Privacy Policy

WebSite

1  Data Controller Identification and Contact Information2  Objectives and Scope3  Categories of Personal Data Processed4  Purposes, Legal Bases, and Nature of Provision5  Recipients of Personal Data6  Retention Periods7  Transfer of Data Outside the European Economic Area8  Rights of Data Subjects9  Changes and Updates to the Privacy Policy

1  Data Controller Identification and Contact Information


The data controller for personal data processing (hereinafter, the "Controller") is Omega3C S.r.l., headquartered at Corso Magenta n. 46, 20123 Milan (MI), VAT number IT07613840961.

For any inquiries regarding the processing of your personal data and for further information about recipients, transfers, methods, and the retention period of your data, you can contact us by written communication at our office or via email at privacy@omega3c.com.


2  Objectives and Scope


This privacy notice is made available on the homepage of the website www.omega3c.it (hereinafter the "Website") and applies to the processing of personal data of visitors to the Website, in accordance with Regulation (EU) 2016/679 (hereinafter the "GDPR"), Legislative Decree 196/2003 and subsequent amendments, relevant provisions and guidelines of national and European data protection authorities, as well as applicable national and European legislation (collectively, the "Applicable Regulations").


3  Categories of Personal Data Processed


The Controller will process – both manually and automatically – only the data strictly necessary for the purposes outlined in the following paragraph 4.


Specifically, the Controller will process the following common personal data: Identifying and contact information (e.g., name, surname, email address, phone number), company affiliation, as well as any information provided in contact forms and/or information requests on the Website. Additionally, the processing will involve browsing data (such as IP address, details of the web browser used), in compliance – in addition to what is stated in this Notice – with the provisions of the Cookie Policy.


For further information regarding the processing of data contained within the Curriculum Vitae uploaded by you on the Website, please refer to the respective Privacy Policy.


4  Purposes, Legal Bases, and Nature of Provision


The personal data of users will be processed to the extent strictly necessary to achieve the following purposes and based on the legal grounds indicated below:

1) Use of the Website: Your personal data is processed to utilize all functionalities available on the Website.

2) Response to Your Information Requests: Your personal data is processed to process and respond to any requests you submit through the contact channels provided on the Website, including providing you with the materials or clarifications requested.


Legal Basis: The personal data collected for the purposes outlined in points 1) and 2) above are processed as necessary to perform pre-contractual measures taken at your request and/or to execute a contract of which you are a part (Art. 6(1)(b) GDPR). Providing your data is optional but necessary for the Controller to enable you to use the Website and its functionalities, respond to your requests, and/or evaluate your Curriculum Vitae.


3) Marketing Communications: Your personal data will be processed for the purpose of sending commercial information and communications via automated and non-automated contact methods, newsletters, and/or market research, including to assess the satisfaction with new products and services offered by the Controller [and/or products and services from commercial partners of the Controller, without sharing your data with third parties.


Legal Basis: The personal data collected for the purpose outlined in point 3) above is processed solely based on your freely given, specific, informed, and unambiguous consent (Art. 6(1)(a) GDPR). Providing your data is optional as it is not necessary for the use of the Website or the provision of requested services; however, failure to provide consent – or its withdrawal, if initially given – will prevent the Controller from sending you marketing communications. In any case, any consent provided by you may be withdrawn at any time without affecting the lawfulness of processing based on consent before its withdrawal, by clicking on the link “Unsubscribe” at the bottom of each commercial communication from the Controller, or by sending an email to the contact address provided in this notice.


4) Compliance with Legal Obligations and Response to Requests from Authorities: Your personal data is processed to fulfil legal obligations and respond to requests from competent authorities.


Legal Basis: The personal data collected for the purpose outlined in point 4) above is processed as necessary to comply with a legal obligation to which the Controller is subject (Art. 6(1)(c) GDPR). Providing your data is optional but necessary for the Controller to enable you to use the Website and its functionalities, respond to your requests, and/or evaluate your curriculum vitae.


5) Protection of Rights: Your personal data is processed to protect the rights of the Controller, its employees, and collaborators, both judicially and extrajudicially.

6) Extraordinary Operations: Your personal data is processed to carry out extraordinary operations related to the Controller (including mergers, acquisitions, transfers, corporate reorganizations, business restructuring), to the extent strictly necessary to achieve this purpose.

Legal Basis: the personal data collected for the purposes outlined in points 5) and 6) above are processed as necessary to pursue the legitimate interests of the Controller or third parties (Art. 6(1)(f) GDPR). Providing your data is optional; however, if you do not provide the data, it may not be possible to use the Website and all its functionalities.


If you have submitted your application for a job position through the Website, please note that the relevant privacy policy is available here: Privacy Notice for Applicants


5  Recipients of Personal Data


In the context of data processing for the purposes of paragraph 3, your data may be processed by third parties belonging to the following categories:

  • Authorized Omega3C personnel who are given specific instructions for processing;
  • Third parties who perform instrumental or related activities for Omega3C (such as, for example, outsourcers and suppliers to whom the Data Controller has entrusted the maintenance and development of IT systems, consultants and/or companies providing IT, archiving, accounting, legal services, etc.);
  • Entities for whom communication is a legal obligation (e.g. public administrations, authorities, banks, professionals, service companies).


Such entities will act, depending on the specific case, either as independent data controllers or as data processors. In the latter case, they will be duly appointed through a specific written agreement on the processing of personal data and will follow the instructions given by the Data Controller.


6  Retention Periods


The personal data you provide will be retained only for the time strictly necessary to achieve the purposes for which it was collected, as well as for any longer period required to comply with legal obligations and/or for judicial protection purposes, and in any case, no longer than the ordinary prescription periods.


In particular, your personal data will be retained in accordance with the terms and criteria specified below:

  • Purposes (1), (4), (5), (6): Personal data collected for these purposes will be retained for the time strictly necessary to achieve these ends, unless it is necessary to retain them longer in order to comply with a legal obligation, an order from an Authority, or to defend a right of the Data Controller;
  • Purpose (2): Personal data collected will be retained for the time strictly necessary to satisfy your request, unless it is necessary to retain them longer in order to comply with a legal obligation, an order from an Authority, or to defend our right;
  • Purpose (3): Personal data collected for sending commercial communications will be processed until you decide to withdraw your consent. However, after 24 months from your last interaction with our services, your data will be deleted or anonymized.


At the end of the indicated retention period, your data will be deleted or anonymized.


7  Transfer of Data Outside the European Economic Area


If necessary to achieve the purposes outlined in the previous section 4, your data may be transferred outside the European Economic Area ("EEA"). In any case where your personal data are transferred outside the EEA, especially to countries without a European Commission adequacy decision, applicable safeguards for data transfers under the relevant regulations will be implemented (e.g., adoption of Standard Contractual Clauses as adopted and updated by the European Commission). Additionally, every appropriate technical, organizational, and/or contractual measure will be taken to ensure a level of protection for your personal data that is adequate or equivalent to that guaranteed within the EEA.


8  Rights of Data Subjects


You may exercise at any time the rights granted to you by the applicable regulations, including:

  • To obtain from the Data Controller confirmation as to whether or not personal data concerning you are being processed and, where that is the case, access to your personal data;
  • To obtain restriction of processing;
  • To obtain without undue delay the rectification of inaccurate personal data concerning you and the completion of incomplete personal data;
  • To obtain, in cases provided for by law, erasure of your personal data;
  • To object, at any time, to the processing of personal data concerning you for reasons related to your particular situation;
  • To receive, upon request, your personal data in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller, where technically feasible and within reasonable costs;
  • To withdraw consent, where given, as specified in the preceding paragraph 4;
  • To lodge a complaint with the supervisory authority in the Member State of your habitual residence, place of work, or the place where the alleged infringement occurred, and/or to seek a remedy from a judicial authority. In Italy, the competent authority is the Garante per la Protezione dei Dati Personali (Italian Data Protection Authority), which can be contacted following the procedures and instructions published on the official website of such authority (www.garanteprivacy.it).


To exercise these rights, you can contact the Data Controller via email at privacy@omega3c.com or by sending a written request to the following address: Omega3C S.R.L. – C.so Magenta 46, 20123 Milano – Italy.


9  Changes and Updates to the Privacy Policy


In view of future changes that may occur in the applicable regulations, this privacy notice may be amended and supplemented over time. Where possible, we will strive to promptly inform you about any changes made and their implications.


This version is effective as of May 2024.