Privacy and Legal Notes

Privacy Policy

Information provided pursuant to Article 13 of Legislative Decree 196 dated 30 June 2003 (Code regarding the protection of personal data) and subsequent amendments made by Articles 13-14 of Regulation (EU) 2016/679.

The undersigned, Calzaturificio Orion SpA, as Data Controller informs the Data Subject that Legislative Decree 196/2003 (Personal Data Protection Code) as well as Regulation (EU) 679/2016 are aimed at protecting natural persons with relation to the processing of their personal data. In compliance with the provisions of the aforementioned Code and the European legislation in force on the matter, the processing of your data will be based on the principles of correctness, lawfulness, transparency, and the protection of your privacy and rights.

How do we process your personal data?

When you create an account for the Calzaturificio Orion services, we will ask you some personal data such as your name, surname, and e-mail address. We need this information to provide you with customised services.

We process your personal data only for the purposes listed in this privacy information statement and for purposes related to the services that we offer you.

Protection:

There are always risks associated with the provision of personal data whether in person, by telephone, on the internet or with other technologies, and no technology system is completely secure or protected against hackers. Orionspa.com takes appropriate precautions to prevent unauthorised access and misuse of your personal data.

Data storage and accuracy:

We wish to keep our database up to date and regularly delete obsolete and redundant personal data. We only keep the data for the period of time needed to satisfy the purpose for which it was collected or for the period required by law. You can find more information on storage times in the section dedicated to the same found below. You can also contact us using the contact information found below.

Therefore, according to Article 13 of Legislative Decree 196/2003 and subsequent modifications applied by Articles 13 and 14 of Regulation (EU) 2016/679, we inform you of the following:

1) Processing purposes for which the data are intended

The data supplied by you will be processed for purposes that correspond to the contractual requirements and the consequent obligations deriving from them, as well as for the effective management of relationships. In particular, the data will be processed for:

a) The legal obligations related to civil, fiscal, and accounting rules
b) The administrative management of the relationship
c) Fulfilment of contractual obligations
d) Business communications and promotions, statistical processing, market studies

2) Processing method

The data supplied by you will be processed with the use of computerised means and/or paper supports with methods suitable for guaranteeing integrity, security and confidentiality. In particular, the company adopts suitable measures to ensure on a permanent basis the confidentiality, integrity, availability and resilience of the processing systems and services and that are capable of promptly restoring the availability and access of personal data in the event of a technical or physical incident. The company also adopts procedures to test, verify and assess regularly the effectiveness of technical and organisational measures in order to guarantee the processing safety.

3) Provision of data

The provision of data for the purposes referred to in point 1) is mandatory to fulfil legal and/or contractual obligations. Any refusal of such conferment will make it impossible to follow up on the requests and, therefore, the non-execution of the contract and/or the non-continuation of the relationship. Failure to provide data that is not attributable to legal or contractual obligations will be assessed from time to time by the undersigned company.

4) Communication and dissemination

Without prejudice to the communication of data to fulfil legal obligations, the data provided may be disseminated to third parties who perform specific tasks on behalf of the undersigned.

5) Data Controller

The Data Controller is Calzaturificio Orion SpA with registered offices in Viale dell’Industria 4 - 35023 Bagnoli di Sopra (PD) tax code and VAT number 02018450284.

The list of the subjects designated as "Data Processors" pursuant to Article 28 of Regulation (EU) 679/2016 is available at the Data Controller's registered office.

6) Storage period

The data you provide will be stored and processed for the duration of the relationships established and also subsequently for the fulfilment of legal obligations.

7) Rights of the Data Subject

The Data Subject can always contact the Data Controller (Calzaturificio Orion SpA, the undersigned company) to assert his or her rights contained in Article 7 of Legislative Decree 196/2003, as follows:

Legislative Decree 196/03, Article 7: The right to access to the personal data and other rights:

1. The data subject has the right to obtain confirmation of the existence of his or her personal data, even if not yet recorded, and their dissemination in intelligible form.

2. The data subject has the right to obtain indication of:
a) The origin of the personal data;
b) The purpose and method of the processing;
c) The logic applied in case of processing carried out with the use of electronic instruments;
d) The identifying details of the data controller, of the data processors, and the designated representative according to Article 5, paragraph 2;
e) The subjects or categories of subjects to which the personal data may be disseminated or that may become aware of the personal data as the designated representative in the territory of the State, data processors, or those responsible for processing.

3. The data subject has the right to obtain:

a) Updating, rectification or, when interested, integration of data;
b) The cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data the retention of which is unnecessary for the purposes for which the data was collected or subsequently processed;
c) Certification that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data has been communicated or disseminated, except in the case in which this fulfilment is impossible or involves a use of means manifestly disproportionate to the protected right.

4. The data subject has the right to partially or fully oppose:

a) For legitimate reasons, the processing of his or her personal data, even if they are relevant to the purpose of the collection;
b) The processing of his or her personal data for the sending of advertising materials, direct sales, market studies, or business communications.”

According to Article 13, paragraph 2, of Regulation (EU) 2016/679, the Data Subject also has the right to:

a) Ask the Data Controller for access to his or her personal data according to Article 15 of Regulation (EU) 2016/679.

b) The portability of this data according to Article 20 of Regulation (EU) 2016/679. Therefore, the Data Subject has the right to ask for the sending of the data provided to another Data Controller (or another service operator) without impediments from the current Data Controller (the undersigned).

c) The rectification of the same according to Article 19 of the EU Regulation, in compliance with the Data Subject’s right of self-determination.

d) The deletion of the personal data provided honouring the provisions on the right to be forgotten (Article 17 of Regulation (EU) 2016/679).

e) The limitation of the processing of his or her data or oppose to the processing (Article 21 Regulation (EU) 2016/679) for legitimate reasons or unconditionally if carried out for the purpose of sending advertising material, direct selling, or for carrying out market studies.

f) Lodge a complaint with a supervisory authority.

8) Consent to processing

You have the right to withdraw your consent to the processing of personal data provided by you by sending a registered letter to the following address: Viale dell’Industria No. 4 Bagnoli di Sopra (PD) and/or to the certified e-mail address orioncalzaturificio@pec.it, together with a photocopy of your identity document, with the following wording: “Withdrawal of consent to the processing of all my personal data”. At the end of this operation, your personal data will be removed from the archives in the shortest possible time.

For more information on the processing of the personal data that you have provided or to exercise your rights referred to in point 7), you can send a registered letter with return receipt to the following address: Viale dell’Industria No. 4 Bagnoli di Sopra (PD) and/or to the certified e-mail address orioncalzaturificio@pec.it