Information on the processing of personal data pursuant to Art. 13 of Reg. EU 2016/679 ("GDPR")

Specific summary notices are progressively reported or displayed on the pages of the site prepared for particular services on request that include forms for data collection.

We also inform you that, to provide a complete service, our site may contain links to other websites not managed by the Controller Oximet srl, headquartered in Sassuolo (MO), Viale Regina Pacis 200, info@oximet.it, tel. 0536800801. Oximet srl is not responsible for errors, content, cookies, unlawful moral content, advertising, banners, or files not compliant with current regulations, nor for compliance with privacy regulations by sites not managed by Oximet srl.

Data subjects: users of the website www.oximet.it.

As Data Controller of your personal data under Regulation (EU) 2016/679, Oximet srl informs you that the Regulation provides for the protection of individuals and other subjects with respect to the processing of personal data, and that such processing will be based on principles of fairness, lawfulness, transparency, and protection of your confidentiality and rights.

The information and personal data you provide or otherwise acquired in the context of using the site will be processed in accordance with the legislative provisions of the Regulation and confidentiality obligations.

Types of Data Processed

a) Browsing data The IT systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category includes IP addresses or domain names of computers used by users connecting to the site, URI (Uniform Resource Identifier) addresses of requested resources, time of request, method used to submit the request to the server, size of the file obtained, etc. These data are used solely to obtain anonymous and aggregated statistical information on site usage and to check its proper functioning and are stored permanently on third-party servers (hosting providers). The data may be used to ascertain responsibility in case of hypothetical computer crimes against the site.

b) Cookies The website uses cookies to help users speed up navigation, increase security, and analyze the use and efficiency of services. For more information, see the Cookie Policy.

Purposes of Processing

Your data collected during navigation will be processed for the following purposes:

1. Carrying out operations strictly connected and instrumental to managing relations with users or visitors of the site.
2. Collecting, storing, and processing your data for statistical analysis, even in anonymous and/or aggregated form.

Processing for purpose 1 is mandatory; failure to provide, or incorrect provision of, information may limit or prevent full use of the site’s features and services. Providing data for purpose 2 is optional, but refusal may compromise visitor requests (see Cookie Policy for more details). The Data Protection Authority has clarified that explicit consent for such cookies is not required, but visitors may disable them at any time as described in the Cookie Policy (browser settings, anonymous browsing, etc.).

Personal Data Voluntarily Provided by the User

The optional, explicit, and voluntary sending of emails to addresses indicated on this site and the completion of forms entails the subsequent acquisition of the sender’s personal data (e.g., name, surname, email address). Specific summary notices are provided on pages with forms.

Processing Methods

Personal data are processed with manual and electronic tools, including cookies, for the time strictly necessary to achieve the purposes for which they were collected. Each processing operation complies with Regulation (EU) 2016/679, adopting technical and organizational security measures to ensure confidentiality, integrity, and availability of data, as required by Article 32 of the Regulation. Processing related to web services takes place at the Controller’s headquarters and at the external Provider, where servers are located.

Communication

Your data are processed within the company by the following categories of authorized personnel appointed by the Controller:
• Customer service staff

Your data may be communicated to third parties, in particular:
• Companies performing ordinary and extraordinary maintenance of the website
• Companies providing third-party cookie services

Disclosure

Your data will not be disclosed.

Third Parties

Your data are also collected through tools and services provided by third parties and stored by them. Please note that this site uses WpStatistics, plugin that works in local and doesn’t share data with third party, and functions allowing cross-referencing of information by the third party have been disabled. For more information, see the Cookie Policy.

Application of this Notice

If you have questions about this Privacy Notice, please contact Oximet srl by email at info@oximet.it. A Data Protection Officer has been appointed and can be contacted at: avv.daniela.guidi@gmail.com.

Changes to this Notice

Oximet srl reserves the right to update this notice to comply with new laws and to take into account suggestions from employees, clients, collaborators, and users. In case of changes, the word “update” will appear next to the “Website Privacy Notice” link on the main privacy page of www.oximet.it. In case of substantial changes, Oximet srl will publish them visibly.

Regulation (EU) 2016/679: Articles 15–22 – Rights of the Data Subject

1. The data subject has the right to obtain confirmation of the existence or non-existence of personal data concerning them, even if not yet recorded, their communication in intelligible form, and the possibility to lodge a complaint with the Supervisory Authority.

2. The data subject has the right to obtain information on:
a. the origin of personal data;
b. the purposes and methods of processing;
c. the logic applied in case of processing carried out with electronic tools;
d. the identifying details of the controller, processors, and representative designated under Article 5(2);
e. the subjects or categories of subjects to whom personal data may be communicated or who may become aware of them as designated representative, processors, or persons in charge.

3. The data subject has the right to obtain:
a. the updating, rectification, or, when interested, integration of data;
b. the erasure, anonymization, or blocking of data processed unlawfully, including those whose retention is unnecessary for the purposes for which they were collected or subsequently processed;
c. certification that the operations referred to in letters a) and b) have been notified, including their content, to those to whom the data were communicated or disclosed, except where this proves impossible or involves disproportionate effort compared to the protected right;
d. data portability.

4. The data subject has the right to object, in whole or in part:
a. for legitimate reasons, to the processing of personal data concerning them, even if relevant to the purpose of collection;
b. to the processing of personal data concerning them for purposes of sending advertising material or direct sales, or for carrying out market research or commercial communication.