pursuant to Regulation (EU) 2016/679 (hereinafter “GDPR”), Leg. 196/2003 subsequent to amendments and the Guidelines of the Italian Personal Data Protection Authority of 10 June 2021

FOREWORD

With this information notice, OMAL SPA Società Benefit (hereinafter also referred to as "OMAL SPA") intends to illustrate the methods of management of its website, which is accessible electronically at the web address www.omal.it (hereinafter also referred to as the "website"), with particular reference to the purposes and methods by which the personal data of the users consulting it are collected, recorded and used.
This information does not concern other sites, pages or online services that can be reached via hypertext links that may be published on the site but which refer to resources outside the entity's domain.

1. The personal data being processed
In its capacity as Data Controller, OMAL SPA collects:

a. Browsing data
The computer systems and software used to operate the website acquire certain personal data during browsing, the transmission of which is implicit in the use of network communication protocols.
In particular, this category of data includes IP addresses (a digital label that uniquely identifies a “host” device connected to a computer network using the Internet Protocol) or the domain names of the computers used by users connecting to the site and, more generally, other parameters relating to the user's operating system and computer environment.
b. Data provided directly by the data subject
The optional, explicit and voluntary sending of messages to the contact addresses, as well as the filling in and forwarding of forms on the Controller's website, entails the acquisition of the sender's contact data, which are necessary to reply, as well as all personal data included in the communications. Specific information is provided on the pages of the Site in relation to particular services or the processing of the Data provided.
c. Cookies and other tracking systems
The website uses different types of cookies, which are small text files sent by the site to the computer of the data subject (usually the browser), where they are stored and then transmitted back to the site the next time the same user visits. Cookies can be used to record information about your preferences, such as the pages you browse or the downloading of files from our site or other similar actions taken while browsing.
There are different types of cookies:
(i) Technical cookies
Technical cookies are necessary to enable browsing on the site and its proper functioning.
They are not used for any further purposes and are normally installed directly by the owner or operator of the website. They can be subdivided into
(i.i) Browsing or session cookies, which ensure normal browsing and use of the website and are in fact necessary for the website to function properly (allowing, for example, a purchase to be made or authentication to access restricted areas);
(i.ii) Analytics cookies, assimilated to technical cookies where used directly by the site operator to collect information, in aggregate form, on the number of users and how they visit the site, in order to improve the site's performance.
(i.iii) Functionality cookies, which allow the user to browse according to a set of selected criteria (e.g. language, products selected for purchase) in order to improve the service provided.
(ii) Profiling cookies 
Profiling cookies aim to collect information about the user in order to customise the online experience and they are used to send advertising messages in line with the preferences expressed by the user while browsing the web.
(iii) First or third-party cookies
Cookies may be first or third party, where “first party” means cookies installed by the site owner, and “third party” means cookies installed by third parties other than the site owners.
(i.iv) Cookie duration
Cookies have a lifetime dictated by the expiry date (or a specific action such as closing the browser) set at the time of installation. Cookies can be:
(i.iv.i.) Temporary or session cookies: used to store temporary information and allow actions performed during a specific session to be linked. They are removed when the browser is closed.
(i.iv.ii) Persistent cookies: used to store information such as login name and password so that the user does not have to type them in again each time the specific site is accessed. These remain stored on the computer even after the browser is closed.
 For more information about the cookies used by the website, please see the cookie policy below.

2. Legal basis and purpose of processing
2.1 The processing of the data referred to in point (a) is based on the legitimate interest of the Data Controller (Art. 6(f) of the GDPR and Recital 47) and aims to enable the operation of the site and the provision of the browsing service on the platform, as well as monitor the proper functioning of the services offered.
2.2. For the processing of data under (b), please consult the specific information on the site.
2.3. For the processing of data under (c), please consult the cookie policy below.

3. Compulsory supply of browsing data
3.1. The provision of the data referred to in point (a) above for the aforementioned purposes is optional. However, failure to provide this data may affect browsing on this site.
3.2. For the provision of the data under (b) and (c), please refer to the respective information.

4. Scope of data communication
4.1. Data of a personal nature collected will be processed exclusively by:
a. persons specifically appointed by the Data Controller for the purposes listed above;
b. persons who will process the personal data in their capacity as data processors and, in particular, by TIMMAGINE S.r.l. for the fulfilment of their tasks.
4.2. Web hosting is based in Italy.

5. Data transfer abroad
5.1. Personal data are stored on servers located in Italy. It is in any case understood that the Controller will be entitled to move the servers outside the EU, if necessary. In this case, the Data Controller hereby ensures that the transfer of data outside the EU will take place in accordance with the applicable legal provisions and in particular those set out in Title V of the GDPR.
5.2. Other than in the cases referred to in Section 5.1. above, data will not be transferred outside the EU.

6. Data retention period
6.1. The personal data referred to in point (a) will be kept for the time strictly necessary to achieve the purposes for which they are processed and in any case in compliance with the principles of minimisation and limitation of storage referred to in Article 5.1(e) of the GDPR.
6.2. For the retention period of the data referred to in (b) and (c), please refer to the specific information above.

7. Data Controller
OMAL SPA Società Benefit
Via Ponte Nuovo 11
25050 – Rodengo Saiano (BS)
Certified email: omal@legalmail.it

8. Data Protection Officer
OMAL SPA has appointed a Data Protection Officer who can be contacted at the following address: dpo@omal.it;

9. Rights of the data subject
You may know the data concerning you at any time, find out how they were acquired, check whether they are accurate, complete, up-to-date and well kept, and ask for them to be corrected or deleted in accordance with Articles 16 and 17 of the GDPR. You shall also have the right to receive the personal data you have provided and which were processed with your consent, in a structured, commonly used and machine-readable format, and to revoke any consent you may have given regarding the processing of your data at any time. Pursuant to Art. 21 of the GDPR, you will have the right to object, in whole or in part, to the processing of your data on grounds relating to your particular situation; if the data is processed for direct marketing purposes, you will have the right to object to its processing for that purpose at any time.
These rights may be exercised by means of a specific request to be addressed by registered letter or registered email to the Data Controller.
You also have the right to lodge a complaint with the Personal Data Protection Authority.


Cookie policy


COOKIES INSTALLED ON THIS SITE

Technical cookies

The Data Controller makes use of technical cookies that enable browsing on the site and its proper functioning.
The use of these cookies does not require the consent of the data subject.
For this reason, the use of technical cookies will be the default setting selected by users who press the “disable cookies” button.

List of technical cookies used by the site:

Analytical cookies

The Controller makes use of cookies that detect the browsing path taken by site users by recording how visitors interact with the site.
For the use of “first party” analytical cookies, the Data Controller does not require the consent of the data subject. The same applies to analytical cookies installed by “third parties” (e.g. partners authorised by the Data Controller) if the data are anonymised; if the user's data are not anonymised, the user's consent is required. The failure to provide it does not compromise user experience on the Site in any way.
Consent is given by the user either through the “Accept” command or by entering the “choose and customise” section in the banner and selecting Analytics

List of analytical cookies used by the Site:

Cookie	Domain of origin of the cookie	Description	Duration
_ga_*	omal.com	Google Analytics sets this cookie to store and count page views.	1 year 1 month and 4 days
_ga	omal.com	the _ga cookie, installed by Google Analytics, calculates visitor, session and campaign data and tracks site usage for the site's analytical report. The cookie stores information anonymously and assigns a randomly generated number to recognise unique visitors.	1 year 1 month and 4 days

Preferences can be changed at any time by clicking on the label at the bottom of the webpages.
All analytical cookies can be deleted from your device by following the instructions in the appropriate section of this notice.

Profiling cookies

These are cookies that collect information about the user to personalise their online experience (e.g. through personalised advertising).
This site does not use profiling cookies.

Social network buttons

Social buttons are the buttons on a website which depict the icons of social networks (e.g. LinkedIn, YouTube and Facebook) that allow direct interaction with social networks with a click.
In particular, the social buttons on this site are links to OMAL's accounts on the social networks depicted. No third-party cookies are installed on the site with the use of these buttons.
Nevertheless, we provide links where the user can view the data management privacy policy of the social networks to which the buttons refer:
LINKEDIN: https://it.linkedin.com/legal/cookie-policy?;
YOUTUBE: https://policies.google.com/technologies/cookies?hl=it;
FACEBOOK: https://it-it.facebook.com/policies/cookies/;

COOKIE MANAGEMENT
Cookies on the site can be deactivated by downloading the appropriate Ghostery software (https://www.ghostery.com/en/try-us/download-add-on/) for your browser and disabling the use of individual cookies. You can also activate the “incognito browsing” mode. This function allows you to browse without leaving a trace of your browsing data in the browser. This function only makes it possible not to retain browsing data in the browser.
Alternatively, you can disable/delete cookies by accessing your browser’s settings. Links to the settings of some well-known browsers can be found below



COOKIE WAIVER 
You will always be able to remove these cookies at any time via the methods mentioned.