Privacy Policy

This information (“Privacy Policy”) is provided pursuant to art. 13 of EU Regulation 2016/679 (“GDPR”), to describe the methods of processing of your personal data, as a user browsing the platform (“Platform”) and the Orizon mobile application ( “App”) and uses the services contained therein.

Index

  1. Data controller
  2. Type of personal data processed
  3. Purpose and methods of data processing
  4. Legal basis of the processing
  5. Collection of data and consequences of failure to provide them
  6. Revocation of consent
  7. Recipients/Categories of recipients of personal data
  8. Data retention period
  9. Rights of the interested party
  10. Complaint to the Guarantor for the protection of personal data
  11. Personal rights of minors
  12. Updates and Changes
  13. Links to other sites
  1. Data Controller The data controller of personal data is Cartello S.r.l., with registered office in Corso di Porta Nuova, 20121 Milan (MI), C.F. 02658320102 - VAT number 12677250156, e-mail info@orizon.dev (hereinafter the “Owner”).

  1. Type of personal data processed The Data Controller collects and processes your personal data (“Personal Data” or just “Data”) and, specifically: • Browsing data: the computer systems and software procedures used to operate the Platform or App acquire, during their normal operation, some data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties but which, by its very nature, could allow users to be identified through processing and association with data held by third parties. This category of data includes, among others, IP addresses, the time of the request, the identification code indicating the status of the response given by the server, the user agent used, etc. and other parameters relating to the user's operating system and computing environment. These data are not disclosed but are used for the sole purpose of obtaining anonymous statistical information on the use of the Platforms or App and to check their correct functioning and are kept for the times defined by the relevant legal legislation. Such data could however be used to ascertain responsibility in the event of hypothetical computer crimes against the Platforms or the App. • Data provided by you: personal identification and contact data, for example name, surname, e-mail address, telephone, photographic images. • Cookies: text files that can be used to make the user's browsing experience more efficient. For further details, we invite you to consult the Cookie Policy page.

  2. Purpose and methods of data processing The Personal Data you provide is collected and processed for the following purposes: a) manage your registration on the Platform and/or App and the consequent creation of your personal account, including customization with your profile image; b) receive the Cartello newsletter to stay updated on the institutional initiatives promoted by it; c) carry out direct marketing activities towards you, in order to update you on all Cartello's promotional initiatives, including by sending advertising and/or promotional material; d) carry out profiling activities towards you, in order to analyze your preferences, habits, interests and consumption choices for the creation of specific user profiles. The processing of personal data will be carried out by the Data Controller and by expressly designated subjects, with the aid of IT tools and according to the principles of law, protecting the confidentiality of the interested parties and their rights through the adoption of suitable technical and organizational measures. to ensure a level of safety appropriate to the risk. Specific and adequate technical and physical safety measures will also be adopted, pursuant to articles. 5 and 32 of the Regulation, aimed at avoiding the risks of loss, destruction and unauthorized access.

  3. Legal basis of the processing The legal basis of the processing for the purposes referred to in point 3 is: a) to manage your registration on the Platform and/or App and the consequent creation of the personal account, including personalization with the profile image, the execution of the existing contract with the Owner, pursuant to art. 6, par. 1 letter b) GDPR; b) to receive the Cartello newsletter, to carry out direct marketing activities and carry out profiling activities, your freely expressed consent, pursuant to art. 6, par. 1 letter a) GDPR.

  4. Collection of data and consequences of failure to provide them The provision of your Personal Data is optional but necessary to achieve the purposes referred to in point 3. Failure to provide them will have no other consequence other than the impossibility of registering on the Platform and/or App and creating a personal account, including profile image, receive the Cartello newsletter, carry out direct marketing and/or profiling activities towards you.

  5. Withdrawal of consent You have the right to revoke any consent given for the purposes of newsletters, direct marketing and/or profiling at any time, without however prejudice the lawfulness of the processing carried out on the basis of the consent given before the revocation. In order to revoke your consent to the processing, it will be sufficient to send your request to revoke consent to the Data Controller by registered letter, fax or e-mail to the addresses and contact details indicated in point 1 of this Privacy Policy.

  6. Recipients/ Categories of recipients of Personal Data The Data may be communicated, within the EU, to external structures, subjects and companies (including consultants, software houses, commercial partners, cloud computing providers) that the Data Controller uses for the management of the Site and for carrying out activities connected, instrumental or consequent to the execution of the Services offered by the Platforms and/or the App. In any case, the Data will not be transferred outside the European Union nor will it be disseminated.

  7. Data retention period Without prejudice to legal obligations, your Personal Data will be retained for a specific period, based on the nature of the Services provided through the Platforms or the App, namely: c) to manage your registration on the Platform and/or App and the creation of the personal account, including customization with the profile image, up to the request for cancellation of the personal account created; d) to receive the Cartello newsletter, until the request for revocation of the consent given; e) to carry out direct marketing activities, for a period not exceeding 24 months from their registration; f) to carry out profiling activities, for a period not exceeding 12 months from their registration.

  8. Rights of the interested party At any time you can exercise your rights towards the Data Controller pursuant to articles. 15 et seq. GDPR which, for convenience, we report below: • Right of access and rectification (articles 15 and 16 GDPR): the right to obtain confirmation as to whether or not your Personal Data is being processed and, in this case, to obtain access to them. You also have the right to request the rectification of inaccurate data and the integration of incomplete data. The exercise of these rights can be carried out by writing directly to info@orizon.dev. If you wish, we will provide you with a copy of the Data we hold about you. • Right to erasure of data (art. 17 GDPR): in the cases provided for by current legislation (e.g. personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed, revocation of consent, unlawful processing, etc. ), you can request the deletion of your Personal Data, which we will do without delay. • Right to limit processing (art. 18 GDPR): in the cases provided for by current legislation (inaccuracy of personal data, unlawful data processing, etc.) you have the right to obtain the limitation of the processing of your Personal Data. • Right to data portability (art. 20 GDPR): the right to receive your Data in a structured, commonly used and machine-readable format, in order to transmit it to another owner, or, if requested, we will direct transmission of your Data to another owner. • Right to object (art. 21 GDPR): the right to object at any time to the processing of Personal Data concerning you. In general, to exercise these rights it will be sufficient to contact the Data Controller by registered letter, fax or e-mail to the addresses and contact details indicated in point 1, possibly using the forms made available on the website of the Authority for the Protection of Personal Data ( https://www.garanteprivacy.it). From receipt of your request, the Data Controller has one month to implement all the necessary actions. Within this period, despite the exercise of your rights, you may receive further automated communications whose sending had been scheduled before your request. The one-month deadline can be extended by two months in the case of a complex request or numerous requests.

  9. Complaint to the Guarantor for the protection of personal data In the event that you believe that there has been a violation of your right to the protection of personal data, you have the right to lodge a complaint with the Guarantor Authority for the Protection of Personal Data in the manner and in compliance with the terms reported on the Authority's website itself (https://www.garanteprivacy.it).

  10. Personal data of minors The services of this Site are aimed at a general audience and are not intended for minors under the age of 18. We do not knowingly collect personal data from users under this age range. In case of release of personal data belonging to a minor under 18 years of age, the Data Controller will immediately delete them

  11. Updates and Changes The Data Controller may modify, integrate or simply update, in whole or in part, this Privacy Policy also in consideration of regulatory changes or the entry into force of new sector regulations. Updates and changes will be communicated by publication on the Platforms and the App. We therefore ask you to regularly access this section to check the publication of the most recent and updated Privacy Policy.

  12. Links to other sites This Privacy Policy is provided for the Platforms and the App and is not valid for other external websites that may be consulted via links.