred to in paragraph 1 letters b) and c), the provision is free and optional and the use of the data is subject to consent. However, any refusal to provide data will not allow OBLŌS and any companies in the OBLŌS group to pursue the purposes indicated therein.
3. RIGHTS OF THE INTERESTED PARTY
We remind you that at any time you can exercise the rights provided for in articles 15 to 21 of the GDPR and, in particular, request information on the existence and characteristics of the processing of personal data, the rectification and cancellation of the same, or thelimitation of processing, oppose the processing and/or request the transmission of your personal data to another holder. You will also have the right to withdraw the consent at any time, without prejudice to the lawfulness of the processing based on the consent given before the revocation and to lodge a complaint with the Guarantor Authority for the protection of personal data, Piazza di Montecitorio n.121, 00186, Rome (RM).
4. METHOD OF TREATMENT
Personal data will be processed with IT tools and / or by manual processing for the time necessary to achieve the purposes for which they were collected. In particular, the personal data collected for the purposes referred to in paragraph 1 letters b) and c) will also be processed using automated mechanisms according to logic and procedures strictly related to the processing purposes specified above.
5. ENTERING THE DATA IN THE CRM SYSTEM
The inclusion of personal data in the Customer Relationship Management (CRM) system is optional and takes place only in the event of consent to the pursuit of one of the purposes referred to in paragraph 1 letters b) and c). The insertion of personal data processed for the purposes referred to in paragraph 1 letters b) and c) in the CRM system will automatically result in the visibility, as well as the possibility of modification and updating of the same, by OBLŌS employees all over the world who will be designated as persons in charge of the processing.
6. SCOPE OF COMMUNICATION, TRANSFER ABROAD AND DISSEMINATION OF DATA
The processing of personal data is carried out by personnel authorized for this purpose or appointed as data processor, as the case may be: of OBLŌS, of any parent companies of, controlled by, connected to, under the same control; in this regard, it is specified that Model Clauses prepared by the European Commission are used for any transfer of personal data outside the European Union. In addition, personal data may also be processed by: – companies that carry out shipping/delivery services for catalogs and / or products; – companies that perform newsletter mailing services, advertising material or promotional communications; – companies that perform customer care services; – companies that carry out market analysis and research; – companies that perform IT system maintenance services. The data collected may also be processed by independent third party data controllers, such as, by way of example:
– people, companies, associations or professional firms that provide assistance and consultancy (lawyers, accountants, auditors);
– companies that carry out credit card and tax free payment management services. The complete list of third parties who may process personal data on behalf of OBLŌS or as independent third party data controllers can be found by writing to firstname.lastname@example.org.Personal data will in no case be disseminated.
7. DATA STORAGE TIMES
The data collected for the purposes referred to in paragraph 1 letter a) will be kept by OBLŌS and by any OBLŌS Group companies for the time necessary for the execution of the contract, for the provision of legal or conventional guarantees or in accordance with the mandatory retention terms for law. The data collected for the purposes referred to in paragraph 1 letters b) and c) will be kept until the customer revokes the consent to the processing of personal data and in any case, limited to the data collected for the purposes referred to in paragraph 1 letter b), no more than 10 years. At the time of withdrawal of consent or, if earlier, at the expiry of the retention period of the data collected for the purposes referred to in paragraph 1 letter b), they will be automatically deleted or made anonymous permanently.
8. RIGHTS OF THE INTERESTED PARTY
You can request at any time: information on the existence and characteristics of the processing of personal data, the rectification, cancellation of the same or the limitation of processing. It is also possible to oppose the processing and/or request the transmission to another holder. OBLŌS is obliged to respond to requests within the time limits provided for by applicable legislation; also has the obligation to correct incorrect data, integrate incomplete data and update data that is no longer accurate; and finally has the obligation, if so requested, to delete the data and to limit and/or interrupt the processing, or to ensure, where this is technically possible, its transmission to another owner. To exercise their rights, as listed above and as required by law or to obtain any information on the matter and / or report any misunderstandings and problems, the interested party is invited to send an email to the email address email@example.com the timely management of responses. If the answer has not been satisfactory, the interested party may contact the Italian Data Protection Authority. Any electronic communication sent will contain a specific section specifying the methods for opposing the processing and no longer receiving promotional materials and information.
9. OWNERS AND MANAGERS OF THE TREATMENT
The data controllers are: OBLŌS – Via M. Rapisardi 8 – 95013 Fiumefreddo di Sicilia (CT) and any companies of the OBLŌS Group as identified at the bottom of this information.It is possible to contact the data controllers or to know the complete list of the data processors designated by them by writing to the following e-mail address: firstname.lastname@example.org