In compliance with EU Reg. 2016/679, Italian Legislative Decree 196/2003, and related regulations, in order to correctly manage the contractual relationship, Orastron srl unipersonale (Data Controller) may process your personal data (if concerning a legal person, also in relation to natural persons who are workers or similar positions in the other Party) for the purposes and in the manner specified below.
| Purposes | Legal basis and consequences in case of refusal | Retention period |
|---|---|---|
| a) agreement and performance of the contractual and pre-contractual relationship, with related administrative and accounting purposes, including possible double opt-in verification process; included are nickname, avatar, comments and any other information/content you are allowed to publish on the Website | performance of a contract, in case of refusal it will not be possible to agree and perform the contract | up to three months after the termination of the contractual relationship or the pre-contractual requests; about avatar, nickname, comments, and any other information you published on the Website, they shall not be deleted after the contractual termination unless for compelling reasons (e.g., law infringement) |
| b) compliance with laws or regulations, including for administrative and accounting purposes relating to contractual performance (e.g., compliance with copyright to be recognised as an author) | regulatory obligation, in case of refusal the penalties provided for by the law will apply, so there will be no contractual relationship | up to the duration foreseen by the applicable laws |
| c) establishment, exercise, or defence of legal claims | legitimate interest pursued by the Data Controller, considered overridden pursuant to Article 21 GDPR | for a maximum of 10 years pursuant to art. 2946 of the Italian Civil Code or up to the maximum prescription term |
| d) IT security and networks security | legitimate interest pursued by the Data Controller, considered overridden pursuant to Recital 49 GDPR | for a maximum of 6 months unless further use for rights’ protection |
| e) reproduction and usage of the image and/or the voice and/or the name (if applicable) | explicit consent, in case of refusal it will not be possible to have a contractual relationship | for the entire duration of the contents exploitation incorporating the image and/or the voice and/or the name, except for the possible withdraw of the consent |
| f) marketing online communication via e-mail, newsletter, etc., about Orastron business activity and products | consent, in case of refusal it will not be possible to receive marketing communications | for a maximum of 24 months, unless consent withdraw; in case of newsletter, until consent withdraw |
In general, the processing will be carried out using hardcopy, IT, telematic, or other telecommunications systems, in order to guarantee the security and confidentiality of the data, as well as full compliance with the law.
Data Categories: common data (excluding special data — e.g., health data — or relating to criminal convictions and offences; if you provide any kind of not requested data, the Controller shall not process them except deletion); possibly (if required by Controller website feature, as avatar or nickname) also the image, the nickname, and your comments/texts/contents as provided by you.
Data Sources: the data subject (you).
The data will not be disclosed but may be communicated to recipients of data processor or separate controllers or joint-controllers, in particular:
Unless otherwise indicated, the recipients will not be established outside the European Community or in any case in countries that not ensure an appropriate level of protection. The data will not be transferred or processed outside the European Community or any other place deemed not appropriated; in case of extra-UE data transfer, they shall comply with articles 45-49 GDPR; if appropriate safeguards are applied, e.g., standard contractual clauses, they may be completed by supplementary measures.
If you are a natural person, what is provided here applies to the processing of your personal data. In case of third parties data provided by you, you warrant that these natural persons have been made aware of this notice, delivering it to them in durable medium and collecting the relative consent (if due), holding harmless the Data Controller from any third party liability or claim.
You can exercise the following rights at any time:
The processing takes place by automated means which do not determine the profiling of the data subjects.
Orastron srl unipersonale, registered office in Via Pasquale Voso, 20/D — 84043 Agropoli (SA), Italy, VAT ID IT05975760652, e-mail: info@orastron.com.