INFORMATION ON PROCESSING OF PERSONAL DATA PURSUANT TO REGULATION (EU) 2016/679

1. Subject-matter, recipients, and scope of this information

This information (“Information”) is given pursuant to Regulation (EU) no. 679 of 27 April 2016, concerning the protection of natural persons as regards the processing of personal data and the free circulation of such data (“Regulation”), where “processing” means any operation or set of operations performed on personal data or sets of personal data, with or without the use of automated means, whereas “personal data” means any information concerning a natural person, either identified or identifiable.

The Information is intended for all natural persons (identified or identifiable) who will, by accessing the website of O.M.A. S.r.l. accessible from the homepage www.omabraid.it (“Website”), communicate or provide in any way personal data (“Users”).

The Information does not concern personal data that the Users might communicate or provide in any way to other websites that can possibly be reached and/or viewed through the hypertext links present of the Website.

2. Processing controller

The processing controller of the Users’ personal data is OMA S.r.l., having registered office at Via Marzabotto 6, 20871 Vimercate (MB), Italy, F.C. 00768470155, VAT 00692250962, in person of the legal representative (“OMA” or “Controller”).

The Controller’s contacts are as follows: tel. +39 039.6251130; email pg@omabraid.it; PEC info@pec.omabraid.it.

3. Subject-matter of the processing

The subject-matter of the processing are the Users’ personal data, namely, both those that are provided directly and voluntarily, also by means of email messages sent to the addresses present on the Website, and the data of web surfing (i.e., navigation data).

Amongst the data directly provided by the Users are common data, such as name and surname, place of residence, email address and telephone number, in addition to possible other data concerning education and/or professional experience.

Amongst the navigation data are those the transmission of which is implied in the use of Internet communication protocols, and which are automatically gathered by the IT systems and the software procedures that are responsible for the Website operation during their normal running. Among these, the IP addresses and/or the domain names of the computers connecting to the Website, the URI (Uniform Resource Identifier) addresses of the resources required, the time of the request, the method used in submitting the request to the server of OMA, the size of the file obtained in response, the numerical code indicating the status of the response as well as other parameters concerning the operating system and IT environment of the Users.

With reference to the above, the Controller invites all the Users, before starting the navigation of the Website, to review the specific information concerning the cookies (see below) and exercise, in a free and conscious manner, the choice between allowing or not allowing to their use, or limiting their use, with the warning that denying consent to the use of the cookies or limiting their use may compromise, in whole or in part, the navigation of the Website.

As a rule, the Controller will process the Users’ personal data if the Users have given their explicit consent to such processing, all the more so when OMA is communicated or provided in any way with data falling among the special categories set out under Article 9 of the Regulation (i.e., “personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation”) and/or data concerning children. As a rule, absent an explicit consent of the Users to the processing of their personal data, these data shall not be processed, except where other conditions set out under Article 6 of the Regulation for the lawfulness of processing are present, among which the necessity to comply with a legal obligation to which the Controller is subject.

4. Purpose of the processing

The Users’ personal data shall be processed for purposes strictly connected and instrumental to the performance of the legal and/or contractual obligations that the Controller has undertaken vis-à-vis third parties (such as, for example, companies providing services of web hosting, emailing and domain names registration, or online research, map or content viewing, etc.) and/or to the implementation of requests received from the Users (such as, for example, the inclusion in the internal process of personnel selection, or the possibility to receive newsletters).

5. Legal basis for the processing

The legal basis for the processing of the Users’ personal data consists, as a rule, in the explicit consent provided by the Users or, in some cases, in the legal and/or contractual obligations undertook by OMA vis-à-vis third parties and the ensuing need to perform such obligations.

6. Nature of the providing of personal data

The providing of personal data for the purposes mentioned above constitutes a prerequisite necessary for the performance, by OMA, of the named legal and/or contractual obligations as well as for the implementation of the Users’ requests; therefore, failure to provide such data may result in the impossibility for OMA to permit the navigation of the Website and/or implement such requests, in whole or in part.

7. Modalities of the processing

The processing of the Users’ personal data will be carried out in paper and/or electronic format, according to logics strictly connected to the purposes set forth under point 4 of the Information, abiding by the obligations of fairness, lawfulness, and transparency imposed by the applicable privacy provisions – among which the Regulation – and, in any case, so as to guarantee the confidentiality and security of such data, in compliance with Article 32 of the Regulation regarding security.

Such processing may, pursuant to the principles set out under Article 5 of the Regulation, include one or more of the following operations: collection, recording, organization, storage, adaptation and/or alteration, retrieval, consultation, use, disclosure by transmission, alignment or combination, restriction, erasure and/or destruction of personal data.

The Users’ personal data will not be disseminated.

8. Period of storage

The Users’ personal data will be stored for the period necessary for achieving the purposes for which such data have been collected and processed.

As a rule, except where applicable laws require otherwise, the personal data will not be stored for more than ten years.

9. Recipients

The Users’ personal data may be disclosed to authorities and inspective bodies, in addition to those agencies and persons to whom such disclosure is necessary within the purposes forth under point 4 of the Information, in any case guaranteeing the confidentiality and security of such data and complying with the provisions of the Regulation.

Such recipients – among whom, by way of example, technical assistance service providers – will process the personal data in the capacity of autonomous processing controllers.

The Users’ personal data may also become known to the administrator of OMA’s IT system as well as to those who are appointed by OMA as persons authorized to process the personal data of OMA’s visitors in compliance with the privacy provisions and under the Controller’s direct authority.

The update list of the recipients of the Users’ personal data, including the IT system administrator and the persons authorized to process the personal data, is available at OMA’s headquarter.

10. Transfers

The transfer of the Users’ personal data to third countries not belonging to the European Union, among which countries that do not ensure an adequate level of protection of personal data, is not envisioned. Notwithstanding the foregoing, where such transfer might be necessary, OMA will proceed with the transfer only after having received the Users’ explicit consent in relation thereto.

11. Users’ rights

The Users may at any moment demand to the Controller:

a) access to the personal data, namely, the right to have access to all data concerning the Users (including information about the purposes of the processing, the categories of personal data being processed, the recipients or the categories of recipients to whom the personal data have been or will be disclosed as well as, where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine such period);
b) the rectification of the personal data concerned, namely, the right to obtain their updating;
c) restriction on the processing of the personal data concerned;
d) the erasure of the personal data concerned (right to be forgotten);
e) the portability of the personal data concerned (namely, the right to receive such personal data in a structured, commonly used and machine-readable format, along with the right to transmit those data to another processing controller).

Furthermore, the Users may at any moment object to the processing of the personal data concerning them, withdraw their given consent (without prejudice to the lawfulness of the processing based on consent before its withdrawal), and lodge a complaint with a supervisory authority.

12. Modalities of exercising the Users’ rights

Any possible demands pursuant to point 11 of the Information may be sent to the following addresses:
- through certified letter: O.M.A. S.r.l., Via Marzabotto 6, 20871 Vimercate (MB), Italy;
- through email or PEC, respectively: pg@omabraid.it; info@pec.omabraid.it.

13. Miscellanea

The Website may contain hypertext links to other websites, the contents of which – including information on the use of personal data (among which those on cookies) – are completely autonomous and have not been previously verified or validated by OMA, who therefore is not, and cannot be held, in any way responsible in relation thereto.

OMA reserves the right to modify at any time and without prior notice the contents of the Website, including this page.

The Users will, when accessing the Website through their IT devices, normally receive some markers, namely, small-dimension text files, called “cookies”.

1. General information

A. What they are
Cookies are IT files containing univocal identifiers (i.e., strings of characters, also known as text files) that the visited websites automatically send to the Users’ terminals (i.e., computers and other web surfing devices), normally to their Internet browsers, which memorize them in order to send them back to the same websites at every access by means of the same terminals.

B. Why they are used
Cookies are used for multiple goals, including make the navigation on the websites simpler and more efficient and/or enable certain functionalities.

Cookies may also be used to compile anonymous aggregated statistics that allow to understand how people use the websites so as to help improving the structure and contents of such websites.

C. What types exist
Cookie regulation outlines different types of cookies.

From the perspective of ownership, they can be divided as follows:

From the perspective of functionality, cookies can be divided as follows:

Among the profiling cookies it may be possible to distinguish the following:

Moreover, from the perspective of duration, cookies can be divided as follows:

D. How they are managed
The majority of browsers are originally set to accept cookies by default.

Users may change original settings and block cookies or receive alerts on the cookies that are sent to their devices so as to decide whether to accept them on a case-by-case basis.

To manage cookies, and thus find out how to change the browsers settings, it is appropriate to refer to instruction manuals or help popups.

Where different devices are used to visualize and access websites, it is necessary to make sure that the browser of each device is properly set to reflect the specific preferences concerning cookies.

We remind you that disabling some cookies may have an adverse impact on the browsing (for example, limit/prevent access to some sections or certain information).

For additional information on how to manage cookies by changing settings on the main browsers, please refer to the following:

For additional information on how to manage cookies of specific third-party services, please refer to the following:

For additional information on the use of cookies in general, please refer to the “Frequently Asked Questions” page of the Italian Supervisory Authority on Personal Data Protection: Garante Privacy.

2. Cookies used by the Website

The main function of the cookies used by the Website is to allow the performance of activities strictly connected to the operation of the present online platform.

A. Technical cookies
In particular, the Website uses the following technical cookies, strictly limited to the transmission of session identification data (comprised of server-generated casual numbers) necessary to allow a secure and efficient browsing of the Website:

Name Domain Category Purposes Policy privacy

SESSIONID

omabraid.it

Technical cookies

Optimize navigation

http://www.omabraid.it/en/privacy-policy

The above-listed technical cookies are automatically erased upon the closing of the browser.

Furthermore, the Website features a statistical survey through the Google Analytics feature, which uses the following cookies, according to the modalities set forth on the page Rules on Google Privacy:

Name Domain Category Purposes Policy Privacy

__utma

.omabraid.it

Google Analytics

Navigation statistics

https://www.google.com/analytics/learn/privacy.html?hl=it

__utmb

.omabraid.it

Google Analytics

Navigation statistics

https://www.google.com/analytics/learn/privacy.html?hl=it

__utmc

.omabraid.it

Google Analytics

Navigation statistics

https://www.google.com/analytics/learn/privacy.html?hl=it

__utmt_UA-15177699-49

.omabraid.it

Google Analytics

Navigation statistics

https://www.google.com/analytics/learn/privacy.html?hl=it

__utmv

.omabraid.it

Google Analytics

Navigation statistics

https://www.google.com/analytics/learn/privacy.html?hl=it

__utmz

.omabraid.it

Google Analytics

Navigation statistics

https://www.google.com/analytics/learn/privacy.html?hl=it

_ga

.omabraid.it

Google Analytics

Navigation statistics

https://www.google.com/analytics/learn/privacy.html?hl=it

_gat

.omabraid.it

Google Analytics

Navigation statistics

https://www.google.com/analytics/learn/privacy.html?hl=it

Such cookies are directly used by the Controller with a view of optimizing the Website (namely, collecting information in an aggregate form on the number of users and how they browse the Website); thus, they are comparable to technical cookies, as acknowledged also by the Italian Supervisory Authority on Personal Data Protection.

The statistical surveys are completely anonymous and do not allow tracing back to individual Users. They are therefore stored until the achievement of OMA’s goals and, then, erased, normally within one working week.

B. Profiling cookies
In order to provide a better browsing experience, the Website also uses third-party media services, managed and governed by the profiling cookies listed hereinafter, along with their respective privacy policy:

Name Domain> Category Purposes Policy Privacy

__atuvc

omabraid.it

AddThis

Registration of user preferences in the sharing on
social channels of the contents of the site.

http://www.addthis.com/privacy/privacy-policy

__atuvs

omabraid.it

AddThis

Registration of user preferences in the sharing on
social channels of the contents of the site.

http://www.addthis.com/privacy/privacy-policy

bt

.addthis.com

AddThis

Registration of user preferences in the sharing on
social channels of the contents of the site.

althttp://www.addthis.com/privacy/privacy-policy

di2

.addthis.com

AddThis

Registration of user preferences in the sharing on
social channels of the contents of the site.

http://www.addthis.com/privacy/privacy-policy

dt

.addthis.com

AddThis

Registration of user preferences in the sharing on
social channels of the contents of the site.

http://www.addthis.com/privacy/privacy-policy

loc

.addthis.com

AddThis

Registration of user preferences in the sharing on
social channels of the contents of the site.

http://www.addthis.com/privacy/privacy-policy

uid

.addthis.com

AddThis

Registration of user preferences in the sharing on
social channels of the contents of the site.

http://www.addthis.com/privacy/privacy-policy

uit

.addthis.com

AddThis

Registration of user preferences in the sharing on
social channels of the contents of the site.

http://www.addthis.com/privacy/privacy-policy

um

.addthis.com

AddThis

Registration of user preferences in the sharing on
social channels of the contents of the site.

http://www.addthis.com/privacy/privacy-policy

uvc

.addthis.com

AddThis

Registration of user preferences in the sharing on
social channels of the contents of the site.

http://www.addthis.com/privacy/privacy-policy

bt

.addthis.com

AddThis

Registration of user preferences in the sharing on
social channels of the contents of the site.

http://www.addthis.com/privacy/privacy-policy

di2

.addthis.com

AddThis

Registration of user preferences in the sharing on
social channels of the contents of the site.

http://www.addthis.com/privacy/privacy-policy

dt

.addthis.com

AddThis

Registration of user preferences in the sharing on
social channels of the contents of the site.

http://www.addthis.com/privacy/privacy-policy

loc

.addthis.com

AddThis

Registration of user preferences in the sharing on
social channels of the contents of the site.

http://www.addthis.com/privacy/privacy-policy

uid

.addthis.com

AddThis

Registration of user preferences in the sharing on
social channels of the contents of the site.

http://www.addthis.com/privacy/privacy-policy

uit

.addthis.com

AddThis

Registration of user preferences in the sharing on
social channels of the contents of the site.

http://www.addthis.com/privacy/privacy-policy

um

.addthis.com

AddThis

Registration of user preferences in the sharing on
social channels of the contents of the site.

http://www.addthis.com/privacy/privacy-policy

uvc

.addthis.com

AddThis

Registration of user preferences in the sharing on
social channels of the contents of the site.

http://www.addthis.com/privacy/privacy-policy

B

.addthis.com

AddThis

Registration of user preferences in the sharing on
social channels of the contents of the site.

http://www.addthis.com/privacy/privacy-policy

The modalities of storage of the above-listed cookies are indicated on the respective third-party websites.