1. Data Controller Identification and Contact Details

The Data Controller is Omega3C S.r.l., with its registered office at C.so Magenta 46, 20123 Milan (MI), Italy, VAT No. IT07613840961 (hereinafter "Omega3C" or "Controller").

For any requests regarding the processing of your personal data and for more information about the recipients, transfers, methods, and retention period of your data, you can send a communication by mail to our headquarters or by email to: privacy@omega3c.com

2. Types of Data Processed

For the purposes described in the following paragraph 3, Omega3C will process common personal data such as identification data (i.e., name and surname), contact data (i.e., phone number and email address), and job-related data (i.e., company where you work and your role) (collectively, "Personal Data").

3. Purposes and Legal Bases of Processing

Omega3C will process Personal Data for the purposes and under the conditions described below:

a) Handling Pre-contractual Requests

Omega3C will process Personal Data to handle and respond to your requests made through the contact channels available on the website (e.g., providing you via email with materials or clarifications you requested regarding Omega3C products that the company you have a contractual relationship with is interested in) based on the legal basis of the necessity to follow up on your requests (Art. 6 para. 1(b) GDPR).

b) Business Development Activities

Omega3C will process Personal Data collected during participation in trade shows, events, and conferences to send you commercial communications related to its products you have shown interest in or invitations to events aimed at the company Omega3C has dealings with. This processing is carried out to pursue the Controller's legitimate interest (Art. 6 para. 1(f) GDPR) in developing and managing its network of business contacts with companies and individuals operating in the same sector as Omega3C and/or potentially interested in the products and services offered by Omega3C.

c) Execution of the Contract with Omega3C's Client Company

Omega3C will process Personal Data for the negotiation, establishment, and execution of the contractual relationship with the company it has a contractual relationship with, including related administrative, fiscal, and accounting obligations based on the legal basis of the necessity to pursue a legitimate interest (Art. 6 para. 1(f) GDPR). In the residual case where the contractual relationship is established directly with an individual, the legal basis will be the necessity to execute the contract with you (Art. 6 para. 1(b) GDPR).

d) Compliance with Legal Obligations

Omega3C will process Personal Data to comply with obligations provided by laws, regulations, and generally applicable legislation, as well as to respond to requests from competent authorities based on the legal basis of the necessity to comply with a legal obligation to which the Controller is subject (Art. 6 para. 1(c) GDPR).

e) Defence of Rights and Corporate Transactions

Omega3C may process Personal Data if necessary to establish, exercise, or defend a right of Omega3C and/or its employees in judicial and extrajudicial settings and/or to carry out extraordinary transactions involving the Controller (including mergers, acquisitions, disposals, corporate reorganizations, corporate restructurings) based on the legal basis of the necessity to pursue a legitimate interest of the Controller or third parties (Art. 6 para. 1(f) GDPR) in protecting its interests and legal position, including economic freedom.

4. Nature of Provision

Providing Personal Data referred to in letters (a) and (c) of paragraph 3 above is optional but necessary to fulfill a contractual obligation; if not provided, it will not be possible to respond to your requests and/or execute the contractual relationship with the client company.

Providing Personal Data referred to in letter (b) of paragraph 3 above is optional. However, if not provided, the Controller will not be able to send you commercial communications related to products you have shown interest in or invitations to events aimed at the client company with which you have a contractual relationship.

Providing Personal Data referred to in letters (d) and (e) of paragraph 3 above is optional but necessary to enable the Controller to comply with legal obligations to which it is subject and/or protect its or a third party's legal position. If not provided, it will not be possible to execute the contractual relationship with the client company.

You are reminded that you have the right to object at any time to the processing of data referred to in letters (b) and (d) of paragraph 3 of this Notice (by contacting the Controller at the contact details indicated in this Notice).

For more information on the legitimate interests pursued and the relevant balancing assessments conducted by Omega3C, you can contact the Controller at the contact details indicated in this Notice.

5. Recipients of Personal Data

To pursue the purposes indicated in paragraph 3 of this Notice, Personal Data may be processed by the following categories of subjects:

​

a) Authorized personnel of Omega3C who are given specific instructions for processing;

b) Third parties who perform activities related or instrumental to Omega3C's activities (such as suppliers providing IT system maintenance and development services, consultants and/or companies managing the mailing list service on behalf of Omega3C and offering cloud hosting services and IT support services), legal and/or tax consultants, and companies involved in possible mergers, demergers, or other extraordinary transactions, as well as public administrations and competent authorities. These subjects will act, as appropriate, as data processors or autonomous data controllers.

6. Transfer of Data Outside the European Economic Area

If necessary to pursue the purposes indicated in paragraph 3, your data may be transferred outside the European Economic Area ("EEA") in accordance with the Applicable Legislation and, in particular, in compliance with the guarantees provided by the GDPR (e.g., standard contractual clauses and, where necessary, adoption of technical, organizational, and/or contractual measures) suitable to ensure an adequate level of data protection and, in any case, essentially equivalent to that guaranteed within the EEA.

7. Processing Methods and Retention Period

Personal Data may be processed electronically or on paper, in ways that ensure their security and confidentiality in accordance with the provisions of the Applicable Legislation.

Personal Data will be processed for no longer than is strictly necessary to achieve the purposes for which they were collected. In any case, they will be stored in paper and electronic archives at the Controller's premises and/or its suppliers' premises (protected with appropriate security measures) for the applicable statutory period (not exceeding 10 years) or for the longer period necessary to comply with legal obligations, fulfil an Authority's order, or defend the Controller's right.

At the end of the retention period, Personal Data will be deleted or anonymized.

7. Your Rights

You can exercise your rights at any time as provided for by Articles 15 et seq. of the GDPR, including:

a) Obtaining confirmation from the Controller whether or not personal data concerning you are being processed and, if so, obtaining access to your personal data;

b) Obtaining without delay the rectification of inaccurate personal data concerning you and the completion of incomplete personal data;

c) Obtaining, in the cases provided for, the erasure of your data;

d) Obtaining the restriction of processing where possible;

e) Requesting the portability of the data provided to Omega3C, i.e., receiving them in a structured, commonly used, and machine-readable format, including for transmitting such data to another controller without any impediment from Omega3C itself, in all cases where this is necessary under the law;

f) Objecting to the processing of your data if carried out under Art. 6(1)(f) GDPR unless there are compelling legitimate grounds for the Controller to proceed with processing that override the interests, rights, and freedoms of the data subject or for the establishment, exercise, or defence of legal claims;

g) Lodging a complaint with the competent data protection authority and/or taking legal action. For Italy, the competent authority is the Italian Data Protection Authority, which can be contacted following the procedures and instructions published on the official website of that authority (www.garanteprivacy.it).

The rights listed above can be exercised at any time by sending an email to privacy@omega3c.com or by written communication to Omega3C S.r.l., C.so Magenta 46, 20123 Milano.

8. Modifications and Updates to the Notice

Given future changes that may occur to the Applicable Legislation, this Notice may be subject to amendments and additions over time. Where possible, we will seek to inform you promptly of any changes and their consequences.

This version is from March 2024.