The company ODIE UK LTD whose registered office is located in 7 Bell Yard, London, England, WC2A 2JR (hereinafter referred to as "Owner" or "ODIE), as the data controller, informs you, pursuant to the Regulations EU n. 2016/679 (later abbreviated to "GDPR") that your data will be used in the following ways and for the following purposes:

Object of the Treatment:

The Data Controller processes personal identification data (eg: name and surname, telephone number, email address, payment details) - hereinafter we will refer to these with the terms "personal data" or even "data" - communicated by you at the conclusion of each contract or if these data are required for the performance of a function requested by you (eg: filling in the contact form on the website).

Purpose of the processing

Your personal data will be used:

1. Without your express consent, as indicated in Article 6 lett. b), e) of the GDPR, for the following Service Purposes:

• Conclude contracts for the Controller's services;
• Fulfill the pre-contractual, contractual and tax obligations deriving from existing relationships with you;
• Fulfill the obligations established by law, by a regulation, by community legislation or by an order of the Authority (such as in the field of anti-money laundering);
• Exercise the rights of the owner, for example the right to defense in court;

2. Only with your specific and distinct consent (Article 7 of the GDPR), for the following communications via e-mail / post / telephone contacts / newsletter of:

• commercial communications and / or advertising material on products or services offered by the Data Controller and related benefits and incentives;
• detection of the degree of satisfaction with the quality of services;
• events, training courses and initiatives;

Methods of processing

The processing of your personal data is carried out by means of the operations indicated in Article 4 no. 2) GDPR and more precisely: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Your personal data are processed both in paper form and in electronic and / or automated form.

The Data Controller will process personal data for the time necessary to fulfill the aforementioned purposes and in any case for no more than 10 years from the termination of the relationship for the Service Purposes and for no more than 2 years from the collection of data for the Marketing Purposes.

Access to data

Your data may be made accessible, for the purposes referred to in point C., to employees and collaborators of the Data Controller, in their capacity as persons in charge and / or internal managers of the processing and / or system administrators.

Without the need for express consent, see Article 6 lett. b) and c) GDPR, the Data Controller may communicate your data for the purposes referred to in point B.1 to Supervisory Bodies, Judicial Authorities, insurance companies for the provision of insurance services, as well as to all subjects to whom the communication is required by law for the accomplishment of the aforementioned purposes. These subjects will process the data in their capacity as independent data controllers. Your data will not be disclosed.

Data transfer

Personal data is stored on servers located in Cormano (MI), within the European Union. In any case, it is understood that the Data Controller, where necessary, will have the right to move the servers even outside the EU. In this case, the Data Controller ensures, as of now, that the transfer of non-EU data will take place in accordance with the applicable legal provisions, subject to the stipulation of the standard contractual clauses provided for by the European Commission.

Nature of the provision of data and consequences of refusing to respond

The provision of data for the purposes referred to in point B.1 is mandatory. In their absence, we will not be able to guarantee the Services of point B.1.

The provision of data for the purposes referred to in point B.2 is optional. You can therefore decide not to provide any data or to deny, at a later time, the right to process data previously provided: in this case, you will not receive newsletters, commercial communications and advertising materials relating to the Services offered by the Data Controller. However, you will continue to be entitled to the Services referred to in point B.1.

Rights of the interested party

In your capacity as an interested party, you have the access rights referred to in Articles. 15-21 GDPR, ie right of access, right of rectification, right to cancellation ("right to be forgotten"), right to limitation of treatment, right to data portability, right of opposition, as well as the right to complain to the Authority Guarantor.

And precisely the rights of:

Obtain confirmation of the existence or not of personal data concerning you, even if not yet registered, and their communication in an intelligible form

Obtain the indication:

Of the origin of personal data

Of the purposes and methods of the processing

The logic applied in case of processing carried out with the aid of electronic tools

Of the identification details of the owner, of the managers and of the designated representative pursuant to Article 3, paragraph 1, of the GDPR

On the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as appointed representative in the State, managers or agents.

Get:

Updating, rectification or, when interested, integration of data

The cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those that do not need to be kept for the purposes for which the data were collected or subsequently processed

The attestation that the operations carried out have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment proves impossible or involves the use of means manifestly disproportionate to the protected right.

To object, totally or partially:

For legitimate reasons, the processing of personal data concerning you, even if pertinent to the purpose of the collection

To the processing of personal data concerning you for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication, through the use of automated call systems without the intervention of an operator through and -mail and / or through traditional marketing methods by telephone and / or paper mail. It should be noted that the data subject's right to object for direct marketing purposes through automated methods extends to traditional ones and that the possibility remains for the data subject to exercise the right to object even only partially. Therefore, the interested party can decide to receive only communications using traditional methods or only automated communications or neither of the two types of communication.

How to exercise rights

To exercise your rights, you can contact the data controller by sending:

a registered letter (round trip) to ODIE UK LTD, 7 Bell Yard, London, England, WC2A 2JR

Owner, manager and appointees

The Data Controller is ODIE UK LTD, 7 Bell Yard, London, England, WC2A 2JR.

The updated list of data processors and persons in charge of processing is kept at the registered office of the Data Controller.