Information pursuant to and for the purposes of art. 13, REG. EU 2016/679 In force from 05/25/2018
Dear Customer,
Pursuant to art. 13 of the REG. EU 2016/679, therefore, we provide you with the following information, specifying that for each processing you are free to provide your personal data, therefore giving explicit consent to the relevant processing, for the purposes highlighted in the following paragraphs.
1) The Data Controller
The Data Controller is ORA srl. The internal data controller is Dr. Boccia Valentina, domiciled at Via Nuova Saviano n. 142, San Gennaro Vesuviano.
2) Purpose of the processing for which the data is intended
The processing of personal data provided has the following specific purposes:
IF YOU PLACE A PURCHASE ORDER: ORA srl. collects and processes the Customer's personal data for the collection and execution of purchase orders, for any complaints following the purchase and to provide the Customer with the available services. These data are necessary for the management of purchase orders, including with commercial partners (for example logistics service providers, couriers, banks, etc.). It is advisable to enter a delivery address and a correct telephone number to allow ORA srl to promptly and correctly execute an accepted purchase order. A telephone number is also necessary in order to allow ORA srl. to contact the Customer for any clarifications and to allow ORA's commercial partners to correctly execute the Customer's purchase orders. Finally, the e-mail address is necessary for ORA srl to be able to communicate to the Customer the confirmation of receipt of the purchase order and for any other communications. Finally, the email address is used when the Customer is identified to allow them to access their account.
IF YOU ACCESS THE RESERVED AREA: the Customer's personal data and those relating to his purchase orders are saved in the ORA srl system, but will not be freely accessible for security reasons. ORA srl guarantees each Customer access to a reserved area via a protected password. In this area, the Customer can view all the data regarding the purchase orders executed and those in progress and can also manage their personal data, any banking data and those relating to the subscription to the newsletter service. The Customer is required to process the access data in compliance with current regulations and not to disclose them to third parties. ORA srl will not be in any way responsible for incorrect or improper use of the password by the Customer. ORA srl uses Customer data for promotional purposes. The Customer's email address will be used exclusively within the limits prescribed by applicable law. The Customer will regularly receive purchasing advice via email. It is possible to stop sending the aforementioned promotional messages free of charge by making a request via e-mail to
IF YOU ACCEPT THAT YOUR DATA BE PROCESSED FOR "MARKET RESEARCH AND OPINION SURVEYS": the Customer's personal data are also processed for the purpose of carrying out market research and opinion polls. The use of the same occurs anonymously and exclusively for the purpose of compiling statistics for ORA srl. At any time the Customer has the right to object to the processing. The answers provided by the Customer as part of such market research and opinion polls are neither revealed to third parties nor made public. Responses to our survey questions are not stored together with your email address.
IF YOU DECIDE TO SUBSCRIBE TO THE NEWSLETTER: in the newsletter the Customer will find information on advantageous offers from time to time. ORA srl invites the Customer to also enter personal data (for example, their name) in the settings of the newsletter, so that ORA itself can address the Customer personally. ORA srl processes the data collected as part of the newsletter service in order to personalize and adapt the services to the Customer's interests and preferences, as well as for promotional purposes and market studies. ORA srl archives the data collected, it being understood that such data will in any case be used solely for the purposes referred to in this information.
IF YOU CONSULT WEBSITES AND NEWSLETTERS: when the Customer visits the websites owned by ORA srl (for example ), even accessing them from a link in a newsletter, some data is collected and saved. Other data may also be saved such as the access date, the http response code, and the website from which the redirection occurred (for example www.google.it) as well as the amount of data (bytes) that has been transmitted. Lhe analysis of the data is done only in a strictly anonymous form. This process allows ORA srl to tailor the information contained in the offers to the interests of the newsletter subscribers. The Customer is free to unsubscribe from any communication at no charge by requesting it via email at orasrl2018@gmail.com.
SAVING PERSONAL DATA THROUGH COOKIES: It is not necessary to accept the use of cookies while browsing the sites owned by ORA srl (for example: ) However, the Customer is informed that the use of the "shopping cart" function and the sending of any orders are only possible with the activation of cookies. On sites owned by ORA srl (for example ), cookies are used. The cookies are text files recorded on computer support which allow the recording of some parameters and data communicated to the ORA srl computer system through the browser used by the Customer and allow an analysis of his habits in the use of a specific website. This saving allows ORA srl to adapt its website to the Customer's needs and also facilitates its use. Many of the cookies used are automatically deleted from the hard disk of the Customer's computer at the end of each browsing session (hence the name "cookie session"). However, there are cookies that remain on your hard drive. Their stay is quite long (a few years) for reasons of greater practicality. Once a first visit to the site has been made, the system will be able to recognize at each subsequent visit that the Customer has already been on that site and the Customer's requests and favorite data will therefore be retrieved (long-lasting cookies). These cookies will allow the Customer not to have to re-enter their password and fill out forms at each new login. Browsers generally limit the use of cookies, although these allow access to the offers on the sites owned by ORA srl (for example: more freely. The cookies can also be deactivated. The Customer can refuse the installation of cookies by selecting the corresponding parameters in the specific options of the browser. It should be noted, however, that in this way the Customer will not be able to fully use some functions of the site. The Customer allows the registration of the username and password in cookies after closing the browsing session and their activation at the time of the next visit. The Customer may revoke this authorization at any time, with effect for the future.
SECURE TRANSFER OF PERSONAL DATA: The Customer's personal data is transferred using SSL security certificates. This applies both to navigation and to the placing of purchase orders and to the Customer's reserved access to his/her account.
TRANSFER OF YOUR PERSONAL DATA TO THIRD PARTIES: To fulfill the purposes set out in this Privacy Policy, it may be necessary for ORA srl to process your Personal Data to the extent that they are directly involved in each purpose (whose activities concern the sectors of clothing, household items as well as any other complementary sector, as well as the development and support for e-commerce activities). It may also be necessary to transfer your Personal Data to third parties who provide support services to us, e.g. financial institutions, entities fighting fraud, providers of technology, logistics, transport and delivery services, customer support services and/or services that analyze transactions carried out on the Platform in order to offer users sufficient guarantees in commercial operations, etc. These subjects are appointed Data Controllers or persons in charge of processing and will therefore process the data in accordance with this Information.
The Data Controller also declares that the Personal Data may be transferred to third parties for marketing and/or promotional purposes.
3) Method of processing and data retention period
We remind you that you are free to provide your personal data for the purposes highlighted in the previous paragraph. Failure to provide your personal data for these purposes may mean that it will not be possible to handle your request in relation to that specific data processing.
The data will be processed in full compliance with the principles of confidentiality, correctness, necessity, relevance, lawfulness and transparency imposed by the Regulation for the time necessary to achieve the purposes for which the data were collected and in any case no later than 10 years from their date. collected for the purposes of the Service or, in the case of purchase of goods, for the time necessary for the execution of the contractual conditions relating to the coverage of the legal guarantee. For the analysis of your consumption choices, where authorized by you, your purchases that have a historical depth of no more than 5 years will be examined.
4) Scope of communication and dissemination of data
In relation to the purposes indicated in point 1, the data may be communicated to the following subjects:
a) all subjects whose right to access such data is recognized by virtue of regulatory provisions, for example police bodies and public administration in general;
b) to our collaborators, employees, within the scope of their respective duties, who have been appointed and authorized to process the data provided by you;
c) to all those natural and/or legal persons, public and/or private when the communication is necessary or functional to guarantee legal obligations in the manner for the purposes illustrated above
d) service providers who process personal data on behalf of ORA srl, for example to process data relating to credit cards and payments, shipments and deliveries, hosts, to manage data, to send e-mails, text messages and other types of communication, for research and analysis, to manage product promotions, as well as administer certain services. When we use third-party service providers we stipulate agreements that require them to adopt suitable technical and organizational measures for the protection of personal data.
e) Other third parties, where consent has been given.
5) Rights referred to in articles. 15, 16, 17, 18, 20, 21 and 22 of the REG. EU 2016/679
Reminding you that if we have obtained consent for the processing of personal data, you have the right to withdraw consent at any time, we inform you that in your capacity as interested party, you have, in addition to the right to lodge a complaint with a supervisory authority , the rights listed below, which you can assert by addressing a specific request to the Data Controller and/or the data controller, as indicated in point 7.
Art. 15 – Right of access
The interested party has the right to obtain from the data controller confirmation as to whether or not personal data concerning them is being processed and, if so, to obtain access to the personal data and information regarding the processing.
Art. 16 – Right of rectification
The data subject has the right to obtain from the data controller the rectification of inaccurate personal data concerning him or her without undue delay. Taking into account the purposes of the processing, the data subject has the right to obtain the completion of incomplete personal data, including by providing a supplementary statement.
Art. 17 – Right to erasure (right to be forgotten)
Lthe interested party has the right to obtain from the data controller the deletion of personal data concerning them without unjustified delay and the data controller has the obligation to delete personal data without unjustified delay.
Art. 18 – Right to limit processing
The interested party has the right to obtain from the data controller the restriction of processing when one of the following situations occurs.
a) the interested party contests the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
b) the processing is unlawful and the interested party opposes the deletion of the personal data and instead requests that their use be limited;
c) although the data controller no longer needs them for the purposes of the processing, the personal data are necessary for the interested party to ascertain, exercise or defend a right in court;
d) the interested party has objected to the processing pursuant to art. 21, paragraph 1, pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.
Art. 20 – Right to data portability
The interested party has the right to receive in a structured, commonly used, and machine-readable format the personal data concerning them provided to a data controller and has the right to transmit such data to another data controller without hindrance from the data controller to whom they were provided.
When exercising their rights regarding data portability pursuant to paragraph 1, the interested party has the right to obtain the direct transmission of personal data from one data controller to another, if technically feasible.
Art. 21 – Right to object
The interested party has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them under Article 6(1)(e) or (f), including profiling based on such provisions.
Art. 22 – Right not to be subjected to automated decision-making, including profiling
'The interested party has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects their person.
6) Intention to transfer data abroad
We inform you that your data may also be processed by IT service providers (for example providers and/or cloud computing) operating outside the European Union.
7) Changes to the treatment
If you wish to have more information on the processing of your personal data, or to exercise the rights referred to in point 7 above, you can write to or call 0812131525.
Before we can provide or change any information to you, we may need to verify your identity and answer some questions.
An answer will be provided as soon as possible and in any case within the limits of the law.
8) Changes to our privacy policy
Applicable law changes over time. If we decide to update our privacy policy, we will publish the changes on the sites owned by ORA srl (for example: ) If we change the way we process your personal data, we will provide advance notice, or where required by law, we will ask for your consent before we implement such changes. We strongly recommend that you read our Policy and stay informed about our policies.
The privacy policy was last modified on 24.5.2018.
Naples, 24/05/2018
NOW srl