Information pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 – WEB

By means of this document (“Information Notice”), the Data Controller, as defined below, wishes to inform you about the purposes and methods of the processing of your personal data and your rights under Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on their free movement (“GDPR”). This Information Notice may be supplemented by the Controller if any additional services requested by you involve further processing.

1. Data Controller and Data Processor, DPO : Oral Project
VAT:
Address and contact details: info@oralproject.it
The Data Controller and the DPO, also through the designated structures, will take charge of your request and provide you, without undue delay and, at the latest, within one month of receiving it, with information on the action taken with regard to your request.

We inform you that if the Controller has doubts as to the identity of the natural person submitting the request, it may request further information necessary to confirm the identity of the person concerned.

Stakeholder categories: Natural persons, legal persons, public and private organisations.

2. Treatments

2.1. WEB treatment

PROCESSING: WEB – NAVIGATION DATA

The computer systems and software procedures used to operate this website acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and computer environment. This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning, and is deleted after processing. The data could be used to ascertain liability in the event of hypothetical computer crimes against the site.

Nature of conferment: Mandatory

Consequences of refusal to provide data Failure to provide data will result in the company being unable to provide the web service provided.

Minimum data protection measures: to be indicated

Personal data retention period:

Your personal data will be actively processed for the duration of the first and third party analytical systems.

Basis of processing: The legal basis for registration on the Site and the provision of related services is the need to execute your request, in compliance with Article 6(1)(b) GDPR. It is therefore not necessary to obtain your prior consent for processing.

2.2. WEB treatment

PROCESSING: WEB – SENDING CURRICULUM VITAE

Through the “Work with us” section of the Site, you may provide your personal data and CV to the Controller in order to apply for open positions or possible future positions. Your personal data are processed exclusively for the handling of your application and related activities.

Nature of conferment: Mandatory

Consequences of refusal to provide data Failure to provide consent will make it impossible for the Data Controller to receive your Curriculum Vitae and carry out the activities aimed at managing your application.

Minimum data protection measures: password, firewall, antivirus, reCAPTCHA

Personal data retention period: Your personal data processed for the purpose of managing your CV will be retained for N months after receipt or unsuccessful selection, in order to be able to consider you for possible future positions.

Basis of processing: The legal basis for registration on the Site and the provision of related services is the need to execute your request, in compliance with Article 6(1)(b) GDPR. It is therefore not necessary to obtain your prior consent for processing.

Types of data processed:

Category Type
common data Professional Curriculum Vitae
common biographical data

2.3. WEB treatment

TREATMENT: WEB – COMMERCIAL NEWSLETTERS

Should you wish to be kept up-to-date on the latest products and services offered by the Data Controller or by third party companies, you will be able to join our marketing initiatives by allowing the Data Controller to send you the newsletter and further commercial communications.

Nature of conferment: Optional

Consequences of refusal to provide data Failure to provide data will not affect the fulfilment of your requests or the use of web services, but will make it impossible for the Data Controller to send you commercial communications.

Minimum data protection measures: password, firewall, antivirus, reCAPTCHA

Personal data retention period: Your personal data will be actively processed for as long as necessary for the management of the existing relationship and/or the execution of the contract. The information collected for the evaluation of the conclusion of the contract will be deleted within N months if it is not finalised.

2.4. WEB treatment

TREATMENT: WEB – NEWSLETTER USE OF SERVICE

Should you wish to be kept up to date with the latest news on the products and services offered by the Controller, you will be able to join our marketing initiatives by allowing the Controller to send you the newsletter and further commercial communications.

Nature of conferment: Optional

Consequences of refusal to provide data Failure to provide data will not affect the fulfilment of your requests or the use of web services, but will make it impossible for the Data Controller to send you commercial communications.

Minimum data protection measures: password, firewall, antivirus, reCAPTCHA

Personal data retention period: Your personal data will be processed until you decide to revoke your consent or object to processing.
Basis of processing: The legal basis for registration on the Site and the provision of related services is the need to execute your request, in compliance with Article 6(1)(b) GDPR. It is therefore not necessary to obtain your prior consent for processing.

2.5. WEB treatment
PROCESSING: WEB – REQUESTS MADE THROUGH THE SITE
Your personal data may be processed by the Controller to fulfil your requests made by writing to one of the e-mail addresses available on the Site or by filling in the registration and/or contact forms on the Site.
Nature of conferment: Mandatory
Consequences of refusal to provide data Failure to provide the requested data will make it impossible for the Controller to execute your request.
Minimum data protection measures: password, firewall, antivirus, reCAPTCHA
Storage period of personal data: The data collected for this purpose will be processed for the time strictly necessary to fulfil your request and then stored for 10 years after the request has been processed.
Reference Standards of the Processing: The legal basis of the processing is the need to execute your request, in compliance with Article 6(1)(b) GDPR. It is therefore not necessary to obtain your prior consent for processing.

3. Cookies Policy:

3.1. Extended Cookie Policy:

On this site we use technology to collect information to improve your online experience.

This policy refers to the use of cookies and how to manage them.

We reserve the right to amend this policy at any time.

Any change in this policy shall take effect from the date of its publication on the Site.

Cookies are small text strings that sites visited by the user send to the user’s terminal (usually to the browser), where they are stored and then retransmitted to the same sites the next time the same user visits.

In the course of browsing a site, the user may also receive on his terminal equipment cookies that are sent by different sites or web servers (so-called ‘third parties’), on which some elements (such as, for example, images, maps, sounds, specific links to pages of other domains) present on the site he is visiting may reside.

Cookies, which are usually present in users’ browsers in very large numbers and sometimes with characteristics of wide temporal persistence, are used for different purposes: performing computer authentication, session monitoring, storing information on specific configurations concerning users accessing the server, etc.

In order to arrive at a correct regulation of these devices, it is necessary to distinguish them since there are no technical characteristics that differentiate them from one another precisely on the basis of the purposes pursued by those who use them.

– First-party, technical (session) persistent cookies
Technical cookies are those used for the sole purpose of ‘carrying out the transmission of a communication over an electronic communications network, or to the extent strictly necessary for the provider of a web service explicitly requested by the user to provide such a service’. They are not used for any further purposes and are normally installed directly by the owner or operator of the website. They can be subdivided into navigation or session cookies, which ensure normal navigation and use of the website (allowing, for example, to make a purchase or authenticate to access restricted areas). This site makes use of first-party persistent technical session cookies.

– First-party, analytical cookies
Analytical cookies, also referred to as ‘analytics’, allow detailed statistics to be compiled on visitors to a website, such as the viewing of certain pages, the number of visitors, the time spent on the site by users, and how they arrive. Analytics cookies are assimilated to technical cookies where they are used directly by the site operator to collect information in aggregate form on the number of users and how they visit the site. This site makes use of first-party analytical cookies.
– First-party, profiling cookies

Profiling cookies are aimed at creating profiles of the user and are used to send advertising messages in line with the preferences expressed by the user when surfing the web. Due to the particular invasiveness that such devices can have in the private sphere of users. This site may share this information with other parties, such as advertisers. Under European and Italian law, you may refuse consent to the use of such cookies. This site uses FIRST-PART, profiling cookies.

– Third-party, analytical cookies

Analytical cookies, also referred to as ‘analytics’, allow detailed statistics to be compiled on visitors to a website, such as the viewing of certain pages, the number of visitors, the time spent on the site by users, and how they arrive. This site makes use of a web analytics service provided by Google.

– THIRD-PARTY, profiling cookies

In order to provide you with additional features and services within this site, we work with third parties who, independently and outside our direct control, may use their cookies to collect information about your activities while browsing the pages of this site. This information may be used to serve you advertisements in line with your interests, based on the content you visit, or to measure the effectiveness of advertising campaigns. Such cookies could be contained in various elements on the web page, such as advertising banners, images, videos, etc. A sensitive example is the presence of so-called ‘social plug-ins’ or ‘social sharing buttons’ of the main social networks (Facebook, Twitter, Google+ and LinkedIn), aimed at sharing the content of the web page on the social networks themselves. The use of data collected via third-party cookies, over which we have no control whatsoever, is governed by the relevant policies, which we ask you to refer to. This site makes use of THIRD-PARTY, profiling cookies.

Cookie Management

Below is a list of the most common browsers with links to their cookie management settings:
– Internet Explorer 8 and higher
– Safari 2 or higher;
• Opera 10.5 or higher;
• FireFox 3.5 or higher;
• Google Chrome 10 or higher;

Browsers provide a ‘private’ browsing mode, by activating which cookies are always deleted after closing each browsing session.
Secondly, you can disable third-party profiling cookies by visiting http://www.youronlinechoices.com.

You can also disable Google Analytics cookies by downloading the Google Analytics opt-out browser add-on at the following web address: https://tools.google.com/dlpage/gaoptout.

Third Party Cookie Policy

Cookie Policy Facebook https://it-it.facebook.com/policies/cookies/
Cookie Policy Google https://www.google.it/intl/it/policies/technologies/cookies/
Cookie Policy Google https://www.linkedin.com/legal/cookie-policy
Cookie Policy Twitter https://twitter.com/it/privacy

Cookie consent

By continuing navigation from the banner containing the so-called short information, by scrolling down this page or by clicking on any of its elements, you consent to the use of the cookies used on this website by accepting the cookie policy described above.

You may always revoke your previously given consent by the means indicated in the section entitled “COOKIE MANAGEMENT”.

3.2. List of Web Services:

Type Service Description
Comment management Application commenting system
Landing Page Instapage
Social Media Buttons and WidGet +1 button and Google+ widget
Social Media Buttons and WidGet Linkedin Button and WidGet
Social Media Buttons and WidGet YouTube button and widget
Social Media Buttons and WidGet Social Media Like Button and Facebook Widget
Social Media Tweet Button and Twitter Widget
Data collection, contact with users Mailing list or newsletter
Data collection, contacting users Generic contact form
Registration and Authentication Registration with Module
Remarketing, behavioural advertising (Behavioral Marketing) Facebook Remarketing
Remarketing, behavioural advertising (Behavioural Marketing) Google Analytics Remarketing
Google reCAPTCHA Anti Spam Services
Hosted Services and Backup Management WordPress.com
Software di marketing via e-mail MailChimp
Software email marketing MailUp
Statistics, Performance Google Analytics with anonymised IP
Statistics, Performance Google Tag Manager
Statistics, Performance Hotjar Heat Maps & Recordings
Statistics, Performance Record conversion of Facebook Ads
Statistics, Performance Record conversion of Google AdWords
Support, Chat, Ticket Widget of Olark
WidGet MailChimp widget

4. What rights do you have as a data subject:

In relation to the processing operations described in this Information Notice, as a data subject you may, as provided for in European Regulation 679/2016, exercise your rights as set out in Articles 15 to 21 and, in particular:

– Right of access – Article 15 GDPR: the right to obtain confirmation as to whether or not personal data concerning you are being processed and, if so, to obtain access to your personal data, including a copy thereof.
– Right of rectification – Article 16 GDPR: the right to obtain, without undue delay, the rectification of inaccurate personal data concerning you and/or the integration of incomplete personal data;
– Right to erasure (right to be forgotten) – Article 17 GDPR: right to obtain, without undue delay, the deletion of personal data concerning you.
– Right to restriction of processing – Article 18 GDPR: right to obtain restriction of processing when:
1. the data subject contests the accuracy of personal data, for the period necessary for the data controller to verify the accuracy of such data;
2. the processing is unlawful and the data subject objects to the deletion of the personal data and requests instead that their use be restricted;
3. personal data are necessary for the establishment, exercise or defence of a legal claim;
4. the data subject has objected to the processing pursuant to Art. 21 GDPR, during the period pending verification as to whether the data controller’s legitimate reasons prevail over those of the data subject.
– Right to data portability – Article 20 GDPR: the right to receive, in a structured, commonly used and machine-readable format, the personal data concerning you provided to the Controller and the right to transmit them to another controller without hindrance, where the processing is based on consent and is carried out by automated means. In addition, the right to have your personal data transmitted directly from the Bank to another data controller if this is technically feasible;
– Right to object – Article 21 GDPR: the right to object at any time on grounds relating to your particular situation to the processing of personal data concerning you based on the lawful condition of legitimate interest or the performance of a task carried out in the public interest or in the exercise of official authority, including profiling, unless there are legitimate grounds for the Controller to continue the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims; may object at any time to the processing if personal data are processed for direct marketing purposes, including profiling, insofar as it is related to such direct marketing;
The above-mentioned rights may be exercised vis-à-vis the Controller by contacting the above-mentioned references.
The exercise of your rights as a data subject is free of charge pursuant to Article 12 GDPR. However, in the case of requests that are manifestly unfounded or excessive, including by reason of their repetitiveness, the Controller may charge you a reasonable fee, in the light of the administrative costs incurred in dealing with your request, or deny satisfaction of your request.

– RIGHT OF REVOCATION:

The data subject has the right to revoke his or her consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before withdrawal.

– RIGHT TO COMPLAIN:

The person concerned has the right to lodge a complaint with the Italian Data Protection Authority, Piazza di Montecitorio no. 121, 00186, Roma (RM).

I hereby declare that I have received from the Data Controller the information on the use of my personal data and that I consent, in accordance with the privacy legislation, to the processing by the same of the special categories of personal data I have provided for the performance of the activities necessary for the activation and management of the relations, operations and services I have requested.

Date: 04/10/2023