INFORMATION ON THE PROCESSING OF PERSONAL DATA

Pursuant to art. 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and to the national legislation, we provide you with information on the processing of your personal data:

PURPOSE OF THE PROCESSING:

Offering information on the Shopping Centre to the users browsing the site https://oriocenter.it/it and allowing them, upon request and with prior consent, to subscribe to the newsletter and write to the Data Controller in order to request any information and any contacts on the page “contact us”.

You may connect to the business pages of the Shopping Centre through a specific link https://www.instagram.com/accounts/login/ and https://www.facebook.com/oriocenter/.

We inform you that you may freely access and navigate on the pages of the two social networks and the Data Controller has no power over the navigation data on these sites; we inform you that the independent Data Controllers to contact for any information relating to the data subject are the owners of the social networks. Therefore, we invite you to have a look at their information.

LEGAL BASIS OF THE PROCESSING

For navigation data on the site, such as IP addresses or domain names of computers and terminals used by users, addresses in URI/URL notation and more, the legal basis is the Data Controller’s legitimate interest to provide information services to the users of the site; such interest is balanced by the free choice of users to browse the site and by the appropriate measures to protect such data, which are not disclosed to third parties, except for the Data Processor who manages the site and who processes them in compliance with the provisions provided by the Data Controller through the appointment deed. For more information on cookies, please visit the related information at this link https://oriocenter.it/it/cookies.

The personal data provided and collected in order to allow the data subject to subscribe to and receive the newsletter, including advertising as well, are collected and processed only upon specific and prior consent of the data subject. The personal data entered on the site page in order to request information and have contacts are provided on a voluntary basis and are collected and processed only upon specific and prior consent of the data subject.

Sending messages to the contact addresses of the Data Controller or the DPO is optional and not mandatory. Private messages sent by users to profiles/pages on social media involve the acquisition of the sender's contact data, that are necessary in order to then reply, and all the personal data included in communications.

RECIPIENTS OF DATA

Data are processed by Data Processors and persons in charge of processing data appointed by the Data Controllers, whose contact details are available upon request of the data subject. Data are not transferred abroad, except for those concerning navigation on the social networks indicated above, which are collected and processed by the social networks’ owners, with no connection at all with the Data Controller, Consorzio Operatori Oriocenter.

DATA STORAGE

  • Navigation data are kept for 7 days and are then destroyed;
  • Any data for the sending of the newsletter are kept for as long as necessary in order to achieve the purposes for which they were collected and/or conferred or, in any case, until the data subject’s request for cancellation and no later than 5 years.
  • Any data collected for requests for information and in order to have contacts are kept for 6 months and then deleted.

DATA CONTROLLER

For all the other purposes indicated above, the Data Controller is the Consorzio Operatori Oriocenter, with registered office in Via Portico, 71 - Orio al Serio (BG), Italy, email: direzione@oriocenter.it.

DATA PROTECTION OFFICER (DPO)

The Data Protection Officer (DPO) appointed by Consorzio Operatori Oriocenter can be contacted at the following address: info@italambiente.it

RIGHTS OF THE DATA SUBJECTS

Data subjects have the right to obtain access to their personal data and to rectify or delete such data or limit the processing concerning them or to object to the processing (pursuant to articles 15 et seq. of the Regulation).

The appropriate request can be submitted to the Data Controller and to the Data Protection Officer.

In order to assert their rights and specifically the right to complain, data subjects may contact the Italian Data Protection Authority - Piazza Venezia, 11, IT-00187, Rome.