Privacy Policy
This privacy notice is provided, pursuant to Art. 13 of EU Regulation 2016/679 (GDPR) and Legislative Decree 196/2003 as amended by Legislative Decree 101/2018, to users who interact with the website of Ortomec Srl, accessible electronically from the address: , corresponding to the home page of the site. This privacy notice describes the management methods of the company’s official website only, and not of other external websites that may be consulted by the user via links. Additional information may be provided within the different access channels, divided on the basis of the topics covered. Other specific privacy notices may be provided within the Site in relation to specific services. Data Controller: Ortomec Srl Via Risorgimento 11 – 30010 Cona (VE) Contact details: ortomec@ortomec.it
Purposes of the processing
Administrative-accounting activities in general and for the fulfillment of legal obligations, regulations, and applicable national and supranational legislation
Legal basis of the processing
Necessity to fulfill legal obligations
Purposes of the processing
Contractual duration and, after termination, for the ordinary statute of limitations period equal to 10 years.
Purposes of the processing
Any contact request, with the sending of information requested by You;
Legal basis of the processing
Performance of a contract to which the data subject is party or the performance of pre-contractual measures taken at the data subject’s request (Art. 6(1)(b) of the Regulation)
Purposes of the processing
Purposes of the processing
Purposes of the processing
If necessary, to establish, exercise or defend the rights of the Data Controller in judicial proceedings
Legal basis of the processing
Legitimate interest
Purposes of the processing
For the entire duration of the same, until the expiration of the limitation periods for the availability of actions for challenge.
Purposes of the processing
Direct marketing Sending – through automated contact methods (such as text messages, MMS, and email) and traditional ones (such as telephone calls with an operator) – of promotional and commercial communications relating to services/products offered, or notification of company events or participation in webinars, as well as conducting market studies and statistical analyses.
Purposes of the processing
Consent (optional and revocable at any time). It is specified that the Data Controller collects a single consent for the Marketing purposes described herein pursuant to the General Provision of the Italian Data Protection Authority “Guidelines on promotional activities and fighting spam” of July 4, 2013. Should you wish to object to the processing of your data for Marketing purposes carried out through the means indicated herein, as well as revoke the consent given, you may do so at any time by contacting the data controller at the contact details indicated in this privacy notice, without affecting the lawfulness of the processing based on consent given before the revocation
Purposes of the processing
Until revocation of consent.
Once the retention periods indicated above have expired, the Data will be destroyed, deleted or anonymized, compatibly with technical deletion and backup procedures.
Type of Data Processed and Collection Methods Navigation data – log files
It is possible to access the Site without the user being required to provide any personal data. The computer systems and applications dedicated to the operation of this website detect, during their normal operation, certain data (the transmission of which is implicit in the use of Internet communication protocols) not associated with directly identifiable users. The data collected includes the IP addresses of users connecting to the site, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, and the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and computer environment. This information does not provide personal data of the user and is not collected to be associated with identified data subjects, but rather concerns technical/IT data collected and used in an aggregated and anonymous manner for the purposes of verifying the correct functioning and monitoring the security of the Site; improving the quality of the service and providing statistics concerning the use of the Site; proceeding with the assessment of liability in the event of hypothetical computer crimes against the site.
Data provided voluntarily by the user
The optional, explicit and voluntary sending of messages to the contact addresses, as well as the filling out and submission of the forms present on the Data Controller’s site, involves the acquisition of the sender’s contact details, as well as all personal data included in the communications, necessary to respond to the requests made and/or provide the requested service. It is ensured, however, that such processing will be based on the principles of fairness, lawfulness, transparency and protection of confidentiality as indicated in the GDPR. In any case, before proceeding with the activation of a specific service, appropriate information will be provided and, where necessary, the relevant consent to the processing of personal data will be acquired. Such consent may subsequently be revoked at any time, causing the possibility of using the service in question to lapse. Failure to provide consent or the revocation thereof does not entail any consequence, except for the impossibility of using the Site and/or the provision of the requested service or obtaining more detailed information on the Company’s activities. In any case, the processing of personal data may be carried out, if necessary, for the pursuit of a legitimate interest of the Data Controller or based on a legal obligation. In particular, obtaining consent for the processing referred to in the previous point relating to navigation data and logs is not necessary as the data is processed as responding to a legitimate interest (Recital 47 of the GDPR)
Provision of Data
Apart from what is specified for navigation data, the provision of personal data by the data subject for certain purposes described in the previous paragraph is to be considered optional. Failure to provide them may make it impossible to use certain services provided by the site.
Data Processing Methods
Personal data is processed with automated tools for the time strictly necessary to achieve the purposes for which it is collected in compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to Art. 5 of the GDPR and in compliance with the mandatory time limits prescribed by law. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.
Communication and/or Dissemination of Data
Your data, subject to processing, will not be disseminated but may be communicated to companies contractually linked to the company, in accordance with and within the limits of the GDPR. Personal data is stored on servers located within the European Union. It remains understood in any case that the Data Controller, should it become necessary, will have the right to move the servers even outside the EU GDPR. In this case, the Data Controller ensures as of now that the transfer of data outside the EU will take place in accordance with the applicable legal provisions, subject to the stipulation of the standard contractual clauses provided by the European Commission, and the user will be informed. The data may be communicated to third parties belonging to the following categories: – entities that provide services for the management of the information system used by the company and of the telecommunications networks (including electronic mail); – firms or companies within the scope of assistance and consultancy relationships; – competent authorities for fulfillment of legal obligations and/or provisions of public bodies, upon request. – companies offering marketing platform management services – companies offering maintenance services for websites and information systems The entities belonging to the aforementioned categories perform the function of Data Processor, or operate in total autonomy as separate Data Controllers. The list of processors is constantly updated and available at the company’s headquarters. Any further communication or dissemination will take place only with your explicit consent.
Possible Existence of an Automated Decision-Making Process
The data controller informs the data subject that there is no automated decision-making process on this site, therefore, in particular, there is no profiling system.
Minors
This Site and the Data Controller’s Services are not intended for minors under 16 years of age, and the Data Controller does not intentionally collect personal information referring to minors. In the event that information on minors is unintentionally recorded, the Data Controller will delete it in a timely manner, at the request of users.
Rights of the data subject
Data subjects have the right to receive information from the Company regarding the processing carried out on their personal information by sending an email to: ortomec@ortomec.it
Right of access:
we are transparent about the data we collect and how we use it. You can contact us at any time by sending an email to access the information in our possession.
Right to rectification:
you have the right to obtain the rectification of any inaccurate or incomplete information and to request its update and/or modification.
Right to erasure:
send a request for the deletion of all data concerning you and we will process your request within 30 days.
Right to restriction:
you have the right to request that the data controller restricts the processing of your data.
Right to portability:
if you request it, we will export your data so that it can be transferred to third parties in a structured, commonly used and machine-readable format.
Right to object:
you can unsubscribe at any time from all the specific uses we make of your data (newsletters, automated emails, etc.).
Right to lodge a complaint:
if you believe that your rights have not been respected, you can lodge a complaint with the competent authority according to the instructions published on the website www.garanteprivacy.it or by email to urp@gpdp.it
