Privacy Policy

Cookies statement (with Analytics)

This site does not use profiling cookies, neither its own nor other sites. Technical cookies are used to allow easier use of some features of the site and Google Analytics (or Shyinistat or other web traffic analyzers) to improve the functionality of the site. Detailed information on the navigation of this site can be consulted by clicking on the “privacy policy” button. By following the links in the information sheet you will learn how to disable Google Analytics (or Shynistat or other web traffic analyzers). Detailed information on the navigation of this site can be consulted by clicking on the “privacy policy” button. To disable technical cookies, follow the instructions of the browser in use. By pressing the “OK” button you explicitly express your consent to the use of the indicated cookies and to the communication of the navigation data to the third parties (Google, Shinystat or others).


Site registration information

This information is given to physical persons who access and consult the Oro Crea snc di Fogliati Armando Gilberto Gervasi e Bertone Angelo website, pursuant to art. 13 d. lgs. June 30, 2003 No. 196 – “Code regarding the protection of personal data” and art. 13 GDPR 679/16 – “European regulation on the protection of personal data”.

Identity of the Owner

This WEB site is managed by Angelo Bertone, owner of the treatment of Oro Crea snc di Fogliati Armando Gilberto Gervasi e Bertone Angelo based in Via Baldissero, 21.10080 – Vidracco (TO). The Data Controller guarantees the security, confidentiality, and protection of personal data in their possession, at any stage of the processing of the same. The personal data collected are used in compliance with Legislative Decree no. 196/2003 and GDPR 679/16.

The DPO has not been designated.

Stakeholders

This information is given to individuals who complete the online registration form proposed by the Devodama srl website.

Purpose of the policy

The personal data of the individuals who have completed the online registration form are processed for the following purposes: Receive newsletters.

Legal basis of the processing

Personal data of physical persons completing the online registration form are lawfully processed under the following conditions:

  • execution of a contract of which the interested party is a party or execution of pre-contractual measures adopted at the request of the same (the free registration request);
  • the pursuit of the legitimate interest of the data controller (promotion of commercial activity and pursuit of the statutory purposes).
  • acquisition of consent.

Recipients of the data

The personal data processed by the Data Controller will not be disclosed to indeterminate subjects, in any possible form, including that of their availability or simple consultation. They may be communicated, to the extent strictly necessary, to persons who for the purpose of processing your request must provide goods and/or perform services or services on our behalf. Finally, it may be communicated to the persons entitled to access it under the provisions of the law, regulations, and community regulations. In particular, on the basis of the roles and tasks performed, some workers of Devodama srl ​​have been entitled to process personal data, within the limits of their powers and in accordance with the instructions given to them by the Owner.

Data transfer

The Data Controller does not transfer personal data to third countries or to international organizations. However, it reserves the right to use cloud services; in which case, the service providers will be selected among those who provide adequate guarantees, as required by art. 46 GDPR 679/16.

Data retention

The Data Controller retains and processes personal data for the time necessary to fulfill the purposes indicated. Subsequently, they will only be kept for the time established by the current provisions on the matter.

Rights of the interested party

With reference to art. 7 of Legislative Decree 196/2003 and Articles 15 – right of access, 16 – right of rectification, 17 – right to cancellation, 18 – right to limitation of treatment, 20 – right to portability, 21 – right of opposition, 22 right to oppose the automated decision-making process of GDPR 679 / 16, the interested party exercises his rights by writing to the Data Controller at the address above, or by email, specifying the subject of his request, the right that he intends to exercise and attaching a photocopy of an identity document attesting the legitimacy of the request.

Withdrawal of consent

With reference to art. 23 of Legislative Decree no. 196/2003 and art. 6 of the GDPR 679/16, the interested party can withdraw the consent at any time.

Complaint proposal

The data subject has the right to lodge a complaint with the supervisory authority of the state of residence.

Refusal to provide data

The interested party can refuse to give the owner his personal data as the conferment is optional. However, filling in the fields indicated as mandatory is essential to register and access the reserved area. Any refusal to supply will, therefore, block the registration.

Automated decision-making processes

The Data Controller does not process treatments consisting of automated decision-making processes.

The joint ownership agreement is open to the interested parties, requesting the email: info@orocrea.com


Information to suppliers

This information is given to natural persons who work in the name and on behalf of the suppliers of the company Oro Crea snc di Fogliati Armando Gilberto Gervasi e Bertone Angelo pursuant to art. 13 d. lgs. June 30, 2003 No. 196 – “Code regarding the protection of personal data” and art. 13 GDPR 679/16 – “European regulation on the protection of personal data”.

Identity of the Controller The Controller of the data of natural persons working in the name and on behalf of the suppliers is Angelo Bertone, legal representative of Oro Crea snc di Fogliati Armando Gilberto Gervasi e Bertone Angelo – Via Baldissero, 21 – 10080 Vidracco (TO).

The DPO has not been designated.

Data source

The personal data processed are those provided by the interested party on the occasion of:

  • Visits at the premises;
  • direct contacts for participation in exhibitions etc.;
  • interaction through the website
  • requests for information, including via email
  • previous transactions

Purpose of the policy

Personal data of physical persons working in the name and on behalf of suppliers are processed for:

  • Tax compliance, organizational management and bureaucratic requirements fulfillment, legal obligations, management of negotiations and pre-contractual relations. Performance management required, post contractual relationships.
  • Finally, all the personal data of the aforementioned interested parties will be entered in the archives of the Data Controller and used (having regard to the General Provision of the Guarantor OJ July 1st 2008 n ° 188 / C, formulation 6, points a, b, c) sending communications concerning products, services, news and promotions.

Legal basis

Processing is necessary for the performance of a contract for which each supplier is a party or for the execution of pre-contractual measures taken at the request of the supplier. Some treatments are carried out for the legitimate interest of the Data Controller (promotion of its commercial activities and pursuit of the statutory purposes).

Recipients of the data

The personal data processed by the Data Controller will not be disclosed to indeterminate subjects, in any possible form, including that of their availability or simple consultation. Instead, they may be communicated to the Workers of the Owner and to some external subjects who collaborate with them. They may also be communicated, to the extent strictly necessary, to parties who for the purpose of issuing our orders or requests for information and quotes must provide goods and/or perform services or services on our behalf. Finally, it may be communicated to the persons entitled to access it under the provisions of the law, regulations, and community regulations.
In particular, based on the roles and tasks performed, some workers have been entitled to process personal data, within the limits of their competences and in accordance with the instructions given to them by the Owner.

Data transfer

The Data Controller does not transfer personal data to third countries or to international organizations. However, it reserves the right to use cloud services; in which case, the service providers will be selected among those who provide adequate guarantees, as required by art. 46 GDPR 679/16.

Data retention

The Data Controller retains and processes personal data for the time necessary to fulfill the purposes indicated. Subsequently, personal data will be stored, and not further processed, for the time established by the current provisions on civil and fiscal matters.

Rights of the interested party

With reference to art. 15 – right of access, 16 – right of rectification, 17 – right of cancellation, 18 – right to limitation of treatment, 20 – right to portability, 21 – right of opposition, 22 – right to oppose the automated decision-making process of GDPR 679 / 16, the interested party exercises his rights by writing to the Data Controller at the address above, or by email, specifying the subject of his request, the right that he intends to exercise and attaching a photocopy of an identity document attesting the legitimacy of the request.

 

Withdrawal of consent

With reference to art. 7 of GDPR 679/16, the interested party can revoke any consent given at any time. However, the processing of this information is lawful and permissible, even without consent, as it is necessary for the execution of a contract of which the data subject is part (the supply relationship of products) or evasion of his requests.

Complaint proposal

The data subject has the right to lodge a complaint with the supervisory authority of the receiving State.

Refusal to provide data

Customers natural persons may not refuse to provide the Data Controller with the personal data necessary to comply with the laws governing commercial transactions and taxation. The provision of further personal data may be necessary to improve the quality and efficiency of the transaction. Therefore, refusal to provide the data required by law will prevent the execution of orders; while failure to provide additional data may compromise all or part of the evasion of other requests and the quality and efficiency of the transaction itself.

Persons operating in the name and on behalf of clients legal persons may refuse to provide their Owners with their personal data. However, the provision of personal data is necessary for the correct and efficient management of the contractual relationship. Therefore, any refusal to grant data may compromise the contractual relationship in whole or in part.

Automated decision-making processes

The Data Controller does not carry out processing consisting of automated decision-making processes on the data of customers, natural persons, or natural persons operating in the name and on behalf of legal entity clients.