In accordance with Regulation (EU) No. 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation, hereinafter referred to as "GDPR"), and in compliance with Legislative Decree No. 196 of June 30, 2003, and subsequent amendments and additions (hereinafter referred to as the "Privacy Code"), we inform you that the data provided by you, or otherwise acquired in the course of our activities, are subject to processing, both manually and/or electronically, in accordance with the principles of lawfulness, fairness, transparency, accuracy, integrity, responsibility, and in full protection of your rights and, in particular, your confidentiality. Processing includes any operation (deletion, recording, organization, storage, use, communication, dissemination, erasure, and destruction) applied to personal data, with or without the use of automated processes.
Data Controller
The data controller and processor is the company Ostilio Mobili Spa with registered office at 25031 Capriolo (Brescia), Via Palazzolo, 120, represented by its legal representative pro tempore. The data protection officer can be contacted at the following email address: info@ostiliomobili.it or by writing to the registered office. The processing of personal data provided may be carried out by specifically or occasionally authorized personnel, instructed on the basis of specific instructions regarding the purposes and methods of processing (employees, collaborators, consultants, or service providers).
Protection of Personal Data
The activities offered online are carried out in full compliance with international, community, and national privacy and data protection laws.
Data Processing Methods
Data processing includes "any operation or set of operations, performed with or without the aid of electronic or automated means, concerning the collection, recording, organization, storage, processing, modification, extraction, comparison, use, communication, dissemination, interconnection, blocking, erasure, and destruction of data." Personal data will be processed mainly automatically but also on paper, using procedures strictly related to the purposes outlined in the following article 8. The data controller has adopted suitable security measures to protect data subjects against the risk of loss, misuse, or alteration of personal data. Ostilio Mobili Spa is committed to maintaining physical, electronic, and procedural security measures to protect personal data in accordance with national and European regulations. Data collected through the website, processed lawfully and in accordance with fairness principles, will be used, with the user's consent, to obtain the services specified on the website. Personal data processed may be provided directly by the data subjects (e.g., through direct web access or email) or automatically acquired during browsing. Sending email messages to the addresses possibly present on the site, for example, involves the acquisition by the company of the sender's address. This address, along with any other personal data collected, is necessary to respond to the requests sent and to provide the expressly requested services. Data is processed in paper and/or electronic format, using automated procedures, and is carried out directly by the data controller's organization or by external subjects to that organization, acting as data processors and/or data processors, as well as by service companies, acting as data processors and/or data processors. Appropriate security measures are in place to prevent misuse or unlawful use of data, unauthorized access, and data loss. No data collected through the website is subject to disclosure. Ostilio Mobili Spa requires the explicit consent of the data subject to use the data for purposes other than those previously indicated, such as sending advertising material, sending commercial information, subscribing to newsletter services, conducting market research, and compiling statistics. The website user has the option to provide or not provide their personal data to request services or receive information from the company. Failure to consent to data processing will make it impossible for the company to provide the requested service. Personal data collected through the website is communicated to third parties only if the offered service requires such communication. Data may be disclosed to organizations and authorities in accordance with specific legal provisions.
Categories of Personal Data Subject to Processing
The Controller processes:
common personal data: for example, name, surname, contact details, etc.
economic and transaction information (e.g., payment or credit card data, information on purchases made).
Customers who wish to make purchases through the website must register on the site. During registration, individuals provide personal data (such as name, surname, postal address, email account, date of birth, data related to electronic payment, etc.). Once registered, customers can access their reserved area, where they can view the status of their active orders, the history of their orders, and, if necessary, modify their data. The computer systems and software procedures responsible for the operation of the site automatically and indirectly provide certain information, the transmission of which is implicit in the use of internet communication protocols. This includes, for example, "cookies" (as specified below), IP addresses, domain names of computers used by users connecting to the site, URL addresses of requested resources, and geographic location. Personal data is requested to allow customers access to any functionality or service on the website; some fields will be marked as mandatory as they are necessary data to provide the requested product. If a customer decides not to provide such data, user registration cannot be completed, and the user will not be able to use the requested products.
Categories of Subjects Who May Become Aware of the Personal Data of Data Subjects
Personal data may be disclosed to employees or collaborators of the data controller who, operating under the direct authority of the latter, have received adequate operational instructions. Personal data will be processed by the employees of Ostilio Mobili Spa. Personal data may also be disclosed to third-party companies or other entities performing outsourcing activities on behalf of Ostilio Mobili Spa, and, if required by European data protection regulations, have been duly appointed as data processors.
For more information on the list of data processors, data subjects can write to: info@ostiliomobili.it
Transfer of Data Subjects' Personal Data outside the EU
Personal data may be transferred to non-EU countries in compliance with the principles set out in the GDPR. Transfers will be based on an adequacy decision, Standard Contractual Clauses approved by the European Commission, or another appropriate legal basis.
Purposes of Personal Data Processing
Ostilio Mobili Spa collects and processes the personal data of data subjects for the following purposes:
customer service requests: Our Customer Service uses the personal data provided by data subjects to fulfill information and assistance requests;
compliance with legal obligations: We process data subjects' data to comply with obligations imposed by national and European laws and regulations;
sending newsletters and SMS: With the data subject's consent, we will send newsletters by email and promotional SMS messages ("SMS service");
fulfillment and execution of contracts for any purchases on e-commerce platforms: We process data subjects' data to fulfill obligations arising from contracts for the purchase of products and services through e-commerce platforms related to Ostilio Mobili Spa;
protection of our rights: We process data subjects' data to protect our rights or those of another party in legal proceedings, both judicial and extrajudicial (mediation bodies and entities with similar functions), and in administrative procedures, if necessary;
execution of pre-contractual measures taken at the request of the customer;
management of user registration on the Website: We process data subjects' data to identify the customer as a user of the Platform and authorize access to different features, products, and services available as a registered user.
Rights of Data Subjects
Data subjects can exercise the following rights at any time:
right of access: to obtain confirmation of whether or not personal data concerning them is being processed and access to such data and specific information (e.g., processing purposes, categories of data in question, recipients to whom data will be communicated);
right to rectification: to obtain the rectification of inaccurate data concerning them without undue delay. The data controller communicates any corrections made to each recipient to whom the personal data has been transmitted, unless this proves impossible or involves a disproportionate effort. The data controller informs the data subject of these recipients if requested by the data subject;
right to erasure: to obtain the erasure of data concerning them, under certain conditions, without undue delay (e.g., personal data is no longer necessary for the purposes for which it was collected; if the data subject withdraws consent; if it must be deleted due to a legal obligation). The data controller communicates any deletions made to each recipient to whom the personal data has been transmitted unless this proves impossible or involves a disproportionate effort. The data controller informs the data subject of these recipients if requested by the data subject;
right to restriction of processing: data subjects can request the data controller to restrict the processing of data, for example, to only store it with exclusion of any other use, under certain conditions (e.g., if the processing is unlawful, and the data subject opposes the deletion of the data; if the data subject contests the accuracy within the verification period). The data controller communicates any restrictions on processing made to each recipient to whom the personal data has been transmitted, unless this proves impossible or involves a disproportionate effort. The data controller informs the data subject of these recipients if requested by the data subject;
right to data portability: to obtain the return of the personal data provided in a structured, commonly used, and machine-readable format or the transmission to another data controller;
right to object: to object at any time to the processing of personal data.
In particular, data subjects have the right to obtain:
information on the origin of personal data;
information on the purposes and methods of processing;
information on the logic applied in the case of processing carried out with the aid of electronic tools;
information on the identification details of the Data Controller, Processors, subjects, and categories of subjects to whom personal data may be communicated, to obtain access to your data and information about their processing, as well as a copy of such data, to withdraw the consent given for one or more of the processing purposes;
updates, rectification, or, where interested, integration of data;
erasure, transformation into anonymous form, or blocking of data processed unlawfully, including data that does not need to be kept for the purposes for which the data was collected or subsequently processed;
limitation and deletion of data, in cases provided for by law;
certification that the operations referred to in the preceding points have been brought to the attention, also as regards their content, to those to whom the data has been communicated or disseminated, except in the case where this fulfillment proves impossible or involves the use of means manifestly disproportionate to the protected right;
data in a standard electronic format, to be transferred to another entity ("data portability").
Exercise and Methods of Exercising Rights
Data subject rights can be exercised by submitting a written request without formalities to the data controller or processor or at the company's registered office. The request must be addressed to the data controller or processor and can also be transmitted by registered mail to the registered office of the company Ostilio Mobili Spa or by email (info@ostiliomobili.it). The data subject has the right to object, in whole or in part, to the processing of personal data concerning them, even if relevant to the purpose of collection; to the processing of personal data concerning them for the purposes of sending advertising or direct sales material or for carrying out market research or commercial communication.
If the data subject believes that the processing of their personal data has been carried out unlawfully, they may lodge a complaint with one of the competent supervisory authorities for compliance with the rules on the protection of personal data. In Italy, the complaint can be submitted to the Italian Data Protection Authority (www.garanteprivacy.it/).
Location of Processing
Data may be processed at the company's registered office in Via Palazzolo, 120, 25031 Capriolo (Brescia), and/or at locations where the designated responsible parties are located, as well as at tax consultancy offices authorized to process accounting. For further information, data subjects can contact the data controller by emailing info@ostiliomobili.it.
Data Retention
Data will be processed for the entire duration of established contractual relationships and even after that for compliance with legal norms and for commercial purposes. Specifically, data used to send newsletters or SMS will be processed until the data subject requests the cessation of sending (withdrawal of consent or objection to receipt). For the management of user registration on the Website, data will be processed for as long as the user wishes to remain registered (or, until they request deletion of their registration). The copy of the sales contract is kept by Ostilio Mobili Spa to allow order processing and future traceability for ten years or for a different period as required by current regulations. For the fulfillment and execution of the sales or service contract, data will be processed for the entire time necessary to manage the purchase of products or the provision of requested services. For customer support, data will be processed for the time necessary to meet your request or inquiry. After the retention periods, data will be destroyed, deleted from systems, or anonymized in accordance with technical deletion and backup procedures.
Updates to this Privacy Policy
This privacy policy may be updated to comply with national and European data processing regulations or to adapt to the adoption of new systems, internal procedures, or for any other reason deemed appropriate and/or necessary. This privacy policy may be modified at any time without prior notice.
Links to Third-Party Websites
This information is effective exclusively for the website owned and attributable to Ostilio Mobili Spa and/or its brands and does not extend to other websites that data subjects may consult via external links. Ostilio Mobili Spa is not responsible for the policies applied by linked sites or for the information or content therein. Links to other sites are provided solely as points of information and/or further information on specific topics that may be useful to data subjects. Each external site has its own rules and policies, including those related to Personal Data or cookie management: it is recommended to carefully read the statements presented before proceeding with navigation, which remains entirely at the discretion of the data subject. Linking to third-party sites, or to any product, publication, service, or offers of third parties does not constitute or imply approval or recommendation of the products or services by Ostilio Mobili Spa.