Disclosure pursuant to and in accordance with Art. 13, EU REG. 2016/679 Effective from 25/05/2018
Dear Customer,
Pursuant to Art. 13 of EU REG. 2016/679, therefore, we provide you with the following information specifying that for each processing you are free to provide your personal data, thus giving your explicit consent to its processing, for the purposes highlighted in the following paragraphs.
1) The Data Controller
The Data Controller is ORA srl.The internal data processor is Dr. De Gregorio Carla, domiciled at Via Papa Giovanni Paolo II nr.3, San Paolo Belsito.
2) Purpose of the processing for which the data is intended
The processing of personal data provided have the following specific purposes:
IF YOU MAKE A PURCHASE ORDER: ORA ltd. collects and processes the Customer's personal data for the collection and execution of purchase orders, for any complaints after the purchase and to provide the Customer with the available services. These data are necessary for the management of purchase orders, including with business partners (e.g. logistics service providers, couriers, banks, etc.). It is advisable to enter a correct delivery address and telephone number to enable ORA srl to promptly and correctly execute an accepted purchase order. A telephone number is also necessary in order to allow ORA srl. to contact the Customer for any clarifications and to allow ORA srl's own business partners to properly execute the Customer's purchase orders. The e-mail address is, finally, necessary for ORA srl to be able to communicate to the Customer the confirmation of receipt of the purchase order and for other possible communications. The e-mail address is, finally, used at the time of identification of the Customer to allow him/her to access his/her account.
IF YOU ACCESS THE CONFIDENTIAL AREA: The Customer's personal data and those concerning his/her purchase orders are saved in ORA srl's system, but will not be freely accessible for security reasons. ORA srl grants each Customer access to a restricted area by means of a protected password. In this area, the Customer can view all data regarding the purchase orders executed and those in the process of execution and can also manage his personal data, any bank data and those related to the subscription to the newsletter service. The Customer is obliged to treat the access data in compliance with the regulations in force and not to disclose them to third parties. ORA srl will not be in any way responsible for incorrect or improper use of the password by the Customer. ORA srl uses the Customer's data for promotional purposes. The Customer's e-mail address will be used only within the limits prescribed by applicable regulations. The Customer will receive regular e-mail advice on purchases. It is possible to stop receiving the above promotional messages free of charge by making a request via e-mail to
IF YOU ACCEPT THAT YOUR DATA BE PROCESSED FOR "MARKET RESEARCH AND DEMOSCOPIC SURVEYS": your personal data are also processed for the purpose of performing market research and demoscopic surveys. The use of the same is done anonymously and exclusively for the purpose of drawing up statistics for ORA srl. At any time the Customer has the right to object to the processing. The answers provided by the Client as part of such market research and demoscopic surveys are neither disclosed to third parties nor made public. The answers to the questions in our surveys are not stored together with the e-mail address.
IF YOU DECIDE TO SUBSCRIBE TO THE NEWSLETTER: in the newsletters the Customer will find information about advantageous offers from time to time. ORA srl invites the Customer to also enter personal data (e.g. his/her name) in the settings of the newsletters, so that ORA itself can personally address the Customer. ORA srl processes the data collected as part of the newsletter service in order to customize and adapt the services to the Customer's interests and preferences, as well as for promotional purposes and market studies. ORA srl archives the data collected, it being understood that such data will in any case be used solely for the purposes set forth in this policy.
IF YOU CONSULT INTERNET WEBSITES AND NEWSLETTERS: when the Customer visits sites owned by ORA srl (e.g. ), even by accessing it from a newsletter link, some data is collected and saved. Other data such as the date of access, the http response code and the website from which the redirection occurred (e.g. www.google.it) as well as the amount of data (bytes) that were transmitted may also be saved. Data analysis is done only in a strictly anonymous form. This process enables ORA srl to tailor the information contained in the offers to the interests of the newsletter subscribers. The Customer is free to stop receiving any communication free of charge by making a request by e-mail to [email protected].
SAVING PERSONAL DATA THROUGH COOKIES: It is not necessary to accept the use of cookies while browsing sites owned by ORA srl (e.g.: ) However, we inform the Customer that the use of the "shopping cart" function and the sending of any orders are only possible with the activation of cookies. On sites owned by ORA srl (e.g. ), cookies are used. Cookies are text files recorded on computer media that allow recording certain parameters and data communicated to the computer system of ORA srl through the browser used by the Customer and allow an analysis of his habits in the use of a particular website. This saving allows ORA srl to adapt its website to the Customer's needs and also facilitates its use. Many of the cookies used are automatically deleted from the hard disk of the Customer's computer at the end of each browsing session (hence the name "session cookies"). Instead, there are cookies that remain on the hard disk. Their permanence is quite long (a few years) for reasons of greater convenience. Having made an initial visit to the site, the system will be able to recognize on each subsequent visit that the Customer has already been to that site, and the Customer's favorite requests and data will therefore be retrieved (long-lived cookies). These cookies will allow the Customer not to have to re-enter his or her password and fill out forms each time he or she logs in again. Browsers generally restrict the use of cookies, despite the fact that they allow access to offers on sites owned by ORA srl (e.g.: more freely. Cookies can also be disabled. The Customer can refuse the installation of cookies by selecting the corresponding parameters in the specific browser options. It should be noted, however, that in this way the Customer will not be able to take full advantage of some functions of the site. The Customer consents to the registration of the user name and password in cookies after the closure of the browsing session and their activation at the time of the next visit. The Customer may revoke this permission at any time, affecting the future.
SECURE TRANSFER OF PERSONAL DATA: The Customer's personal data is transferred using SSL protection certificates. This applies to both browsing and placing purchase orders and to the Customer's confidential access to his/her account.
TRANSFER TO THIRD PARTIES OF YOUR PERSONAL DATA: In order to fulfill the purposes set forth in this Privacy Policy, it may be necessary for ORA srl to process your Personal Data to the extent that it is directly involved in each purpose (the activities of which cover the apparel, home goods as well as any other complementary sectors, in addition to the development and support for e-commerce activities). It may also be necessary to transfer your Personal Data to third parties who provide us with support services, such as financial institutions, entities that fight fraud, providers of technology, logistics, transportation and delivery services, customer support services and/or services that analyze transactions performed on the Platform for the purpose of providing users with sufficient guarantees in business transactions, etc. These entities are appointed as Data Processors or Processors and will therefore process the data in accordance with this Policy.
The Owner also states that Personal Data may be transferred to third parties for marketing and/or promotional purposes.
3) Method of processing and data retention period
Please note that you are free to provide your personal data for the purposes highlighted in the previous paragraph. Not providing your personal data for these purposes may mean that it will not be possible to handle your request in relation to that specific data processing.
The data will be processed in full compliance with the principles of confidentiality, fairness, necessity, relevance, lawfulness and transparency imposed by the Regulations for the time necessary to achieve the purposes for which the data were collected and in any case no longer than 10 years from their collection for the purposes of the Service or, in the case of the purchase of goods, for the time necessary for the execution of the contractual conditions relating to the coverage of the Legal guarantee. For the analysis of your consumption choices, where authorized by you, your purchases that have a historical depth of no more than 5 years will be examined.
4) Scope of communication and dissemination of data
In connection with the purposes stated in 1, data may be disclosed to the following parties:
(a) all entities to which the right of access to such data is recognized by virtue of regulatory measures, e.g., Police bodies and Public Administration in general;
(b) to our collaborators, employees, within the scope of their respective duties, who have been and commissioned and authorized to process the data you provide;
(c) to all those natural and/or legal, public and/or private persons when the communication is necessary or functional to ensure the legal obligations in the ways for the purposes outlined above
d) service providers who process personal data on behalf of ORA srl, for example, to process credit card and payment, shipping and delivery, host, to manage data, to send e-mails, text messages and other types of communication, for research and analysis, to manage product promotions, and to administer certain services. When we use third-party service providers, we enter into agreements that require them to take appropriate technical and organizational measures to protect personal data.
(e) Other third parties, where consent has been given.
5) Rights under Articles 15, 16, 17, 18, 20, 21 and 22 of EU REG. 2016/679
Reminding you that if we have obtained your consent for the processing of personal data, you have the right to revoke your consent at any time, we inform you that in your capacity as a Data Subject, you have, in addition to the right to lodge a complaint with a supervisory authority, the rights listed below, which you may assert by addressing an appropriate request to the Data Controller and/or the Data Processor, as indicated in Section 7.
Art. 15 - Right of Access
The data subject has the right to obtain confirmation from the data controller as to whether or not personal data concerning him or her are being processed, and if so, dio obtain access to the personal data and information regarding the processing.
Article 16 - Right of Rectification
The data subject has the right to obtain from the data controller the rectification of inaccurate personal data concerning him/her without undue delay. Taking into account the purposes of the processing, the data subject has the right to obtain the integration of incomplete personal data, including by providing a supplementary declaration.
Article 17 - Right to erasure (right to be forgotten).
The data subject has the right to obtain from the data controller the erasure of personal data concerning him or her without undue delay, and the data controller has the obligation to erase the personal data without undue delay.
Article 18 - Right to limitation of processing.
The data subject has the right to obtain from the data controller the restriction of processing when one of the following cases occurs.
(a) the data subject disputes the accuracy of personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
(b) the processing is unlawful and the data subject objects to the deletion of personal data and instead requests that their use be restricted;
(c) although the data controller no longer needs them for the purposes of processing, the personal data are necessary for the data subject to establish, exercise or defend a right in court;
(d) the data subject has objected to the processing under Article 21(1), pending verification as to whether the data controller's legitimate grounds prevail over those of the data subject.
Article 20 - Right to data portability.
The data subject shall have the right to receive in a structured, commonly used and machine-readable format personal data concerning him or her that have been provided to a data controller and shall have the right to transmit such data to another data controller without hindrance from the controller to whom he or she has provided them.
When exercising his or her rights regarding data portability under paragraph 1, the data subject has the right to obtain direct transmission of personal data from one data controller to another, if technically feasible.
Article 21 - Right of Opposition
The data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her under Article 6(1)(e) or (f), including profiling on the basis of these provisions.
Article 22 - Right not to be subjected to automated decision-making, including profiling
The data subject has the right not to be subjected to a decision based solely on automated processing, including profiling, that produces legal effects concerning him or her or that significantly affects him or her in a similar way.
6) Intention to transfer data abroad
Please note that your data may also be processed by IT service providers (e.g., providers and/or cloud computing) operating outside the European Union.
7) Treatment changes
If you wish to have more information about the processing of your personal data, or to exercise your rights under section 7 above, you may write to or call 0812131525.
Before we can provide or change any information to you, we may need to verify your identity and answer some questions.
A response will be provided as soon as possible and in any case within the limits of the law.
8) Changes to our privacy policy
Applicable law changes over time. Should we decide to update our privacy policy, we will post the changes on sites owned by ORA srl (e.g.: ) If we need to change the way we process personal information, we will provide notice, or where required by law, consent will be sought before implementing such changes. We strongly recommend that you read our Policy and keep informed about our policies.
The privacy policy was last modified on 5/24/2018.
Naples , 24/05/2018
ORA Ltd.