Information pursuant to Article 13 of EU Regulation no. 679/2016
In accordance with the provisions of Art. 13 of the European Regulation 679/2016, we wish to inform you of the following:
Purpose of processing
Your personal data, freely communicated and acquired by us as a result of the activity carried out by OP SRL, will be processed in a lawful and correct manner for the following purposes:
- administrative-accounting in the management of the contractual and administrative-accounting relationship
- Other purposes are related to promotional and marketing activities (including newsletters and telephone contacts).
The data processed (which may be of a common nature, whether personal, sensitive, or judicial) are up to date, relevant, complete and not excessive in relation to the purposes listed above for which they are collected and subsequently processed.
Processing methods:
Your data will be processed, in compliance with the necessary security and confidentiality, through the following procedures: collection of data from the data subject, collected and recorded for specific, explicit, and legitimate purposes and used in further processing operations in terms compatible with these purposes, processing carried out with the aid of electronic and automated tools (data collection via data transmission, directly from the data subject).
Legal basis of processing:
The legal basis of the processing of your personal data is based on the signing of the contract, the proposal or the offer submitted by us to you or vice versa as well as your request for information or offers about our products or services. For the purpose in point 2) on the express consent.
Legitimate interests pursued by the Data Controller:
The legitimate interests pursued by the Data Controller in the processing of data are determined by having to respect and honour the contractual obligations signed between the parties or comply with their requests. Pursuant to Art. 6 the lawfulness of the processing is based on the express consent expressed by the data subject, documented in writing.
Mandatory or optional provision of data and consequences of a refusal to respond:
It is mandatory for you to provide administrative data for the data controller to provide the services requested. In case of refusal it will therefore be impossible to proceed with the relationship and the Data Controller will not be able to fulfil the contractual obligations.
The provision of data for advertising and information purposes is not mandatory and derives from the explicit consent that may be expressed.
Communication of data to third parties:
Your personal data will be processed by the Data Controller, by the Data Managers appointed by them and by the strictly authorised processing officers. They may be communicated to the institutional bodies in case they are requested.
Your data may be communicated due to inspections or verifications (if requested) to all the inspection bodies responsible for checks concerning compliance with legal obligations.
Your data may also be disclosed to companies/professional firms that provide assistance, advisory or collaboration to the data controller, in accounting, administrative, tax, legal, and financial matters, to public administrations for the performance of institutional functions within the limits established by the law or regulations and to third-party service providers to whom communication is necessary for the performance of the services covered by the contract. Your personal data will not be disseminated in any way.
Storage times:
Your personal data will be stored for 10 (ten) years, from the termination of the relationship or until the commercial purposes are achieved.
Existence of an automated decision-making process:
There is no automated decision-making process.
Intention of Personal Data Controller:
The Data Controller will not transfer your personal data to a third country or an international organisation.
Data Controller and Contact:
The data controller is OP SRL, based at Via del Serpente 97, Brescia, in the person of the Legal
Representative. Contact with the Data Controller will be maintained through the following email address: This email address is being protected from spambots. You need JavaScript enabled to view it.
The contact designated to reply to the data subject in case of the exercise of rights is Mr. Mauro Taglia
The data subject may at any time exercise the rights reserved to it, stipulated by Art. 15 (full text reported below).
Art. 15 EU Regulation 679/2016 - Right of access to personal data and other rights -
The data subject has the right to demand confirmation on the existence or absence of personal data regarding them, even if it is not yet recorded, and disclosure thereof in intelligible form. The data subject has the right to obtain an indication of: the origin of personal data; the processing purposes and methods; the logic applied in case of treatment carried out with the aid of electronic instruments; the identification details of the data controller, the data manager and the designated representative pursuant to Art. 5 paragraph 2; the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as appointed representative in the territory of the State, managers or agents. b) deletion, transformation into anonymous form or blocking data processed unlawfully, including data that does not require storage with respect to the purposes for which the data was collected or processed . The data subject has the right to object in whole or in part: for legitimate reasons, to the processing of personal data concerning them, even though they are relevant to the purpose of the collection; to the processing of personal data concerning them for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communications. In particular, the data subject may at any time request the Data Controller to access personal data and to correct or cancel them or limit their or oppose their processing, in addition to the right to data portability. . The data subject has the right to withdraw their consent at any time without prejudice to the lawfulness of the processing based on the consent given prior to the revocation and has the right to lodge a complaint with a supervisory authority. The exercise of rights may be carried out by writing to the aforementioned email address.
