PRIVACY POLICY

Information for users pursuant to EU Regulation 2016/679 and in particular articles 12-23 of the same Regulation, for the management of personal data that the user chooses to provide by browsing the site www.oecitaly.it owned by Oec Srl.

Data controller

The Data controller of the personal data collected through the site www.oecitaly.it and any related domains is the company OEC Srl, with offices in Garbagnate Milanese (province of Milan), via B, Zenale no. 40/A.

Personal data

Browsing this site:

  • Users provide their personal data voluntarily by inserting them in specific forms (for example, the one for signing up for the newsletter) and are informed of the ends to which the data are collected.
  • Users may browse the site without providing any type of personal data by disabling cookies according to the procedure described in the relevant section.

The sending of emails to the addresses indicated on this site entails the subsequent acquiring of the sender's address, which is needed to reply to requests, as well as possible other personal data included in the message.

Cookies

The section reserved to cookie law illustrates what cookies are and which ones are used by this site.

Users browsing the site may decide to disable cookies according to the means described in the relevant section.

Purpose of processing

Personal data collected through the site www.oecitaly.it and any related domains are used to:

  • send newsletters
  • answer requests made by users via contact form
  • statistical ends

Personal data recipients

Personal data collected by the site may be processed by parties involved in site organisation (such as administrative, commercial, marketing and legal staff, and system administrators) or external staff (such as third-party technical service staff, couriers, hosting providers, IT companies, communications agencies) appointed from time to time, if necessary, data processors in accordance with article 4 no. 8) GDPR that defines the "data processor" as "a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller."

Except for the hypothetical cases just indicated, user personal data are not communicated to third-parties, unless:

  • required by the law;
  • the user has given express consent to the communication
  • the communication is necessary for the service or product provision requested by the user;
  • this communication is in reference to third-parties collaborating with Oec Srl for service or product provision as requested by the user (for example, sending emails) possibly in countries outside of the European Economic Area (comprising EU countries plus Norway, Iceland and Liechtenstein). In these cases, the data will be transferred exclusively to organisations subject to the obligation to ensure confidentiality and security, which will use them exclusively to provide the requested services.

Retention time

Personal data are processed and stored for the time strictly necessary to realise the purposes they were collected for.

Specifically:

  • Newsletter: the data are processed to the ends of sending newsletters until Oec Srl decides to interrupt this information provision via newsletter or until the user decides to cancel themselves voluntarily from the newsletter.
  • Information requests: the data are processed for the time necessary to provide the information requested by the user.

Right to access

The interested party has the right to ask the Data controller if personal data processing is underway which regards them and, if so, to access them.

Right to erasure and right to rectification

The interested party has the right to obtain the following from the data controller:

  • the rectification of data, if incorrect
  • the erasure of personal data
via written request sent to This e-mail address is being protected from spambots. You need JavaScript enabled to view it . Without delay, the data controller will provide for their erasure requested in complete respect of article 17 of the EU Regulation.