Privacy Policy

This page contains information on the management methods of Otto srl with reference to the processing of its users' data.

This site otto.to.it, in reference to the applicable national legislation and the European Privacy Regulation n. 679/2016 ("GDPR"), respects and protects the privacy of visitors and users.

The treatments carried out by Otto srl are based on the principles of:

lawfulness, correctness and transparency of the treatment, towards the interested party;
limitation of the purpose of the processing, including the obligation to ensure that any subsequent processing is not incompatible with the purposes of data collection;
data minimization: that is, the data must be adequate, relevant and limited to what is necessary with respect to the purposes of the processing;
accuracy and updating of data, including the timely cancellation of those that are inaccurate with respect to the purposes of the processing;
provide for the storage of data for no longer than is necessary for the purposes for which the treatment was carried out;
guarantee the integrity and confidentiality of the personal data being processed.

The information is provided only for the otto.to.it site and not for other websites that may be consulted by the user through other links.

Navigation within the site is free and requires no registration.

Data controller authorized and responsible parties
By using the otto.to.it website, data relating to identified or identifiable persons may be processed to provide services with the aim of continuous improvement.

The data controller and data controller is Otto srl, based in Turin, Piazza Gran Madre di Dio 7, and can be contacted by sending an e-mail to the following address privacy@otto.to.it

Compliance with the rules on the protection of personal data is guaranteed by providing information on the processing of data communicated or otherwise collected during navigation on this site as follows:

The data provided may be processed by the Data Controller and by all its collaborators and / or employees.

The processing of the data collected is carried out by internal personnel of Otto srl for this purpose identified and authorized for processing in accordance with specific instructions issued in compliance with current legislation. The treatment is carried out guaranteeing its integrity, confidentiality and availability.

The data collected, if necessary or instrumental for the execution of the aforementioned purposes, may be communicated to external professionals and companies that process the data on behalf of the Data Controller for the execution of the services offered. For these reasons, pursuant to art. 28 of GDPR EU 679/2016, these subjects have been appointed as Data Processing Managers.

Third parties can be: banking operators, internet providers, companies that carry out transmission, enveloping, transport and sorting of communications to customers, companies specializing in IT and telematic services, companies that perform services related to supply, measurement and 'optimization of internet sites and communication campaigns via the Internet, survey companies such as: quality of services provided, customer satisfaction, new product offerings, etc.

The list of Data Processors is constantly updated and can be requested by sending a communication as follows: you can send a communication by registered letter addressed to: Otto srl, Piazza Gran Madre di Dio 7, 10131 Torino, or a mail to the address: privacy@otto.to.it

Minors of age
Otto srl does not process personal data relating to minors.

SSL encrypted protocol
All information sent on the Otto srl website is safeguarded and transmitted only through SSL encrypted protocol.

Credit cards
Otto srl does not register or store credit card information.

Processing methods and storage times
The data processing is carried out using IT and telematic tools and / or manually (for example on paper), according to the methods envisaged by the aforementioned GDPR for the time strictly necessary to achieve the purposes for which the data were collected and in any case , in compliance with the regulations in force on the subject. The processing is carried out directly by the owner's organization which adopts the appropriate security measures aimed at preventing unauthorized access, disclosure, modification or destruction of users' personal data. Individuals within the organization may be involved in accessing data (such as: sales staff, marketing personnel, administrative staff, lawyers, IT staff, etc.) and external parties (such as: postal couriers, transporters, internet service providers, IT companies, communication agencies, technical service providers, etc.).

These external parties may also be appointed, if necessary, Data Processors by the Data Controller.

The updated list of Data Processors may always be requested to the Data Controller by sending a request to the email privacy@otto.to.it

Rights of interested parties
The interested party, pursuant to the current GDPR EU 679/2016 Regulation has the right:

to have confirmation, in an intelligible and free way, of the existence or not of personal data concerning him at Otto srl;
to obtain the updating, rectification or, when interested, integration of the data;
to obtain the cancellation (oblivion), the transformation into anonymous form of the data;
to obtain the limitation of the treatment;
to oppose the processing for legitimate reasons or to the processing for the purpose of sending advertising material, direct sales, market research, commercial communications.

If desired, the interested party may request to receive personal data held by Otto srl concerning him in a format that can be read by electronic devices and, where technically possible, transfer his data directly to a third party indicated by him (portability).

To exercise the rights summarized above, you can contact the Data Controller directly, in the manner described by art. 9 of the Privacy Code. In particular, you can send a communication by registered letter addressed to: Otto srl via the email privacy@otto.to.it