Data Controller
The Data Controller is Orma Srl – Via Giardino 10/A, 40026 Imola (BO), Italy – Tel. +39 0542 55095 – Email: info@ormasrl.it
Data Processing Location
The processing of data related to the web services of this website takes place at the company headquarters and is handled only by staff authorized for processing or by any personnel in charge of occasional maintenance operations. No data derived from the web service is communicated or disclosed. The personal data provided by users who request informational material are used exclusively to perform the requested service.
Types of Data Processed
Browsing Data
The IT systems and software procedures used to operate this website acquire, during their normal operation, certain personal data, whose transmission is implicit in the use of Internet communication protocols. These are not collected to be associated with identified individuals, but by their very nature, through processing and association with data held by third parties, they could allow user identification.
This category of data includes:
- IP addresses or domain names of computers used by users connecting to the site
- URI (Uniform Resource Identifier) addresses of requested resources
- Time of the request
- Method used to submit the request to the server
- Size of the response file
- Numerical code indicating the response status (success, error, etc.)
- Other parameters related to the user’s operating system and IT environment
These data are used only to obtain anonymous statistical information on website usage and to verify its proper functioning. They are deleted immediately after processing. Data could be used to ascertain liability in case of cybercrimes against the site. Apart from this possibility, web contact data is not retained for more than seven days.
The legal basis for processing is the pursuit of a legitimate interest by the Data Controller, as provided by Article 6(f) of the GDPR.
Data Provided Voluntarily by the User
The optional, explicit, and voluntary sending of emails to the addresses listed on this site results in the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message. Specific summary privacy notices will be progressively displayed on pages designed for particular on-demand services.
The legal basis for processing is the execution of pre-contractual measures adopted at the request of the data subject, pursuant to Article 6(b) of the GDPR.
Use of Cookies
For details on the use of cookies, please refer to the dedicated “Extended Cookie Policy” published on this website. This policy has been prepared in accordance with the Italian Data Protection Authority’s resolution of May 8, 2014, as amended by Resolution No. 231 of June 10, 2021. This Extended Cookie Policy complements and integrates this document.
Processing Methods
Personal data is processed using automated tools for the time strictly necessary to achieve the purposes for which they were collected. Specific security measures are taken to prevent data loss, unlawful or incorrect use, and unauthorized access.
Transfers to Third Countries
No data transfers to third countries are performed.
Data Subject Rights
Individuals whose personal data is processed have the following rights at any time:
- Right of access to their data
- Right to rectification, deletion, or restriction of processing
- Right to object to processing
- Right to data portability
- Right to file a complaint with the Data Protection Authority
Requests should be addressed to the Data Controller or the Data Protection Officer.
How to Exercise Your Rights
You can exercise your rights by sending:
- A registered letter with return receipt (A/R) to:
Orma Srl – Via Giardino 10/A, 40026 Imola (BO), Italy - An email to: info@ormasrl.it
Privacy Policy Updates
This document constitutes the Privacy Policy of this website and is subject to updates.
Contact Form Privacy Notice
Pursuant to Art. 13 of Regulation (EU) 2016/679, Orma Srl hereby informs users about the processing of personal data resulting from the completion of the contact form.
Data of the Joint Controllers and Data Protection Officer (DPO)
The Data Controller for personal data is Orma Srl – Via Giardino 10/A 40026 Imola (BO) – Tel. +39 0542 55095 – info@ormasrl.it
Data Subjects
Internet service users interested in contacting the Data Controller and filling out the related contact form.
Data Processed
The processed data consists of the information entered into the contact form, specifically identification data such as first and last name, and contact details such as a personal email address. Only data strictly necessary to fulfill the request is collected, as the Data Controller complies with the data minimization principle set forth in Art. 5 of the European Regulation.
The provided data will be processed by the Data Controller in order to contact the user back, in accordance with the request submitted to the Data Controller.
Purposes of the Processing
Personal data entered into the registration form, sent voluntarily and by choice of the user, will be used to respond to requests submitted by the user or to fulfill the contact requested through the form itself. The IT systems used for this process utilize email configurations designed to ensure the confidentiality and integrity of the information.
Nature of Data Provision and Legal Basis for Processing
The provision of data is mandatory in order to respond to the user’s request. The legal basis for the processing is found in Art. 6, paragraph 1, letter b) of EU Regulation 679/2016, namely for the performance of pre-contractual measures taken at the request of the data subject.
Processing Methods
Data processing is carried out through computerized procedures, electronic means, or paper media by internal or external subjects specifically appointed, authorized, and committed to confidentiality. Data is processed and stored using tools suitable for ensuring its security, integrity, and confidentiality, through the adoption of adequate security measures as required by law.
Data Retention Period
Data is retained for the time strictly necessary to respond to the request submitted by the data subject to the Company, and in any case for a maximum period of 2 years, except for requests that result in contractual relationships.
Communication, Disclosure, and Transfer
The collected data will not be disclosed, sold, or exchanged with third parties without the express consent of the data subject, except for any communication to authorized third parties who are committed to confidentiality or, where applicable, appointed as Data Processors pursuant to Art. 28 of Regulation (EU) 2016/679. The complete and updated list of Data Processors is available upon request through the modalities indicated in this notice. Data may be disclosed to competent authorities in accordance with the law.
The transfer of data outside the European Union is not envisaged.
Rights of the Data Subjects
At any time, data subjects have the right to access their personal data, request its rectification, updating, and erasure. It is also possible to object to the processing and request its restriction.
The aforementioned requests may be addressed to: Orma Srl – Via Giardino 10/A 40026 Imola (BO) – info@ormasrl.it
Furthermore, if it is believed that the processing has been carried out in violation of personal data protection regulations, data subjects have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), Piazza Venezia, 11 – 00187 – Rome.
Newsletter Privacy Notice
Pursuant to Art. 13 of Regulation (EU) 2016/679, Orma Srl hereby informs users about the processing of personal data resulting from the subscription to the newsletter.
Data of the Joint Controllers and Data Protection Officer (DPO)
The Data Controller for personal data is Orma Srl – Via Giardino 10/A 40026 Imola (BO) – Tel. +39 0542 55095 – info@ormasrl.it
Data Subjects
Internet service users interested in subscribing to the newsletter.
Data Processed
The processed data consists of personal identification data such as first and last name, and contact details such as the personal email address necessary for sending the newsletter.
Purposes of the Processing
Data sent voluntarily and by choice of the user will be used to send the newsletter in accordance with the user’s request, including through segmentation by selected type and sector of interest, so that the interested user can receive targeted and relevant information and/or invitations.
The IT systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. These data, necessary for the use of web services, are also processed for the purpose of:
-
Obtaining statistical information on the use of the services (most visited pages, number of visitors by hourly or daily time slot, geographical areas of origin, etc.).
-
Monitoring the correct functioning of the services offered.
Personal data may be processed, subject to consent, for marketing and advertising purposes by the Data Controller. The data subject has the right to object at any time to the processing of their data for this purpose.
Nature of Data Provision and Legal Basis for Processing
The provision of data is optional. Any refusal to provide data does not entail negative consequences, but it makes it impossible for the Data Controller to proceed with requests to send the newsletter.
The legal basis for the processing is the consent to the processing of said data, pursuant to Art. 6, paragraph 1, letter a) of EU Regulation 679/2016. Consent is considered given by checking the appropriate boxes at the bottom of the online form. Consent can be revoked at any time.
Processing Methods
Data processing is carried out through computerized procedures or electronic means and paper media by internal or external subjects specifically appointed, authorized, and committed to confidentiality. Data is processed and stored using tools suitable for ensuring its security, integrity, and confidentiality, through the adoption of adequate measures as required by law.
Data Retention Period
Data will be stored in a form that permits identification of the data subject for two years from subscription, without prejudice to the fact that upon withdrawal of consent via the opt-out technique, the Data Controller will proceed with the erasure of their data.
Communication, Disclosure, and Transfer
The collected data will not be disclosed, sold, or exchanged with third parties without the express consent of the data subject, except for any communication to authorized third parties who are committed to confidentiality or, where applicable, appointed as Data Processors pursuant to Art. 28 of Regulation (EU) 2016/679. The complete and updated list of Data Processors is available upon request through the modalities indicated in this notice. Data may be disclosed to competent authorities in accordance with the law.
The transfer of data outside the European Union is not envisaged.
Rights of the Data Subjects
At any time, data subjects have the right to access their personal data, request its rectification, updating, and erasure. It is also possible to object to the processing and request its restriction.
The aforementioned requests may be addressed to: Orma Srl – Via Giardino 10/A 40026 Imola (BO) – info@ormasrl.it
The right to withdraw consent may be exercised via the specific link at the bottom of each marketing and promotional communication. This link will provide access to a dedicated section where users can request removal from the mailing list and withdraw consent to receive promotional material.
Furthermore, if it is believed that the processing has been carried out in violation of personal data protection regulations, data subjects have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), Piazza Venezia, 11 – 00187 – Rome.