Opstart S.r.l. in its capacity of Data Controller with regard to the processing of your personal data pursuant to (EU) Reg. 2016/679 (hereinafter the 'GDPR'), hereby informs you that the said regulation protects data subjects with regard to the processing of their personal data and that the said processing will take place in a fair, lawful, transparent manner which protects your privacy and your rights. Your personal data will be processed in accordance with the terms of the above legal provisions and the confidentiality obligations contained therein.
PURPOSES AND LEGAL BASIS OF PROCESSING: specifically, your data will be processed for the following purposes, relating to the fulfilment of legal or contractual obligations: purposes of statistical research/analysis on aggregate or anonymous data, without therefore the possibility of identifying the user, aimed at measuring the operation of the Web Site, measuring traffic and assessing usability and interest. Your data will also be used for the following purposes related to the execution of measures related to contractual or pre-contractual obligations: purposes related to the execution of a contract to which you are a party or to the execution of pre-contractual measures taken at your request (ex: request contact through the form "Contacts" or registration request via the "Register" form etc.) registration to the site will allow access, with the same credentials, to all other platforms owned by Opstart S.r.l.; purposes necessary to ascertain, exercise or defend a right in a court of law or whenever judicial authorities exercise their jurisdictional functions; purposes of evolved navigation or personalized content management.
PROCESSING PROCEDURES: your personal data may be processed by the following ways: using electronic calculators running self-managed software or directly engineered; using electronic calculators running software managed by third parties; temporary treatment in anonymous form. All data are processed in compliance with the procedures specified in Articles 6 and 32 of the GDPR and with the adoption of the appropriate security measures required.
DATA PROCESSORS: your data will only be processed by staff specifically authorized by the Data Controller, and specifically by the following categories of staff: programmers and analysts; administration office; commercial office.
COMUNICAZIONE DEI DATI: i suoi dati potranno essere comunicati a soggetti esterni per una corretta gestione del rapporto ed in particolare alle seguenti categorie di destinatari tra cui tutti i responsabili del trattamento debitamente nominati: soggetti necessari per l’erogazione dei servizi offerti quali, a titolo esemplificativo, l’invio di e-mail e comunicazioni e l’analisi del funzionamento del Sito Web, che agiscono tipicamente in qualità di responsabili del trattamento di Opstart S.r.l.; i Suoi dati sono raccolti anche mediante strumenti e servizi erogati da terze parti e conservati da loro (vedi Cookie Policy).
Subject to your explicit consent, your data may be disclosed to the offering companies for which you have expressed interest or requested information.
DISTRIBUTION: your personal data will not be distributed in any way.
DATA TRANSFER: some of your Personal Data is transferred to Recipients who may be located outside the European Economic Area. E-Coperation S.r.l. ensures that the electronic and paper-based processing of your personal data by Recipients is carried out in compliance with the applicable law. Transfers are based alternatively on an adequacy decision or on standard model clauses approved by the European Commission.
DATA STORAGE PERIOD: in accordance with the principles of lawfulness, limitation of purpose and minimization of data, pursuant to Art. 5 of the GDPR, the data storage period for your personal data is established as a period of time not exceeding the purposes for which the data were collected and processed and complying with the compulsory times required by law.
COOKIE MANAGEMENT: if you have any doubts or concerns about the use of cookies, you can always take steps to prevent them from being set and read, for example by changing the privacy settings in your browser to block certain types of cookies. Because every browser - and often different versions of the same browser - differ considerably from one another, if you prefer to act preferences of your browser, you can find detailed information on how to do this in the help section of your browser. For an overview of how to do this for the most common browsers can be found at www.cookiepedia.co.uk. Advertising companies also allow you to opt out of receiving targeted ads if you wish. This does not prevent cookies from being set, but it does it does stop the use and collection of certain data by those companies. For more information and opt-out options, please visit www.youronlinechoices.eu/.
ACCOUNT DATA ON OTHER SERVICES: Opstart S.r.l. may obtain certain information through your social media accounts or your other online accounts, if they are connected to your Crowdbond account. If you access Crowdbond through Facebook, Google or another third-party platform or service, you authorize Opstart S.r.l. to access certain information on the other account in question. For example, depending on the platform or service, we may collect your name, your profile picture, your account ID number, the email address used to log in, your location, the physical location of your access devices, your gender, your date of birth, your list of friends or contacts etc. These platforms and services allow you to access this information through the APIs they use. The information we receive depends on the information that you (through your settings and/or privacy permissions), the platform or service decide to provide to us. If you access or use the Services offered by Opstart S.r.l. through a third-party platform or service, or if you click on third-party links, the collection, use and sharing of your data will also be subject to the privacy policies and other agreements entered into with the third parties in question.
DATA CONTROLLER: Opstart S.r.l. (VAT 04067590168) with registered office in Largo Adua n. 1, 24128 - Bergamo (BG).
RIGHTS OF THE DATA SUBJECT: you have the right to obtain from the owner the cancellation (right to be forgotten), the limitation, the updating, the rectification, the portability, the opposition to the processing of personal data concerning you, as well as in general you can exercise all the rights provided by Articles. 15, 16, 17, 18, 19, 20, 21, 22 of the GDPR. You are entitled, by application to the Data Controller, to obtain the erasure (right to be forgotten), restriction, updating, rectification and portability of your personal data, to object to their processing, and in general to exercise all your rights under articles 15, 16, 17, 18, 19, 20, 21 and 22 of the GDPR. The data subject has the right to obtain confirmation as to whether or not personal data concerning him or her exist, regardless of their being already recorded, and disclosure of such data in intelligible form, and the right to lodge a complaint with the supervisory Authority.
The data subject has the right to be informed of: the source of the personal data; the purposes and methods of processing; the logic applied if the data are processed by electronic devices; the identification data concerning the Data Controller, the Data Processors and the representative designated as per Article 5.2; the entities or categories of entity to whom or which the personal data may be disclosed and who or which may get to know said data as designated representative in the State's territory, as data processors or as persons in charge of the processing.
The data subject is entitled to obtain: a) the updating, rectification or, where interested therein, integration of the data; b) the erasure, anonymization or blocking of data that have been unlawfully processed, including data whose retention is not necessary for the purposes for which they were collected or subsequently processed; certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were disclosed or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared to the right that is to be protected; the portability of the data.
The data subject has the right to object, in whole or in part: on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection; to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.
Update 1/2022