This privacy policy describes how the personal data of users who consult and use the website www.oublis.com are processed, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable national legislation.
The protection of personal data is an integral part of the professional responsibility of the firm.
-
Data Controller
The Data Controller is:
Chiara Domenighini
Registered office: Losine, 25050 Brescia
VAT number: 0390 0500 988
Email: info@oublis.com
2. Types of data collected
The following may be collected through the site:
• Identification data (name, surname)
• Contact data (email address, shipping address if applicable)
• Data necessary for managing purchases and consultations
• Technical navigation data (IP address, system logs, cookies)
Special categories of data as per Art. 9 of the GDPR are not processed, except for voluntary express communication by the data subject.
3. Purpose of processing
Personal data are processed for the following purposes:
• Responding to requests sent via the contact form
• Managing online and in-person consultations
• Fulfilling contractual obligations arising from the purchase of services or works
• Complying with administrative, tax, and accounting obligations
• Ensuring the correct technical functioning of the site
Data are not used for marketing purposes without explicit consent.
4. Processing methods
Processing is carried out using IT and electronic tools, in compliance with the principles of lawfulness, fairness, transparency, and data minimization.
Appropriate technical and organizational measures are adopted to ensure the security and confidentiality of information.
5. Legal basis for processing
Processing is based on:
• Performance of a contract or pre-contractual measures
• Fulfillment of legal obligations
• Consent of the data subject, where required
• Legitimate interest of the controller in managing the site and its services
6. Data retention
Personal data are retained for the time strictly necessary to achieve the purposes indicated above and in compliance with legal obligations.
7. Communication and data transfer
Data may be processed by technical service providers (e.g., Shopify platform, payment services, hosting) as data processors.
Data are not disseminated.
If data are transferred to non-EU countries, this will occur in compliance with the guarantees provided by the GDPR.
8. Data subject's rights
Data subjects may exercise their rights under Articles 15-22 of the GDPR at any time, including:
• Access to data
• Rectification
• Erasure
• Restriction of processing
• Objection
• Data portability
Requests can be sent to the email address indicated above.
Data subjects also have the right to lodge a complaint with the Italian Data Protection Authority.
9. Cookies
The site uses technical cookies necessary for its operation and, with prior consent, any analytical or third-party cookies.
For more information, please refer to the Cookie Policy