INFORMATION ON PROCESSING OF PERSONAL DATA PURSUANT TO REGULATION (EU) 2016/679

1. Subject-matter, recipients, and scope of this information

This information (“Information”) is given pursuant to Regulation (EU) no. 679 of 27 April 2016, concerning the protection of natural persons as regards the processing of personal data and the free circulation of such data (“Regulation”), where “processing” means any operation or set of operations performed on personal data or sets of personal data, with or without the use of automated means, whereas “personal data” means any information concerning a natural person, either identified or identifiable.

The Information is intended for all natural persons (identified or identifiable) who will, by accessing the website of O.M.A. S.r.l. accessible from the homepage www.omabraid.it (“Website”), communicate or provide in any way personal data (“Users”).

The Information does not concern personal data that the Users might communicate or provide in any way to other websites that can possibly be reached and/or viewed through the hypertext links present of the Website.

2. Processing controller

The processing controller of the Users’ personal data is OMA S.r.l., having registered office at Via Marzabotto 6, 20871 Vimercate (MB), Italy, F.C. 00768470155, VAT 00692250962, in person of the legal representative (“OMA” or “Controller”).

The Controller’s contacts are as follows: tel. +39 039.6251130; email pg@omabraid.it; PEC info@pec.omabraid.it.

3. Subject-matter of the processing

The subject-matter of the processing are the Users’ personal data, namely, both those that are provided directly and voluntarily, also by means of email messages sent to the addresses present on the Website, and the data of web surfing (i.e., navigation data).

Amongst the data directly provided by the Users are common data, such as name and surname, place of residence, email address and telephone number, in addition to possible other data concerning education and/or professional experience.

Amongst the navigation data are those the transmission of which is implied in the use of Internet communication protocols, and which are automatically gathered by the IT systems and the software procedures that are responsible for the Website operation during their normal running. Among these, the IP addresses and/or the domain names of the computers connecting to the Website, the URI (Uniform Resource Identifier) addresses of the resources required, the time of the request, the method used in submitting the request to the server of OMA, the size of the file obtained in response, the numerical code indicating the status of the response as well as other parameters concerning the operating system and IT environment of the Users.

With reference to the above, the Controller invites all the Users, before starting the navigation of the Website, to review the specific information concerning the cookies (see below) and exercise, in a free and conscious manner, the choice between allowing or not allowing to their use, or limiting their use, with the warning that denying consent to the use of the cookies or limiting their use may compromise, in whole or in part, the navigation of the Website.

As a rule, the Controller will process the Users’ personal data if the Users have given their explicit consent to such processing, all the more so when OMA is communicated or provided in any way with data falling among the special categories set out under Article 9 of the Regulation (i.e., “personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation”) and/or data concerning children. As a rule, absent an explicit consent of the Users to the processing of their personal data, these data shall not be processed, except where other conditions set out under Article 6 of the Regulation for the lawfulness of processing are present, among which the necessity to comply with a legal obligation to which the Controller is subject.

4. Purpose of the processing

The Users’ personal data shall be processed for purposes strictly connected and instrumental to the performance of the legal and/or contractual obligations that the Controller has undertaken vis-à-vis third parties (such as, for example, companies providing services of web hosting, emailing and domain names registration, or online research, map or content viewing, etc.) and/or to the implementation of requests received from the Users (such as, for example, the inclusion in the internal process of personnel selection, or the possibility to receive newsletters).

5. Legal basis for the processing

The legal basis for the processing of the Users’ personal data consists, as a rule, in the explicit consent provided by the Users or, in some cases, in the legal and/or contractual obligations undertook by OMA vis-à-vis third parties and the ensuing need to perform such obligations.

6. Nature of the providing of personal data

The providing of personal data for the purposes mentioned above constitutes a prerequisite necessary for the performance, by OMA, of the named legal and/or contractual obligations as well as for the implementation of the Users’ requests; therefore, failure to provide such data may result in the impossibility for OMA to permit the navigation of the Website and/or implement such requests, in whole or in part.

7. Modalities of the processing

The processing of the Users’ personal data will be carried out in paper and/or electronic format, according to logics strictly connected to the purposes set forth under point 4 of the Information, abiding by the obligations of fairness, lawfulness, and transparency imposed by the applicable privacy provisions – among which the Regulation – and, in any case, so as to guarantee the confidentiality and security of such data, in compliance with Article 32 of the Regulation regarding security.

Such processing may, pursuant to the principles set out under Article 5 of the Regulation, include one or more of the following operations: collection, recording, organization, storage, adaptation and/or alteration, retrieval, consultation, use, disclosure by transmission, alignment or combination, restriction, erasure and/or destruction of personal data.

The Users’ personal data will not be disseminated.

8. Period of storage

The Users’ personal data will be stored for the period necessary for achieving the purposes for which such data have been collected and processed.

As a rule, except where applicable laws require otherwise, the personal data will not be stored for more than ten years.

9. Recipients

The Users’ personal data may be disclosed to authorities and inspective bodies, in addition to those agencies and persons to whom such disclosure is necessary within the purposes forth under point 4 of the Information, in any case guaranteeing the confidentiality and security of such data and complying with the provisions of the Regulation.

Such recipients – among whom, by way of example, technical assistance service providers – will process the personal data in the capacity of autonomous processing controllers.

The Users’ personal data may also become known to the administrator of OMA’s IT system as well as to those who are appointed by OMA as persons authorized to process the personal data of OMA’s visitors in compliance with the privacy provisions and under the Controller’s direct authority.

The update list of the recipients of the Users’ personal data, including the IT system administrator and the persons authorized to process the personal data, is available at OMA’s headquarter.

10. Transfers

The transfer of the Users’ personal data to third countries not belonging to the European Union, among which countries that do not ensure an adequate level of protection of personal data, is not envisioned. Notwithstanding the foregoing, where such transfer might be necessary, OMA will proceed with the transfer only after having received the Users’ explicit consent in relation thereto.

11. Users’ rights

The Users may at any moment demand to the Controller:

a) access to the personal data, namely, the right to have access to all data concerning the Users (including information about the purposes of the processing, the categories of personal data being processed, the recipients or the categories of recipients to whom the personal data have been or will be disclosed as well as, where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine such period);
b) the rectification of the personal data concerned, namely, the right to obtain their updating;
c) restriction on the processing of the personal data concerned;
d) the erasure of the personal data concerned (right to be forgotten);
e) the portability of the personal data concerned (namely, the right to receive such personal data in a structured, commonly used and machine-readable format, along with the right to transmit those data to another processing controller).

Furthermore, the Users may at any moment object to the processing of the personal data concerning them, withdraw their given consent (without prejudice to the lawfulness of the processing based on consent before its withdrawal), and lodge a complaint with a supervisory authority.

12. Modalities of exercising the Users’ rights

Any possible demands pursuant to point 11 of the Information may be sent to the following addresses:
- through certified letter: O.M.A. S.r.l., Via Marzabotto 6, 20871 Vimercate (MB), Italy;
- through email or PEC, respectively: pg@omabraid.it; info@pec.omabraid.it.

13. Miscellanea

The Website may contain hypertext links to other websites, the contents of which – including information on the use of personal data (among which those on cookies) – are completely autonomous and have not been previously verified or validated by OMA, who therefore is not, and cannot be held, in any way responsible in relation thereto.

OMA reserves the right to modify at any time and without prior notice the contents of the Website, including this page.

INFORMATION ON THE USE OF COOKIES