Privacy Policy

Orsi Group S.r.l. Considers the protection of the personal data belonging to users of the website www.orsigroup.it (hereinafter “Site”) their own and/or potential clients and subjects with whom they maintain in varying ways a contractual relationship to be of the utmost importance, therefore, by means of this Policy, produced pursuant to art. 13 Reg. (EU) 2016/679 (General Data Protection Regulation), Orsi Group  S.r.l. intends to share its personal data processing policy.

1. Type of data processed by Orsi Group S.r.l.

Browsing data

During normal operations, the computer systems and software procedures used for the functioning of the website acquire some personal data, the transmission of which is implicit in the use of Internet communication protocols (internet domain and IP protocol, type of browser and computer operating system used, date, time and length of time spent on site, pages viewed, the search engine used to enter the website). This information is not collected to be associated with identified subjects, but by its very nature could, by processing and association with data held by third parties, allow users to be identified.

IP address or domain names of the computers used by the users connecting to the website, URI (Uniform Resource identifier) addresses of requested resources, the request time, the method used when making the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc) and other parameters regarding the operating system and the user’s IT environment are all included in this category. These data are used solely to obtain anonymous statistical information regarding use of the website and will be deleted immediately after processing, unless required for the ascertainment of crimes by the Judicial Authorities.

Contact requests from users and access to the reserved area

In order to correctly send a request to Orsi Group S.r.l. via the website’s contact form, or to access the reserved area on the website, the user will be asked to enter some information (personal details and contact information).

Processing of client, supplier and job applicant data

The Data Controller guarantees that its own and potential clients’ and suppliers’ data and data belonging to applicants for job vacancies at Orsi Group S.r.l. Are processed in full observance of the current data protection legislation.

2. Purpose of processing, legal basis and storage period

Personal data acquired by Orsi Group S.r.l. will be processed by expressly authorised staff, appointed by the Data Controller, in full observance of the principles of correctness, legality, transparency, protection of confidentiality and the data subject’s rights. Orsi Group S.r.l. will only process the data subject’s information for the period of time strictly necessary for the pursuit of the processing purpose, in full observance of the storage obligations established by law.

Personal data provided by the users will be process by the Data Controller, further to consent provided by the data subject, in order to:

• check requests sent by users, provide information and estimates of cost [“Contacts” form]
• allow the user to access the reserved area and use the services [“Reserved area form]
• register warranties of purchased products [“Register your warranty” form]

Providing the information is discretionary but necessary to allow the Data Controller to follow up the requests made by users. The data subject can revoke consent provided at any moment by contacting the Data Controller at the addresses provided at the bottom of the herein privacy policy.

If, further to the request for information/estimate of cost, a contractual relationship be established with Orsi Group  S.r.l. the client’s/supplier’s data (if they come under the category of “data subject”), and the data regarding their own collaborators. employees and contacts will be collected and processed pursuant to art. 6 c.1 letter b) Reg.(EU) 2016/679 for the purpose of pre-contractual measures, for execution of the contract and for management of the contractual relationship. Provision of data by clients and suppliers is mandatory, therefore no, incorrect or part communication thereof may render impossible the stipulation of the contractual agreement. Client and supplier data will be stored for 10 years from the conclusion of the contractual relationship and will then be deleted from the Orsi Group S.r.l. Information systems.

Personal data will be processed at the Data Controller’s premises, with the aid of information/computerised or paper instruments, with a guarantee of the use of suitable technical and organisational safety measures, pursuant to and in accordance with article 32 Regulation (EU) 2016/679, that can reduce the risk of destruction, loss, unauthorised access or non-permitted/non-compliant use with regard to the relative collection.

3. Data Controller

The Data Controller is Orsi Group S.r.l. in the person of the pro tempore legal representative, with registered office in Mascarino di Castello d'Argile (BO), Via S. Andrea 2/A, VAT no. 03049991205.

4. Realm of data communication

The personal data provided by the data subjects may be communicated to public, institutional or professional subjects authorised by law to request acquisition, and, solely for the purposes set out in article 2), to third party companies or professionals that Orsi Group  S.r.l. make use of to carry out their own business, for example (not limited thereto) accounting and taxation advisors, legal and sector consultants, third party suppliers and banks. It is stated that such “third party subjects”, if not acting as Data Controllers, hold the role, pursuant to the contents of Article 28 of Reg. (EU) 2016/679, of Data Processors and, therefore, owing to a specific contractual agreement, uphold security standards when processing the data communicated to them. The list of third parties is available on request which must be sent to Orsi Group S.r.l. at the addresses provided at the bottom of the herein privacy policy. In all cases, the data subjects’ personal data will not be diffused or transmitted to third party countries (outside the EU). 

5. The data subject’s rights

In accordance with the contents of articles 15 and following of the Reg. (EU) 2016/679, the User can at any time exercise their own rights with the Data Controller, namely:  “Right to access” that allows the data subject to access their own personal data and have a copy of them; “Right to rectification” that allows the data subjects to have their data rectified, if they are found to be incorrect, or integration of their data if found to be incomplete; “Right to erasure” that allows the data subject to have their data erased in the cases provided for by article 17 Reg. (EU) 2016/679; “Right to restrict processing” that allows the data subject to restrict processing in the cases provided for by article 18 Reg. (EU) 2016/679; “Right to data portability” that allows the data subject to receive their data in a in a structured, commonly used and machine-readable format, and to  have Orsi Group S.r.l. transmit it to another Data Controller; “Right to object” that allows the data subject to object to the processing of their personal data at any time, for reasons connected with their own personal situation, exercised pursuant to art.6  para.1 letter e) or f) Reg. (EU) 2016/679, and to object to the processing of data for direct marketing purposes; “Right to lodge a complaint” that allows the data subject to lodge a complaint with the Data Protection Authority pursuant to and in accordance with article 77 Reg (EU) 2016/679.

For the purpose of exercising the rights as set out in article 15 and following of Reg. (EU) 2016/679, or for more information regarding the Privacy Policy, the data subject can contact Orsi Group S.r.l. By recorded post with proof of receipt, or by sending an email to the address info@orsigroup.it.

It is herein stated that before being able to provide or change any information, the data subject's identity must be verified.

INFORMAZIONI ON THE PRIVACY POLICY

The herein Privacy Policy was updated on 24 July 2020. The Data Controller reserves the right from now on to amend or update the herein document. Therefore it invites users to periodically check this web page. It is herein stated that Orsi Group S.r.l. Is not in any way held responsible for the contents and services provided by websites managed by third parties that may be accessed via links on this website.