Vers. 07/03/2023
Onebra SRL processes your data in compliance with EU Regulation 2016/679 on the protection of personal data (“GDPR”) and other applicable regulations. Please read the following information carefully. In the text below, the term “data subject” refers to you. The Data Controller is at your disposal for any clarification.
Origin of the data – Data subject
Data subjects – Individuals who (especially through the Controller’s website) request information regarding the Controller’s products or services.
Types of data processed – Personal and contact data, data related to specific requests.
Purposes of processing – To provide the requested information.
Data Controller – Onebra SRL Via del Brennero 97 – Trento info@onebra.it
Joint Controller – Not present
Data Protection Officer (DPO) – Not appointed
Representative in the EU – Not appointed
Legal basis for processing – Art. 6(1)(a) GDPR (consent of the data subject).
Legitimate interest – Not applied
Data retention period – The time necessary to provide a response to the data subject, and in any case, no longer than 1 year from the request.
Potential recipients of the data – Technology service providers (any recipients may only process the data in the interest of the Controller and for the purposes indicated above).
Transfer of data outside the EU – Data transfer to the following countries is foreseen: USA on the basis of an adequacy decision (Art 45 GDPR).
Your rights – Your rights (available at the link below) can be exercised by contacting the Controller, the Representative, or the DPO by post or e-mail.
Complaints – For any violation of your rights, you can file a complaint with the Garante per la Protezione dei Dati Personali in Rome (the Italian Data Protection Authority) or, alternatively, with the supervisory authority of the place where you are established within the EU.
Provision of data – Voluntary: the data subject is under no obligation to provide the data.
Consent – Voluntary: the only possible consequence of refusing to give consent is the inability to obtain the requested information. Consent already given can be withdrawn at any time with a simple communication to the Controller.