PRIVACY POLICY
INFORMATION pursuant to articles 13 and 14 of Regulation (EU) 2016/679
With this document ("Information") the Data Controller, as defined below, wishes to inform you about the purposes and methods of processing your personal data and about the rights recognized by the Regulation (EU) 2016/679 concerning the protection of natural persons, with regard to the processing of personal data and their free circulation ("GDPR").
The company VS srl has always paid particular attention to compliance with the confidentiality obligations towards the subjects whose personal data they process and adopts in their activities every measure necessary to protect the data relating to the relationships entertained. As required by the privacy legislation, we now wish to provide you with some information on how our company uses your personal data.
We therefore invite you to carefully read the following information, available at our office and also on our website https://www.opyo.it/, before signing and or electronically accepting the attached consent form and crossing the further consent options reported therein. Holder of the treatment
The data controller is VS srl with registered office in Noicattaro, VAT no. 07850587726, - e.mail: info@opyo.it PEC: vincenzosaponaro@pec.it.
The data controller is also the data controller, who uses the data to improve the services offered to customers and to advertise and to inform about the commercial activities put in place or to offer a more personalized service in line with your interests.
The same owner oversees the protection of personal data. For any request relating to your personal data, contact the e-mail address where you can exercise your rights, as well as to receive any information relating to them and / or this Notice, by writing to:
• VS srl - Attestation of Mr. Saponaro Vincenzo;
• by sending an e-mail to the address: info@opyo.it;
• by sending a certified e-mail message to the certified email address: vincenzosaponaro@pec.it.
The Data Controller will take charge of your request and provide you, without undue delay and in any case, at the latest, within one month of receiving it, the information relating to the action taken regarding your request. This deadline can be extended by two months, if necessary, taking into account the complexity and number of requests.
We inform you that if the Data Controller has doubts about the identity of the natural person submitting the request, he may request additional information necessary to confirm the identity of the interested party.
Type of data processed
VS srl processes the identification data you provide, including - in case of creating an e-mail account or registering for other services offered through the Portal - name, surname, date of birth, province of residence, navigation data.
Health data and, in general, special categories of personal data referred to in article 9 of the European Privacy Regulation EU 2016/679, "Privacy Regulation" (ie: sensitive, biometric, genetic and criminal data) are not processed.
What personal data we process
Personal data
For the purposes indicated in this Notice, the Data Controller may process common personal data, which are, for example, personal data (name, surname, address, telephone number, VAT number, city, newsletter subscription, State / Province, and -mail and other contact details, an identification number, an online identifier).
• Private customer: If you are a private customer, when you register on our website https://www.opyo.it you will have to enter your data, name, surname and e-mail, telephone number, address, state / province, such we need data to be able to use our service. As part of using the service, you can use the functions to communicate with the company, considering that your data is always protected.
• Impresa: If you are a professional, when you register on our website. https://www.opyo.it you will have to enter your data, name, surname and e-mail, VAT number, telephone number, address, state / province, such data
we need them to be able to use our service. As part of using the service, you can use the functions to communicate with the company, considering that your data is always protected.
• Data of minors under the age of 16: If you are under the age of 16 you cannot provide us with any personal data nor can you be part of the VS srl lists, and in any case the company does not assume responsibility for any false statements you provide.
If we become aware of the existence of untruthful statements, we will proceed with the immediate cancellation of any personal data acquired.
As part of the aforementioned activities, personal data may be known by the personnel in charge of VS srl (employees and collaborators), in relation to the functions performed, also by means of IT and telematic tools, and with methods and logics of organization, processing and transmission of the data strictly related to the management of the relationship.
VS srl may transfer personal data to third countries under one of the following conditions: whether it is a third country deemed adequate ex. art. 45 of EU Regulation 679/2016 or of the country for which VS srl provides adequate or appropriate guarantees regarding the protection of data pursuant to art. 46 and 47 of the aforementioned EU Regulation and always on condition that the interested parties have enforceable rights and effective means of redress. The customer can still contact VS srl to obtain a copy of such data and the place where they are available. For the aforementioned hypotheses regarding the processing of your personal data, the Data Controller requires your explicit consent to the processing. Any decision not to grant this consent will make it impossible for the Owner to proceed with the management of the relationship with VS srl.
The data are processed with the support of IT and telematic means and are protected through appropriate security measures to ensure their confidentiality and integrity.
In particular, VS srl has adopted and adopts organizational (distribution of roles and responsibilities in the execution of the activity and controls), procedural and technical (firewall, antivirus and other advanced technologies) measures appropriate to protect
your data against loss, theft, as well as unauthorized use, disclosure or modification.
Purpose of the processing
The processing of your personal data is necessary for the acquisition of preliminary information for the conclusion of the contracts that you will enter into with VS srl (such as, for example, the contract for the purchase of goods, etc.), for the completion and execution of contracts signed by you.
The purposes for which VS srl needs to request and process your data derive either from consent (when requested) or from other reasons provided for by the Privacy Regulation, and more precisely:
• Contractual Purposes
o the use of the Portal and its functions;
o the use of the Services related to the creation and use of the e-mail account and the services dedicated to registered users;
o access to your personal page on the Portal and to the Services offered through the portals, including technical assistance and support if problems arise
o Acquisition of preliminary information to the conclusion of contracts
o Monitoring of the use of the services made available to the interested party.
• Purpose of the law
o compliance with any legal and regulatory obligations and the possible need to assert and defend the rights of VS srl or third parties in court;
• Marketing purposes
or only with prior consent (which you can revoke at any time, as indicated below) for the promotion of VS srl products and / or services, including by sending advertising material, commercial communications, carrying out market research and direct sales, both through traditional communication tools such as paper mail and through remote communication tools, such as email, chat, telephone, SMS, video call, automatic call, instant message, chatbot, intelligent interactive automated communication systems, banners, and the promotion, using the same methods and tools, of products and services offered by third parties to the product
categories whose list is yours provision and you can request it at any time (Third Party Marketing Purposes);
• Purpose of Legitimate Interest of the Owner
o the presentation of advertisements relating to the products and services marketed by VS srl and by advertisers selected by VS srl belonging to the product categories whose list is available and you can request it at any time, but which will be suitably recognizable and distinguishable in a quantity not exceeding the 7 advertisements per week which will be based on statistical and minimally invasive forms of segmentation such as age, city of residence (Legitimate Marketing Interest).
the execution of tests, updates, development and maintenance activities, to the extent that such tests and development activities must necessarily be performed through personal data in order to guarantee their reliability, concern the minimum amount of data necessary to ensure its correctness , these data are processed only for the time necessary for the test or development activity and the results of the tests and development activities containing personal data, are immediately deleted or anonymised, unless there is no other legal basis to keep them (Purpose of Legitimate Interest of Test).
Regulatory compliance
The processing of data for the Contractual Purposes is mandatory as it is necessary for the provision of the requested services, including the creation of e-mail accounts, the provision of technical assistance and support.
Nature of the provision: Mandatory.
Consequences of refusal to provide data: Failure to provide data will make it impossible for VS srl to follow up on contractual requests and execute the contract.
Legal basis of the processing: Execution of measures provided for in the contract, fulfillment of a legal obligation, consent formulated with an explicit request and conclusive behavior.
Personal data retention period: Your personal data will be processed for the time necessary to carry out the purposes of the above processing described.
In case of non-completion of the contract or dissolution of the contractual obligation, your personal data will be kept for 10 years or, if later, from the date of the binding decision issued by a competent authority (for example, court sentence), without prejudice to remaining any storage obligations relating to particular categories of data, for longer periods of time, prescribed by the legal system.
Marketing activities
With your consent, VS srl may process your personal data in order to send commercial communications of VS srl products and services, including direct marketing conducted using the results of the analysis activity, as well as proceed with direct sales and completion market surveys or research.
Nature of the provision: Optional.
Consequences of refusal to provide data: Failure to provide data will not affect the satisfaction of your requests and the execution of contracts but will make it impossible for the Data Controller to send you marketing communications.
Legal basis of the processing: Express consent of the interested party.
Personal data retention period: Your personal data for this purpose will be processed until your decision to revoke the consent and / or to obtain the cessation of processing. If you have also consented to the profiling activity of this Notice, the marketing activities, based on profiling, will take into consideration only the data recorded in the last 24 months.
Right to object to direct marketing activities
We inform you that, at any time, you have the right to object to direct marketing activities, including profiling connected to such direct marketing, by contacting the Data Controller.
Profiling
With your consent, the Data Controller may process your personal data and consumption habits, as well as aspects relating to your purchases in order to offer you the best offers in accordance with your personal needs.
Purpose of processing: Processing of your personal data, as well as consumption habits, preferences, interests, behaviors, with fully or partially automated methods, in order to identify and offer services or activities more appropriate to your person.
Nature of the provision: Optional.
Consequences of refusal to provide data: Failure to provide consent will prevent VS srl from identifying services that comply with your personal qualities.
Legal basis of the processing: Express consent of the interested party.
Personal data retention period: Your personal data will be processed for this purpose until your decision to revoke the consent and / or to obtain the cessation of processing. In any case, the profiling activities will take into consideration only the data recorded in the last 12 months.
Right to object to profiling related to direct marketing
We inform you that, at any time, you have the right to object to profiling related to direct marketing activities by contacting the Data Controller.
Navigation data
the systems used to operate the website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected to be associated with identified interested parties, but which, by its very nature, could, through processing and association with data held by third parties, allow users to be identified. The information collected could be the following:
- internet protocol address (IP);
- type of browser and device parameters used to connect to the site;
- name of the internet service provider (ISP);
- date and time of visit;
- web page of origin of the visitor (referral) and exit;
- possibly the number of clicks.
This information is processed in an automated form and collected in an exclusively aggregated form in order to verify the correct functioning of the site and for security reasons. For security reasons, some data (such as the IP address) could be used, in accordance with applicable laws, also to ascertain responsibility in the event of hypothetical computer crimes against the site.
Data provided by the user voluntarily
They are mainly the following: name, surname, e-mail address, date of birth, physical address, mobile number.
The optional, explicit and voluntary forwarding of data by e-mail to the address indicated on this site or via the data entry form on the site, involves the subsequent acquisition of the sender's address, necessary to respond to requests, as well as the any other personal data included in the message. Cookies.
This site uses cookies, small text strings used to store some information that may concern the user, his preferences or the Internet access device (computer, tablet or mobile phone): they are mainly used to adapt the functioning of the site. to the user's expectations, offering a more personalized browsing experience and memorizing the choices made previously. By using the site, the user expressly consents to the use of cookies. This site, on the other hand, has no control over third-party cookies, which are entirely managed by the latter.
Disabling cookies Since cookies are connected to the browser used, they can be disabled directly by the browser, refusing or revoking consent to their use. However, disabling cookies may prevent the correct use of some functions of the site. The instructions for disabling cookies can be found on the web pages of the browsers: Mozilla Firefox - Microsoft Internet Explorer - Microsoft Edge - Google Chrome - Opera - Apple Safari.
Delete, modify or delete a data
To export your personal data or request its cancellation, you can send a request to the email address info@opyo.it, from the email address you registered with.
The cancellation will be carried out within the expected technical times and in accordance with the provisions of the right to be forgotten through a request for express cancellation of the personal data processed by the owner.
We remind you that such data will be stored, in a protected form and with limited access, only for the purposes of ascertaining and suppressing crimes, for a period not exceeding 12 months from the date of the request and subsequently they will be securely deleted or irreversibly anonymised. .
In relation to the treatments described in this Notice, as an interested party you can, under the conditions provided for by the GDPR, exercise your rights enshrined in articles 15 to 21 of the GDPR and, in particular, the following rights:
- right of access - article 15 GDPR: right to obtain confirmation as to whether or not personal data concerning you are being processed and, in this case, to obtain access to your personal data - including a copy of the same - and communication, among others, of the following information:
a) purpose of the processing
b) categories of personal data processed
c) recipients to whom these have been or will be communicated
d) data retention period or the criteria used
e) rights of the interested party (rectification, cancellation of personal data, limitation of processing and right to object to processing
f) right to lodge a complaint
g) the right to receive information on the origin of my personal data if they have not been collected from the interested party
h) the existence of an automated decision-making process, including profiling;
- right of rectification - Article 16 of the GDPR: the right to obtain, without undue delay, the rectification of inaccurate personal data concerning you and / or the integration of incomplete personal data;
- right to cancellation (right to be forgotten) - Article 17 GDPR: right to obtain, without undue delay, the cancellation of personal data concerning you, when:
a) the data are no longer necessary with respect to the purposes for which they were collected or otherwise processed;
b) you have revoked your consent and there is no other legal basis for the processing;
c) has successfully opposed the processing of personal data;
d) the data has been unlawfully processed,
e) the data must be deleted to fulfill a legal obligation;
f) the personal data have been collected in relation to the information society service offer referred to in Article 8, paragraph 1, GDPR.
The right to cancellation does not apply to the extent that the processing is necessary for the fulfillment of a legal obligation or for the performance of a task performed in the public
interest or for the establishment, exercise or defense of a right in court.
right to limitation of treatment - article 18 GDPR: right to obtain limitation of treatment, when:
a) the interested party disputes the accuracy of personal data;
b) the processing is unlawful and the interested party opposes the deletion of personal data and instead requests that its use be limited
c) personal data are necessary for the interested party to ascertain, exercise or defend a right in court;
d) the interested party opposed the processing pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.
• right to data portability - article 20 GDPR: right to receive, in a structured format, commonly used and readable by an automatic device, the personal data concerning you provided to the Data Controller and the right to transmit them to another controller without impediments , if the processing is based on consent and is carried out by automated means. Furthermore, the right to obtain that your personal data be transmitted directly by VS srl to another owner if this is technically feasible;
• right to object - article 21 GDPR: right to object, at any time, to the processing of personal data concerning you based on the condition of legitimacy of the legitimate interest, including profiling, unless there are legitimate reasons for the Data Controller to continue processing which prevail over the interests, rights and freedoms of the interested party or for the assessment, exercise or defense of a right in court.
• right not to be subjected to an automated decision-making process - article 22 GDPR: the interested party has the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or similarly significantly on his person, unless this is necessary for the conclusion or execution of a contract or you have given your consent.
In any case, an automated decision-making process cannot concern your personal data and you can at any time obtain human intervention from the data controller, express your opinion and contest the decision.
• lodge a complaint with the Guarantor Authority for the protection of personal data, Piazza di Montecitorio n. 121, 00186, Rome (RM);
• revoke the consent given on any occasion and with the same ease with which it was provided.
The above rights may be exercised against the owner.
The exercise of your rights as an interested party is free pursuant to Article 12 of the GDPR.
We remind you that for any questions or requests relating to your personal data and respect for your privacy, you can write to the dedicated address info@opyo.it.
Data retention
The storage of personal data will take place in paper and / or electronic / computer form and for the time strictly necessary to satisfy the purposes of requesting quotes, or purchases made with the company and in compliance with your privacy and current regulations.
For analysis purposes aimed at developing and improving the service, the user's personal data may be subject to data retention for a period not exceeding 36 months.
For direct marketing purposes we keep your data for a maximum period equal to that required by the applicable legislation (respectively equal to 24 and 12 months).
Invoices, accounting documents and data relating to transactions are kept for 10 years in accordance with the law (including tax obligations).
Data protection is ensured
The data are collected by the Data Controller, according to the indications of the reference legislation, with particular regard to the security measures provided for by the GDPR (Article 32) for their processing using IT tools, and in any case in order to guarantee security and confidentiality of the data.
In compliance with the applicable legislation, an antispam verification system is active on communications between users. The data entered therein may be verified for the sole purpose of identifying illegal activities or contents that do not comply with the General Conditions of the Service, but will not be processed or communicated for commercial or promotional purposes.
The privacy policy may undergo changes over time
This information may be subject to changes. If substantial changes are made to the use of user data by the Owner, the latter will notify the user by publishing them with the utmost clarity on their pages or through alternative or similar means.