DEAR USER,

 

pursuant to art. 13 EU Regulation 2016/679 (hereinafter “GDPR”), we inform you that the processing of the data you provide will be carried out with methods and procedures aimed at ensuring that the processing of personal data is carried out in compliance with fundamental rights and freedoms, as well as the dignity of the interested party, with particular reference to confidentiality and security, personal identity and the right to the protection of personal data.

We remind you that by treatment we mean any operation or set of operations, carried out with or without the aid of automated processes and applied to personal data or sets of personal data, such as collection, registration, organization, structuring, storage , adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, limitation, cancellation or destruction ( art.4 GDPR).

 

1 – Object of the treatment

The data processed by On-line Service S.r.l. refer to:

Data collected automatically. The computer systems and applications dedicated to the operation of this website detect, during their normal operation, some data (the transmission of which is implicit in the use of Internet communication protocols) potentially associated with identifiable users. The collected data includes the IP addresses and domain names of the computers used by users who connect to the site, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters regarding the operating system, the browser and the IT environment used by the user. These data are processed, for the time strictly necessary, for the sole purpose of obtaining statistical information on the use of the site and to check its regular functioning. The provision of such data is mandatory as it is directly linked to the web browsing experience.

Data provided voluntarily by the user. The processing of data provided by you by filling in the collection form is subject to your express and unequivocal consent that you can provide in relation to the specific information for the reference form. Your voluntary sending of e-mails to our e-mail addresses does not require further information or requests for consent.
Cookies. The site uses third-party technical / profiling cookies which may collect users’ browsing data, the provision of which is optional and takes place through the expression of a free and informed consent. Cookies work in order to analyze the effectiveness of the site and make it easier and more intuitive over time. For more information, a specific cookie policy is available.

Although On-line Service S.r.l. strives to implement every possible technical measure to disable or neutralize third-party cookies on its site, sometimes this type of file could still be activated using functions that allow you to interact with social networks. These platforms could then track your browsing. This could be done, for example, by using the sharing functions (social plug-in buttons) via Facebook, LinkedIn, Twitter, Whatsapp, embedded YouTube videos, etc. that you find on the pages of our site.

For more information On-line Service Srl invites users to pay attention to the information on the processing of personal data provided by the respective social networks.

 

2 – Legal basis of the processing

The legal basis of this processing is (i) in your express and unequivocal consent (pursuant to Article 6.1, letter a) of the GDPR) and (ii) in the legitimate interest of the Data Controller (pursuant to Article 6.1, letter f ) of the GDPR).

 

3 – Purpose of the treatment

Personal data are processed with the sole purpose of improving your browsing experience.

 

4 – Processing methods

The personal data you provide will be the subject of processing operations in compliance with the aforementioned legislation and the confidentiality obligations which inspire the activity of the Data Controller. The data will be processed both with IT tools and on paper and on any other type of suitable support, in compliance with the appropriate security measures pursuant to Article 5 par. 1 letter f) of the GDPR.

The processing is limited to the following operations and in the following ways:

• • data collection from the interested party;
  • registration and processing on computerized support;
  • organization of archives in a mainly automated form.

The data in question will not be disseminated, while they will or may be disclosed to public or private entities operating within the scope of the purposes described above.

 

5 – Data retention

The data collected will be kept for a period of time not exceeding the achievement of the purposes for which they are processed (“conservation limitation principle”, art. 5 GDPR).

 

6 – Access to treatment

The data will be made accessible, for the purposes referred to in point n. 3:

to employees / collaborators in their capacity as authorized for processing, after suitable appointment;
to third parties, partners of the Data Controller.

 

7 – Communication of data

The data will not be disclosed to unauthorized third parties or disseminated in any way. To this end, the processing is conducted with the use of security measures suitable to prevent unauthorized access to data by third parties and to guarantee its confidentiality.

Without the need for express consent, the Data Controller may communicate your data for the purposes referred to in point 3 to the following subjects:

external collaborators and managers of the company in charge of carrying out processing operations.

 

8 – Transfer of data

The management and storage of personal data will take place on servers located within the European Union of the Data Controller and / or third-party companies appointed and duly appointed as Data Processors.

The data will not be transferred outside the European Union.

 

9 – Nature of the provision of data and consequences of refusing to respond

The provision of data for the purposes referred to in point 3 is mandatory. In their absence, it will not be possible to proceed with the navigation of this site.

 

10 – Rights of the interested party

According to the provisions of the GDPR, the interested party has the following rights towards the Data Controller:

obtain confirmation as to whether or not personal data concerning him is being processed and, in this case, to obtain access to personal data (Right of access art. 15);

obtain the correction of inaccurate personal data concerning him without undue delay (Right of rectification art.16);

obtain the cancellation of personal data concerning him without undue delay and the data controller is obliged to cancel the personal data without undue delay, if certain conditions are met (Right to be forgotten, Article 17);

obtain the limitation of treatment in certain cases (Right to limitation of treatment art.18);
receive in a structured format, commonly used and readable by an automatic device, the personal data concerning him provided and has the right to transmit such data to another Data Controller, without impediments by the data controller to whom he provided them, in certain cases (Right to data portability art.20);

oppose at any time, for reasons connected with his particular situation, to the processing of personal data concerning him (Right to object, Article 21);

receive without undue delay communication of the violation of personal data suffered by the Data Controller (Article 34);
withdraw the consent expressed at any time (Conditions for consent art.7).

Where applicable, in addition to the rights referred to in Articles 16-21 GDPR (Right of rectification, right to be forgotten, right to limitation of processing, right to data portability, right of opposition), the interested party has the right to complain to the Guarantor Authority.

 

11 – Procedures for exercising the right

The interested party wishing to exercise their rights can contact the Data Controller at the email address: logistics@onlineoffice.it

 

12 – Data Controller

The Data Controller is On-line Service S.r.l.

via March 8, 1908, 7

20096 Pioltello (MI) Italy

Tel. 02 92 16 6879

logistics@onlineoffice.it

The list of data processors and those authorized to process can be consulted at the headquarters of the aforementioned Data Controller.

 

13 – Update of this information

This information may be subject to changes. Any substantial changes will be sent to the interested parties by notice or publication on the company website.