INFORMATION ON THE PROCESSING OF PERSONAL DATA
Pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and national legislation, we provide you with information on the processing of your personal data:
PURPOSE OF PROCESSING:
To offer users browsing the site https://oriocenter.it/it, information on the Shopping Centre, also allowing them, upon request and prior consent, to subscribe to the newsletter and to write to the Data Controller to ask for information and get in touch on the “contact us” page.
You can connect to the shopping centre's corporate pages via a dedicated link https://www.instagram.com/accounts/login/ and https://www.facebook.com/oriocenter/.
We inform you that access and navigation on the pages of the two socials, is free, and the Data Controller has no power over the navigation data on these sites, we inform you that the autonomous Data Controllers to whom you can refer for information relating to the data subject, are the respective owners of the socials. You are therefore invited to view their privacy policies.
LEGAL BASIS FOR PROCESSING
For site navigation data, such as IP addresses or the domain names of the computers and terminals used by users, URI/URL notation addresses and others, the legal basis is the legitimate interest of the Data Controller in providing information services to site users; this interest is balanced by the free choice of users to navigate the site, and by the appropriate measures to protect such data, which are not disclosed to third parties, except to the Data Processor who manages the site itself and who processes them in accordance with the provisions given by the Data Controller with the act of appointment. For further information on cookies, please consult the relevant notice at this link https://oriocenter.it/it/cookies.
The personal data provided and collected to enable the data subject to subscribe to and receive the newsletter, which also contains advertising, are collected and processed only with the specific consent of the data subject. The personal data entered on the site page to request information and to get contact details are provided on a voluntary basis and are only collected and processed with the specific consent of the person concerned.
Sending messages to the contact addresses of the Data Controller or the DPO is optional and voluntary. Private messages sent by users to social media profiles/pages entail the acquisition of the sender's contact data, necessary to reply, as well as any personal data included in the communication.
RECIPIENTS OF DATA
data are processed by data processors and persons in charge of the processing identified by the Data Controllers, whose contact details are available on request from the data subject. Data are not transferred abroad, except for those concerning navigation on the aforementioned socials, which are collected and processed by the owners of the socials themselves independently and without any relationship with the Data Controller, Consorzio Operatori Oriocenter.
DATA RETENTION
- Browsing data is stored for 7 days and then destroyed;
- The data for sending the newsletter are stored for as long as necessary to achieve the purposes for which they were collected and/or provided or, in any case, until the data subject requests deletion, but no longer than 5 years.
- The data collected for enquiries and contacts are stored for 6 months and then deleted.
DATA CONTROLLER
For all the other purposes indicated above, the Data Controller is Consorzio Operatori Oriocenter, with registered office in Via Portico, 71 - Orio al Serio (BG), Italy, e-mail: direzione@oriocenter.it.
DATA PROTECTION OFFICER (DPO-RDP)
The Data Protection Officer (DPO-RPD) appointed by the Consortium of Oriocenter Operators can be reached at info@italambiente.it.
RIGHTS OF THE INTERESTED PARTIES
Data subjects have the right to obtain access to their personal data and the rectification or deletion thereof or the restriction of processing concerning them or to object to processing (Art. 15 et seq. of the Regulation).
The appropriate application may be submitted to the Data Controller and the Data Protection Officer.
To assert their rights, the data subject, in particular the right to complain, may apply to the Garante per la protezione dei personali - Piazza Venezia, 11, IT-00187, Rome.