Privacy Policy

The website www.otiara.com (the “Site”) is managed by Otiara, as Data Controller pursuant to the Regulation.

To access the Site, it is not necessary to proceed with any registration. However, there are sections within the Site that require registration or the use of a username and password (e.g. to register and access the contents of the “MyArea”, to benefit from the related services), or services for the use of which it is necessary to provide your data (e.g. to contact us, receive the newsletter, etc.). With reference to the data relating to navigation within the Site, see also the following point 7 regarding the Profiling Tools used by the Site.

The data are collected and processed for purposes strictly connected to the use of the Site and its services. The purposes of use of the data are indicated in detail in the specific information provided by the Site in all cases of data collection. We therefore ask you to read the information that from time to time illustrates the characteristics of the processing that will be carried out by Otiara (e.g. to register and access the contents of the "MyArea", to benefit from the related services, etc.). The processing of your data will take place in full compliance with the privacy legislation

The provision of personal data is generally optional. Only in certain cases, failure to provide data may make it impossible to access specific services and obtain what may be requested (e.g. registration is necessary to access the contents of the "My Area", to benefit from the related services and the provision of the email address is necessary to be contacted by Otiara); failure to provide such data may therefore prevent Otiara from allowing access to certain services of the Site or from responding to user requests. The data required from time to time are indicated in the data collection forms on the Site - e.g. indicating them with an asterisk (*) - and the consequences of their failure to provide them are reported in the specific information on the data collection pages.

The data will be processed both electronically and on paper. Otiara ensures the lawful and correct processing of the personal data provided through the Site, in full compliance with current legislation, as well as the maximum confidentiality of the data provided during registration. The data will not be disclosed and will be processed by personnel expressly authorized to manage the Site of the IT Department / Graphics and Web Department / Marketing Department. For organizational and functional needs, we have appointed some service providers functional to the management of the Site as external data processors of users' personal data for purposes strictly connected and related to the provision of the services provided (e.g. managing payment processing, data storage, website hosting, order and shipment management, assistance for direct marketing activities, etc.). A complete list of external data processors can be requested by contacting Otiara.

This information is provided only for the site www.otiara.com and not for other websites that may be consulted by the user via connection links. Otiara cannot be held responsible for the personal data provided by users to external parties or to any websites linked to this Site.

Otiara does not carry out any promotional and/or advertising communication activities without the prior express consent of the user. The Site uses "cookies", both technical (i.e. to facilitate navigation and use of the Site) and profiling (i.e. to analyze users and their behavior and preferences, and to provide them with personalized advertising). For a detailed explanation of the cookies used by the Site and how to disable them, we invite you to read our Cookie Policy.

The processing connected to the services provided by the Site is carried out at the registered and administrative headquarters of Otiara. The data collected and processed through the Site will not be transferred to countries outside the European Union.

Your data will be processed for the times set out in the specific information provided at the time of collection (e.g. registration in the “MyArea” area, to benefit from the related services, use of the “contact us” service to be contacted by Otiara operators, etc.). With regard to the retention times of data collected through the use of profiling tools (e.g. cookies), see our Cookie Policy.

By sending a communication to [email protected], you may at any time exercise the rights set out in Articles 15 to 22 of the Regulation, including knowing which data we are processing, with which methods and for which purposes we use them, modifying the data you have provided us or deleting them, asking us to limit the use of your data, requesting to receive or transmit your data, without prejudice to the possibility of changing your consents (possibly provided). You can also always object to the processing of your data carried out, in particular, for marketing purposes or analysis of your preferences.

We remind you that, if you believe that the processing concerning you violates the provisions of the Regulation, you can always lodge a complaint with the Data Protection Authority (www.garanteprivacy.it), or with the Data Protection Authority of the country in which you habitually reside, work or where the alleged violation occurred.

This Privacy Policy is governed by EU Regulation 679/2016 which guarantees that the processing of personal data is carried out in compliance with fundamental rights and freedoms, as well as the dignity of the interested party, with particular reference to confidentiality, personal identity and the right to protection of personal data.

Otiara reserves the right to review, modify or simply update, in whole or in part, at its sole discretion, in any way and/or at any time, without notice, this Privacy Policy also in consideration of changes in laws or regulations regarding the protection of personal data. Changes and updates to the Privacy Policy will be communicated by publishing a prominent notice in the information or on the Home Page of the site or by sending an e-mail message. Users are in any case invited to check for any updates to this information by visiting the Site. The full text of EU Regulation 679/2016 can be consulted on the website of the Guarantor for the Protection of Personal Data www.garanteprivacy.it.

The processing of your data will take place:

• pursuant to art. 6, paragraph 1, letter. b) of the Regulation to manage the use of the Services requested through the Site, manage our loyalty activities through registration in the "MyArea" section of the Site and to respond to any requests you may have.

• on the basis of your consent, pursuant to art. 6, paragraph 1, letter a) of the Regulation, to carry out marketing activities and analysis of your preferences.

In any case, the processing will take place in accordance with the provisions in force - and their subsequent amendments and/or additions - issued on the matter by the Guarantor for the Protection of Personal Data.

Articles 15 to 22 of the Regulation recognize specific rights including:

• obtain confirmation as to whether or not personal data concerning you are being processed.

• obtain access to your personal data and the information indicated in art. 15 of the Regulation.

• obtain the rectification of inaccurate personal data concerning you without undue delay or the integration of incomplete personal data.

• obtain the erasure of personal data concerning you without undue delay.

• obtain the restriction of the processing of personal data concerning you.

• be informed of any rectification or erasure or restriction of processing carried out in relation to personal data concerning you.

• receive the personal data concerning you in a structured, commonly used and machine-readable format.

• object at any time, for reasons connected to your particular situation, to the processing of personal data concerning you.

In particular, your right to withdraw at any time any consent to processing provided and to object to our analysis activities remains unchanged. Furthermore, pursuant to art. 21 of the Regulation, you will have the right to object at any time, for reasons connected to your particular situation, to the processing of personal data concerning you carried out for the pursuit of the legitimate interest of the Data Controller pursuant to art. 6, paragraph 1, letter f of the Regulation.

The data controller is Otiara in the person of its legal representative pro tempore.