Newsletter Subscription Privacy Policy

Vers. 07/03/2023

Onebra SRL processes your data in compliance with EU Regulation 2016/679 on the protection of personal data (“GDPR”) and other applicable regulations. Please read the following information carefully. In the text below, the term “data subject” refers to you. The Data Controller is at your disposal for any clarification.

Origin of the data – Data subject

Data subjects – Individuals who voluntarily request to receive periodic information on topics related to the Controller’s products and services.

Types of data processed – Personal and contact data.

Purposes of processing – To periodically update the data subject on topics related to the Controller’s products and services.

Data Controller – Onebra SRL Via del Brennero 97 – Trento info@onebra.it

Joint Controller – Not present

Data Protection Officer (DPO) – Not appointed

Representative in the EU – Not appointed

Legal basis for processing – Art. 6(1)(a) GDPR (consent of the data subject).

Legitimate interest – Not applied

Data retention period – 1 year from the receipt of the last communication (without prejudice to the data subject’s right to unsubscribe at any time).

Potential recipients of the data – Technology service providers (any recipients may only process the data in the interest of the Controller and for the purposes indicated above).

Transfer of data outside the EU – Data transfer to the following countries is foreseen: USA on the basis of an adequacy decision (Art 45 GDPR).

Your rights – Your rights (available at the link below) can be exercised by contacting the Controller, the Representative, or the DPO by post or e-mail.

https://ec.europa.eu/info/law/law-topic/data-protection/reform/rights-citizens/my-rights/what-are-my-rights_en

Complaints – For any violation of your rights, you can file a complaint with the Garante per la Protezione dei Dati Personali in Rome (the Italian Data Protection Authority) or, alternatively, with the supervisory authority of the place where you are established within the EU.

Provision of data – Voluntary: the data subject is under no obligation to provide the data.

Consent – Voluntary: the only consequence of refusing to give consent is the inability to receive the Controller’s newsletters. Consent already given can be withdrawn at any time with a simple communication to the Controller.