Privacy Policy

Dear Customer,
we wish to inform you, that , pursuant to article 13 of EU Regulation 2016/679 (GDPR), the processing of your personal data will be correct and transparent, for lawful purposes, and protecting your privacy and your rights. To this end, we inform you that the data controller is O.R.M. OMNIA RESINA MAZZOTTI S.r.l. The treatment will be carried out also with the aid of IT tools for the following purposes:
  • to fulfill contractual obligations;
  • to comply with current administrative, accounting and tax obligations;

We also wish to inform you that the provision of your data for the treatments referred to in points 1 and 2 is mandatory, and in case of refusal it will not be possible to carry out the services of the Company. For the purpose of the indicated processing, the holder may become aware of sensitive and / or judicial data, as defined by EU Regulation 2016/679. The data are processed according to gic strictly connected to the purposes outlined above, for the necessary time and identified by the law and in any case to ensure compliance with the provisions of the law, as well as the protection of confidentiality, security, accuracy and relevance of data. The data are not processed by automated decision-making processes nor are they subject to profiling. In relation to the purposes indicated, the personal data collected may be communicated to the following subjects or to the categories of subjects indicated below: - Financial administration; - Judicial authorities; - Company for the management of IT and telematic networks; - Company for the processing of accounting data and tax obligations; - Banks and credit institutions; - Insurance companies; - Consultants and collaborators external to the Company; - Social security and assistance institutions; Personal data subject to processing may be disclosed only in cases expressly provided for by law, regulation or national or EU regulations, as well as in compliance with instructions issued by the legitimate Authorities. Data is not communicated abroad. The EU Regulation 2016/679 recognizes the interested party the exercise of specific rights, defined by the articles. 15-21, referred to below:
a) Right to obtain access to personal data and the following information:
- confirmation that the processing of personal data is currently underway;
- the purposes of the processing;
- the categories of personal data;
- the receivers or categories of receivers to whom the personal data have been or will be communicated.
- if the data are not collected from the data subject, all information available on their origin;
- the existence of an automated decision-making process, including profiling;
- a copy of the personal data being processed.

b) Right of rectification and integration of personal data;
c) Right to delete data ("right to be forgotten") if one of the following reasons exists:
  • personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed;
  • the interested party revokes the consent to the processing of data and there is no other legal basis for the processing;
  • the party opposes the processing and there is no legitimate overriding reason to proceed with the processing;
  • personal data have been processed unlawfully;
  • personal data must be deleted to fulfill a legal obligation under Union law or the law of the Member State to which the data controller is subject;
The data controller, if he has made public personal data and is obliged to delete it, must inform the other owners who process the personal data of the request to delete any link, copy or reproduction of his data.
d) Right to limitation of treatment in the event that:
  • the interested party contests the accuracy of personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
  • the processing is illegal and the interested party opposes the cancellation of personal data and asks instead that its use is limited; even if the data controller no longer needs it for processing purposes, personal data are necessary for the data subject to ascertain, exercise or defend a right in court;
  • the interested party opposed the processing, pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.

e) Right to the portability of the data or the right to receive, in a structured, commonly used and automatically readable form, personal data concerning him / her provided to a data controller and possibly transmit them to another data controller, if processing is based on consent or on a contract and is carried out by automated means. Where technically possible, the data subject has the right to obtain direct data transmission from one data controller to another.
f) Right to oppose at any time the processing of personal data, including profiling, in particular in the case where:
  • processing is carried out on the basis of the legitimate interests of the owner, after having clarified the reasons for the opposition;
  • personal data are processed for direct marketing purposes.
g) Right not to be subjected to a decision based solely on automated processing, including profiling, except in cases where the decision: is necessary for the conclusion or execution of a contract between the data subject and a data controller, is authorized by the law of the Union or of the Member State to which the controller is subject or based on the explicit consent of the data subject.

The interested party, if the data acquisition by the holder took place following the issue of consent, has the right to withdraw the consent at any time. The above rights can be exercised by the interested party by registered letter addressed to the holder indicated below. Furthermore, if the interested party considers violated one or more of their rights, he can lodge a complaint with the Authority for Privacy according to the methods indicated by the Authority itself.

The holder of the treatment