GDPR: INFORMATION PURSUANT TO ART. 13 OF THE EUROPEAN REGULATION 2016/679 FOR THE PROCESSING OF PERSONAL DATA
In compliance with the European Regulation 2016/679 (also “GDPR”) we are providing you with the necessary information regarding the processing of the personal data provided by you.

1. Data controller
The Data Controller is the company Olan S.r.l. with registered office in Via Rotondi, 7 -20037 Paderno Dugnano (MI), VAT number and C.F. 01369280167, Telephone:+39 02 99055317, Email: privacy@olan.it

2. Purpose of the processing
The processing of Personal Data provided by completing the first contact form (“Form”) and in the subsequent phases of processing with respect to the selection of the Project is carried out for the purposes of following up on your requests for contact and information, sending offers in this regard to the products and services requested from the Data Controller and in carrying out all communication activities always linked to responding to his contact and offer requests; legitimate interests of the Data Controller.

3. Legal basis and lawfulness
For the purposes referred to in point A, the legal basis can be identified in the pre-contractual obligations connected to responding to requests from the interested party and/or providing a service. Please note that the data provided may also be processed for the protection of legitimate interests referred to in purpose B, of the Data Controller, such as direct marketing activities or defense in court. The principles of necessity, proportionality and non-excess will also apply to this.

4. Recipients or categories of recipients of the data, transfer abroad
No personal data will be disclosed in any way. Your data may be communicated to specific subjects considered recipients or to persons authorized to process such data under the authority of the Data Controller, as well as through data processors linked to the Data Controller by specific contract.
Specifically, the data will be shared with:
– subjects who provide services for the management of the information system and telecommunications networks, including email, newsletters and who manage the Site used by the Data Controller;
– studios or companies in the context of assistance and consultancy relationships;
– third parties who collaborate with the Data Controller for direct marketing activities;
– competent authorities for fulfilling legal obligations and/or provisions of public bodies.
Your data will be processed by the Data Controller within the territory of the European Union. In the event that for technical and/or operational reasons it will be necessary to make use of subjects located outside the European Union, the transfer of personal data, limited to the performance of specific processing activities, will be regulated in accordance with what provided for in Chapter V of the Regulation, adopting all the necessary precautions in order to guarantee the most complete protection of your data by basing this transfer: (i) on adequacy decisions of the recipient third countries expressed by the European Commission; (ii) on adequate guarantees expressed by the third party recipient pursuant to Article 46 of the Regulation; (iii) on the adoption of binding corporate rules.

5. Retention periods
Your personal data for purposes A will be processed for a period of time equal to the minimum necessary, i.e. until the termination of any pre-contractual and contractual relationships in place with the Data Controller, taking into account the legal limitation periods and conservation obligations. of a fiscal or other nature provided for by law or regulation for which the principle of non-excess will apply.
In this case the data will be kept for no more than 10 years which coincide with the civil terms. The data provided for purposes B and C will be kept for the period strictly necessary to achieve the declared purpose and in any case, for the purpose referred to in point B until your consent is revoked.

6. Treatment methods
The processing will be carried out both with manual and IT and telematic tools in compliance with the regulations in force and the principles of correctness, lawfulness, transparency, relevance, completeness and non-excess, accuracy and with organization and processing logic strictly related to the purposes pursued and in any case in order to guarantee the security, integrity and confidentiality of the data processed, in compliance with the organisational, physical and logical measures envisaged by the provisions in force.

7. The rights of the interested party
You have the right, at any time, to ask the Data Controller for access to your personal data (art. 15), rectification (art. 16) or cancellation (art. 17) of the same, or the limitation of the processing (art. 18) or to oppose their processing based on legitimate interest (art. 21) or to the portability of your data (art. 20) and to lodge a complaint with a supervisory authority (art. 77).
We inform you that you have the right to withdraw consent to the processing of your data at any time, without prejudice to the lawfulness of the processing based on the consent given before the revocation (articles 6 and 9). In the event of a request for data portability, the Data Controller will provide you in a structured, commonly used and readable format, by automatic device, the personal data concerning you, without prejudice to paragraphs 3 and 4 of the art. 20 of the GDPR.

To exercise your rights or for any request or need relating to this information, contact us at the email address: privacy@olan.it.

The Data Controller: The company Olan S.r.l.