Vers. 13/02/2023
Onebra SRL processes your data in compliance with EU Regulation 2016/679 on the protection of personal data (“GDPR”) and other applicable regulations. Please read the following information carefully. In the text below, the term “data subject” refers to you. The Data Controller is at your disposal for any clarification.
Origin of the data – Data subject
Data subjects – Customers
Types of data processed – Personal and contact data, data related to purchased products, subjective evaluation data (regarding the purchased products, their usability, etc.), health data (if any).
Purposes of processing – To evaluate customer satisfaction, to improve products based on customer feedback.
Data Controller – Onebra SRL Via del Brennero 97 – Trento info@onebra.it
Joint Controller – Not present
Data Protection Officer (DPO) – Not appointed
Representative in the EU – Not appointed
Legal basis for processing – Art. 9(2)(a) GDPR (explicit consent of the data subject)
Legitimate interest – Not applied
Data retention period – 5 years (unless an early deletion is requested)
Potential recipients of the data – Technology service providers (any recipients may only process the data in the interest of the Controller and for the purposes indicated above).
Transfer of data outside the EU – Data transfer to the following countries is foreseen: USA on the basis of an adequacy decision (Art. 45 GDPR).
Your rights – Your rights (available at the link below) can be exercised by contacting the Controller, the Representative, or the DPO by post or e-mail.
Complaints – For any violation of your rights, you can file a complaint with the Garante per la Protezione dei Dati Personali in Rome (the Italian Data Protection Authority) or, alternatively, with the supervisory authority of the place where you are established within the EU.
Provision of data – Voluntary: the willingness to provide comments on purchased products is highly appreciated and useful for product improvement, but a refusal does not prevent the purchase of the product.
Consent – Voluntary: withholding consent has no consequences for the data subject. Consent already given can be withdrawn at any time with a simple communication to the Controller.