VBR Srl with registered office in Via Roberto Sevardi 8, Reggio Emilia (RE), Italy (hereafter referred to as “VBR” and/or the “Controller”) wishes to inform the users of its Website (hereafter referred to as “Users” or, in the singular, “User”) about the processing of the data provided by them, on a voluntary basis, during their registration on the website and/or within a contact request, through the relevant function available on www.omfb.com website (hereafter referred to as “Site”) and/or while sending a purchase order concerning VBR’s products, through the Site.
In particular, VBR informs the Users that, according to article 13 of the EU Regulation 2016/679 adopted by the European Parliament and Council on 27 April 2016 concerning the protection of natural persons with regard to the processing of personal data, as well as the free circulation of such data and that repeals the EC Directive 95/46/EC (hereafter referred to as the “GDPR”), the personal data provided to VBR can processed according to the terms and methods specified hereinbelow.
Any personal data, provided during the registration and/or a contact request and/or a purchase order submission through our Site, shall be processed for the following purposes:
a. to receive and manage the purchase orders sent through the Site;
b. administrative/accounting and fiscal purposes related to purchase orders;
c. to improve the services offered by means of the Site;
d. to inform the Users about the new VBR’s products, by means of access to the relevant reserved areas of the Site;
e. to send to the Users communications concerning the products and services offered by VBR, using the provided contact data.
Data processing shall be performed in compliance with the principles of necessity and relevance, by means of procedure which can also be automated, using methods and within the limits required to achieve the aforementioned purposes.
The processing is performed by paper and electronic means apt at guarantee data security and confidentiality and it can also be performed by means of automated tools aimed at saving, managing and transmitting such data.
The provision of the requested data is necessary to be able to access the Reserved Area of the Site and to view the catalogues of VBR’s products, as well as to send purchase orders for such products through the Site.
The data, within the Company’s activities, may be communicated:
a) to external consultants dealing with the accounting and/or fiscal aspects of the VBR’s business;
b) to external consultants appointed to perform particular processing on behalf of VBR, or for the protection of the Company’s rights;
c) to parent or subsidiary companies.
Data processing can be performed by those subject duly authorized and appointed thereto by means of specific appointment letters.
Personal data are stored in Italy. It is, however, understood that VBR, if required, may transfer the data abroad, also to extra-EU countries. In this case, the Controller hereby ensures that data will be transferred in compliance with the applicable law.
The Controller shall process personal data for the entire period required to achieve the aforementioned purposes, in accordance with the law.
The User is entitled to obtain from VBR confirmation of the processing of his/her personal data and, in this case, to obtain access to personal data and information provided for by article 15 of the GDPR.
Where applicable, the User as data subject, has also the rights set forth by articles 16-21 of the GDPR (right to rectification, right to erasure, right to restriction of processing, right to data portability, right to object), as well as the right to file a claim to the Data Protection Authority.
The User is entitled to withdraw his/her consent to the processing of data at any time without prejudice to the lawfulness of the processing based on the consent provided before its withdrawal, in accordance with the provisions of article 13, paragraph 2, letter c) of the GDPR.
VBR Srl, Via Masaccio, 17 - Reggio Emilia (RE), Tax Code and VAT number 09603980963. To exercise the rights provided for by article 15 of the GDPR, the data subject shall file a specific written request via email to the address firstname.lastname@example.org