Privacy Policy

Information on the processing of personal data pursuant to art. 13-14 of Reg. (EU) 2016/679 GDPR
(General Data Protection Regulation) and art. 13 of Legislative Decree 30 June 2003 n. 196 (Code
Privacy)

1. Introduction

   The ORO & ORO SRL company is aware of the importance of personal data protection and respect
   the privacy of its users. We therefore handle all information you provide to us with extreme care and
   we guarantee security and confidentiality when processing our users' personal information.
   This information describes the methods of managing the personal data we acquire through the site
   www.oroandoro.it and is valid for visitors and users of this site. It does not apply to information
   collected through channels other than this website. The purpose of this information is to provide the maximum
   transparency regarding the information that the site collects and how it uses it.

2. Collected data and purposes

   Your personal data will be processed with the support of paper, computerized means (eg: management software,
   accounting, etc.) and telematic for the purposes expressly indicated and in order to guarantee their security,
   integrity and confidentiality.
   The collected data will be processed for the following purposes:

   1. respond to requests from interested parties regarding the products offered by ORO & ORO SRL

   2. for administrative and accounting purposes related to service contracts

   3. provide information on how to register on the site and mobile app

   4. for market surveys and statistics and subscription to the newsletter to receive technical-promotional communications relating to the services and products offered by the company ORO & ORO SRL

      1. Navigation data  

         The computer systems and software procedures used to operate the website indicated above
         acquire during their normal operation some personal data whose transmission is implicit in use
         of internet communication protocols. This is information that is not collected to be
         associated with identified interested parties, but who by their very nature could allow the identification of the
         users (e.g. IP addresses etc.). These data are used for the sole purpose of obtaining statistical information
         anonymous on the use of the site and to check its correct functioning. Your data could also
         be used to ascertain responsibility in the event of hypothetical computer crimes against the site.
         Your data are processed exclusively by internal staff, duly authorized and trained in
         treatment. Only in the event of an investigation can they be made available to the Authorities
         competent. The data are usually kept for short periods of time, with the exception of any
         extensions connected to investigation activities. The data are not provided by the interested party but acquired
         automatically by the technological systems of the site.

      2. Cookies  

         For specific information on how we manage cookies you can consult our cookie policy page of
         our site.

      3. Data collected with the user's consent and purpose of the processing  

         The optional, explicit and voluntary sending of personal data to register or subscribe to the above website
         indicated, by expressly accepting the privacy policy, entails the subsequent acquisition of the
         name, the sender's email address needed to respond to requests as well as all the others
         entered personal data to which the company will be able to access, only for purposes of maintenance and updating
         who manages the technological infrastructure and its representatives.
         The data may be disseminated or transferred, for the purposes indicated above, to non-EU countries. We will make sure that
         such data is transferred in accordance with this Privacy Policy and applicable regulations in
         subject of personal data protection.

3. Data communication scope  

   Without prejudice to communications made in fulfillment of legal and contractual obligations, your data
   may be communicated exclusively for the purposes specified above to the following categories of
   recipients: consultants, external companies that our company uses, for technical reasons and
   organizational, in the establishment and management of the service provided, other subjects who may come to
   knowledge as managers or agents.

4. Retention period  

   Your personal data will be kept for the time necessary to perform the service.
   The data of those who interrupt the service will be immediately deleted or treated anonymously, done
   save the conservation for tax and accounting purposes.

5. Legal basis  

   The legal basis relating to the processing of the data provided by you for the purposes referred to in points A), B) and C) is
   the execution of a contract or pre-contractual measures at the request of the interested party; for the purposes referred to in
   point D) is consent.
   The provision of your personal data is not mandatory, but any refusal could make it
   it is impossible or extremely difficult to satisfy what has been requested.

6. Rights of the interested party  

   As an interested party, you can exercise the following rights: request confirmation of the existence of data
   personal data concerning you (access d.tto); request modification, correction, updating /
   integration, cancellation (right to oblivion), transformation into anonymous form, blocking of data in case
   violation of the law, including data no longer necessary for the pursuit of the purposes for which they were
   collected; receive your data provided to ORO & ORO SRL in a structured and legible form (d.tto portability);
   right to lodge a complaint with the supervisory authority.
   The exercise of your rights may take place by sending a request to the following email address:
   oro@oroandoro.it

7. The Data Controller and contacts  

   The Data Controller is ORO & ORO SRL, e-mail: oro@oroandoro.it, tel. 345-3009739 to which it is
   you can contact to exercise all the aforementioned rights provided for by the European Regulation 679/2016,
   as well as to revoke a previously granted consent.
   In case of non-response to your requests, you can lodge a complaint with the Supervisory Authority for the
   protection of personal data.

8. Policy update

   This information was last updated on 30/09/2022, and may be subject to
   periodic review, also in relation to the relevant legislation and jurisprudence. In case of variations
   significant information will be given, for a suitable time, appropriate evidence on the homepage of the site. It invites itself
   however, the interested party to periodically consult this policy.