WHY THIS NOTICE
This page describes the methods of management of the site in reference to the processing of personal data of users who consult it. This is an information notice that is also provided pursuant to the EU General Regulation 2016/679 (hereinafter "GDPR") on the protection of personal data to those who interact with the web services of OSLV ITALIA srl, accessible electronically from the address: care.oslv.com (hereinafter "website").
The information is provided only for the care.oslv.com site of OSLV ITALIA srl and not for other websites that may be consulted by the user via links.
The information notice is also inspired by Resolution no. 13 of 1 March 2007 "on the Internet and electronic mail" of the Privacy Guarantor, to identify some minimum requirements for the collection of personal data online, and, in particular, the methods, times and nature of the information that data controllers must provide to users when they connect to web pages, regardless of the purposes of the connection. The Recommendation and a summary description of its purposes are reported on the official website of the Guarantor for the Protection of Personal Data.
Following consultation of this site, data relating to identified or identifiable persons may be processed.
PLACE OF DATA PROCESSING
The processing connected to the web services of this site takes place at the registered office of OSLV ITALIA srl with registered office in Contrada Santa Lucia, snc, 64026 Roseto degli Abruzzi (TE), and is handled only by technical personnel of the Office in charge of processing, or by any persons in charge of occasional maintenance operations.
The hosting/housing/cloud servers are located at ARUBA S.p.A which is located in the European Economic Area and acts in compliance with European standards (Privacy Policy).
No data deriving from the web service is communicated or disseminated.
TYPES OF DATA PROCESSED
Navigation data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server(successful, error, etc.) and other parameters relating to the operating system and the user's IT environment. This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and is deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site: except for this eventuality, at present the data on web contacts does not persist for more than 30 days.
Data provided voluntarily by the user
To use the Services offered by OSLV ITALIA srl, you may be asked to fill out contact request forms and/or registration forms, containing fields for the provision of mandatory and optional personal data. The provision of personal data indicated as mandatory is necessary to complete the contact request or registration procedure, therefore failure to provide or partial provision of such data makes it impossible to register for the Services and/or use them. The provision of non-mandatory data is optional; therefore, failure to provide them or their partial provision does not prevent you from registering and/or using the Services. The personal data requested by OSLV ITALIA srl for registration to the Services may differ depending on the registration forms used. The voluntary and explicit sending of e-mail to the addresses indicated in the different access channels of this site does not imply a request for consent and involves the acquisition of the sender's address and data, necessary to respond to requests, as well as any other personal data included in the message. . Such data is understood to be voluntarily provided by the user at the time of requesting the provision of the service.
COOKIES
As better explained in the "Cookie policy", the Website uses "cookies", understood as short fragments of text (letters and/or numbers) that allow the web server to store information on the client (the browser) to be reused during the same visit to the website (session cookies) or subsequently, for further visits to the same Website (persistent cookies).
PURPOSE AND LEGAL BASIS OF DATA PROCESSING
The Personal Data provided through the Site will be processed for the following purposes:
- Purposes aimed at marketing products and services available through the Site (e.g. contact requests through the forms on the site, registration of an account, purchases of products and services, etc.);
- Purposes of research/statistical analysis on aggregate or anonymous data, therefore without the possibility of identifying the user, aimed at measuring the functioning of the Site and the related operational functions, including the resolution of any technical problem;
- Purposes aimed at preventing or preventing fraudulent activities or improper use that may damage the site, or compromise the security of operations;
- Purposes related to the fulfillment of a legal obligation to which we are subject;
- Purposes necessary to ascertain, exercise or defend a right in court or whenever the judicial authorities exercise their judicial functions
- Purpose for sending advertising, information, promotional material and periodic updates on initiatives, services, products and events of OSLV ITALIA srl (so-called marketing).
The processing of personal data for the purposes from point a.) to point e.) above, does not require your express consent (art. 24, letters a) and b) of the Code and art. 6 letters b) and e) of the GDPR) as they are part of a service contract, and the legal basis of the processing is based on the legitimate interest of the Data Controller to perform contractual obligations towards the interested parties based on their respective requests.
The processing of personal data for the purposes in point f) above, requires your express consent (art. 23 of the Code and art. 7 of the GDPR). This consent concerns both the automated and traditional communication methods described above.
You will always have the right to easily and freely object, in whole or in part, to the processing of your data for these purposes, for example by excluding automated contact methods and expressing your desire to receive commercial and promotional communications exclusively through traditional contact methods.
The legal basis of the processing is based on the consent of the interested party.
DETAILS ON THE PROCESSING OF PERSONAL DATA
Personal Data is collected for the following purposes and using the following services:
Sale of goods and services online
The Personal Data collected is used for the provision of services to the User or for the sale of products, including payment and any delivery. The Personal Data collected to complete the payment may be those relating to the current account used for the transfer or other payment instruments provided. The Payment Data collected by the site depend on the payment system used.
Registration and authentication
By registering or authenticating, the User allows the Application to identify him/her and give him/her access to dedicated services.
Direct registration
The User registers by filling out the registration form and providing OSLV ITALIA srl with their Personal Data directly. Mandatory Personal Data collected: surname, name, email, address, date of birth, tax code and/or VAT number and telephone number.
Contact form
By filling out the contact form with their Data, the User consents to their use to send and receive requests for information, quotes, or any other nature indicated by the form header.
Personal Data collected: email.
Contact by telephone
Users who have provided their telephone number may be contacted for commercial or promotional purposes by OSLV ITALIA srl, as well as to satisfy requests for support.
Personal Data collected: telephone number.
Payment management
Payment management services allow the website to process, in a non-direct manner,payments by credit card, bank transfer or other instruments. The data used for payment are acquired directly by the manager of the requested payment service without being processed in any way by the website. Some of these services may also allow the scheduled sending of messages to the User, such as emails containing invoices or notifications regarding the payment.
PayPal
PayPal is a payment service provided by PayPal Inc., which allows the User to make online payments. Personal Data collected: various types of Data as specified in the privacy policy of the service.
For more information Privacy Policy
Interaction with social networks and external platforms
This type of service allows interaction with social networks, or with other external platforms, directly from the pages of the website. The interactions and information acquired by the website are in any case subject to the User's privacy settings relating to each social network. If an interaction service with social networks is installed, it is possible that, even if the Users do not use the service, it collects traffic data relating to the pages in which it is installed.
Platform monitoring
This type of service allows the web to monitor the use and behavior of the website, to allow for the improvement of performance and functionality, maintenance or problem solving. The Personal Data processed depends on the characteristics and implementation method of these services, which by their nature filter the activity of the website.
Statistics
The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to track User behavior.
Statistics collected directly
The website may use an internal statistics system, which does not involve third parties, for the purpose of further statistics.
OPTION TO PROVIDE DATA
Apart from what is specified for navigation data, the user is free to provide personal data contained in the request forms or otherwise indicated in contacts with the Office to request the sending of orders, material, information or other communications. Therefore, your refusal, even partial, to provide such data would make it impossible to establish and manage the relationship itself and to provide the requested service.
METHODS OF TREATMENT
The data is processed both through paper media and through the use of automated electronic tools (through our computer system and in this case the data will be recorded on protected computer media) for the time strictly necessary to achieve the purposes for which they were collected.
Such media, both electronic and paper, will be correctly maintained and protected by us for the entire time necessary for the processing through procedures suitable for guaranteeing their security and confidentiality to prevent data loss in compliance with the security measures referred to in art. 32 of GDPR 2016/679, from illicit or incorrect use and from unauthorized access.
DURATION OF THE TREATMENT AND PERIOD OF RETENTION OF PERSONAL DATA
The data collected are processed for the time necessary for the purposes for which they were collected, and in any case not beyond the times prescribed by law. The data necessary for tax purposes are retained until the assessments relating to the corresponding tax period are defined, therefore for at least 10 years and more if the relevant year is not yet prescribed for tax purposes. Upon expiry of this term, the data will be deleted or anonymized, unless there are further purposes for the retention of the same (e.g. guarantee supply obligations, tax obligations). Personal data that are no longer necessary, or for which there is no longer a legal basis for their storage, are irreversibly anonymized (and can thus be stored) or destroyed in a secure manner. Below we report the storage times in relation to the different purposes listed above:
- Fulfillment of contractual obligations: the data processed to fulfill any contractual obligation may be stored for the entire duration of the contract and in any case no longer than the following 10 years, in order to verify any pending matters including accounting documents (for example invoices).
- Operational management and purposes strictly connected to this for access to the website: they may be stored for 30 days from the date on which we obtained your last consent for this purpose (with the exception of opposition to receiving further communications) after which they will be destroyed or anonymized.
- Purposes of customer satisfaction surveys: the data processed for this purpose may be retained for 30 days from the date on which we obtained your last consent for this purpose (with the exception of opposition to receiving further communications).
- Disputes: in the event that we need to defend ourselves or take action or even make claims against you or third parties, we may retain the personal data that we deem reasonably necessary to process for such purposes, for the time in which such claim can be pursued.
- If the data collected were processed on the basis of explicit consent, they will be processed until the same is revoked, or at the end of the service provided and in the absence of it, they will be retained for a maximum period of 30 days after which they will be destroyed or anonymized.
RIGHTS OF INTERESTED PARTIES
We inform you that in your capacity as interested party, you have, pursuant to Articles 15 to 23 of GDPR 2016/679, the rights listed below that you may assert by making a specific request to the Data Controller and/or the Data Processor, in addition to the right to lodge a complaint with a supervisory authority:
Art. 15 - Right of access
The interested party has the right to obtain from the data controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and information regarding the processing.
Art. 16 - Right to rectification
The interested party has the right to obtain from the data controller the rectification of inaccurate personal data concerning him or her without undue delay. Taking into account the purposes of the processing, the interested party has the right to obtain the integration of incomplete personal data, including by providing a supplementary statement.
Art. 17 - Right to erasure (right to be forgotten)
The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay.
Art. 18 - Right to restriction of processing
The data subject shall have the right to obtain from the controller restriction of processing where one of the following applies:
- the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
- the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
- the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;
- the data subject has objected to processing pursuant to Article 21(1) pending the verification whether the legitimate grounds of the controller override those of the data subject.
Art. 20 - Right to data portability
The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided. In exercising his or her right to data portability pursuant to paragraph 1, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible.
Art. 21 - Right to object
The data subject shall have the right to object at any time, on grounds relating to his or her particular situation, to processing of personal data concerning him or her which is based on Article 6, paragraph 1, letters e) or f), including profiling based on those provisions.
Art. 22 - Right not to be subject to automated decision-making, including profiling
The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.
COMMUNICATION AND DISSEMINATION
Your data will not be "disseminated" by us (this term means giving knowledge of it to unspecified subjects in any way, including by making it available or consulting it, unless specific consent is granted by the data subject with a separate act). Your data may instead be "communicated" by us (this term means giving knowledge of it to one or more specific subjects) in the following cases:
- to subjects appointed within OSLV ITALIA srl to process your data, and in particular to those employed in the administrative and commercial offices;
- to subjects who can access the data by virtue of provisions of law, regulation or community legislation, within the limits set by such provisions;
- to subjects who need to access your data for purposes ancillary to the relationship between you and us, to the extent strictly necessary to carry out the ancillary tasks entrusted to them;
- to our consultants, to the extent necessary to carry out their duties at OSLV ITALIA srl, or under Outsourcing, as external Data Processors subject to our letter of appointment that imposes the duty of confidentiality and security in the processing of your data.
HOW TO EXERCISE YOUR RIGHTS
You may exercise your rights or withdraw your consent at any time by sending a communication to the addresses and in the manner indicated below.
THE "OWNER" OF THE TREATMENT
We inform you that the Data Controller is OSLV ITALIA srl in the person of the Legal Representative pro-tempore, with registered office in Contrada Santa Lucia, snc, 64026 Roseto degli Abruzzi (TE), electively domiciled, at the headquarters of OSLV ITALIA srl, to whom communications for the exercise of the rights recognized to the interested party pursuant to articles 15 to 23 of the GDPR must be forwarded by registered letter, PEC or email where the complete list of subjects to whom the data can be communicated is also available. Requests should be sent to: oslvcare@oslvitalia.it, PEC: oslvitaliasrl@legamail.it - Telephone: 0858090100, Fax: 0858090357
This privacy policy is updated as of 03/19/2025
