Website Privacy Policy
(art. 13 of EU Regulation 2016/679 – “GDPR”) · Version 1.0 of July 10, 2026
This privacy notice explains how the personal data of users who visit the website www.nuovaosba.it or contact the Company using the contact details provided on the website are processed. Information regarding cookies and other tracking technologies is available in the Company's Cookie Policy.
1. Data Controller and DPO
The Data Controller is NUOVA OSBA S.r.l., with registered office at Via Stazione 84, 36070 Trissino (VI), Italy, Tax Code and VAT No. 04280220247. The Company may be contacted at privacy@nuovaosba.it.
The Company has appointed Attorney Domenico Vispo as its Data Protection Officer (DPO). The DPO may be contacted at dpo@nuovaosba.it.
2. Personal Data Collected
When accessing and using the website, the following categories of personal data may be processed:
- technical and browsing data, including IP address, date and time of requests, pages visited, browser and device information, and system and security logs;
- personal data voluntarily provided by users, such as name, contact details and the contents of communications sent to the e-mail addresses published on the website;
- data collected through cookies and similar technologies, as described in the Cookie Policy.
3. Purposes and Legal Bases for Processing
- to ensure the proper functioning of the website, maintain its security, prevent misuse and detect technical issues. Legal basis: the Company’s legitimate interest.
- to respond to requests, enquiries or other communications submitted by users. Legal basis: the implementation of pre-contractual measures requested by the data subject and/or the Company's legitimate interest in managing communications.
- to comply with applicable legal obligations and, where necessary, to establish, exercise or defend legal claims. Legal basis: compliance with a legal obligation and/or the Company's legitimate interest.
Any processing activities carried out through non-essential cookies are based on the user’s consent, where required, in accordance with the Cookie Policy.
4. Methods of Processing and Provision of Data
Personal data are processed using electronic and, where necessary, paper-based means in accordance with the principles of lawfulness, fairness, transparency, data minimisation and security. Data are processed by authorised personnel and by carefully selected service providers acting on behalf of the Company.
The provision of technical data required for browsing the website is necessary for the website to function properly. The provision of personal data submitted through communications or enquiries is voluntary; however, failure to provide such data may prevent the Company from responding to the request.
5. Recipients of Personal Data
Personal data may be disclosed, where necessary, to providers of hosting, maintenance, cybersecurity, IT support and e-mail services, acting as data processors pursuant to Article 28 GDPR. Personal data may also be disclosed to public authorities or other third parties where required by applicable law. Personal data will not be made publicly available.
6. Data Transfers
Should the use of certain IT services involve the transfer of personal data outside the European Economic Area (EEA), such transfers will take place in accordance with Articles 44 et seq. GDPR and will be subject to appropriate safeguards, including adequacy decisions or other transfer mechanisms recognised under applicable law.
7. Data Retention
Browsing data and system logs are retained only for as long as necessary to ensure the operation, security and maintenance of the website, unless further retention is required for the investigation of unlawful activities or to comply with requests from competent authorities. Data contained in communications submitted by users are retained for the period necessary to manage the relevant request and, thereafter, for any additional period required by law or necessary for the protection of the Company’s legal rights.
8. Data Subject Rights
Data subjects may exercise their rights of access, rectification, erasure, restriction of processing, data portability and objection, where applicable. Where processing is based on consent, consent may be withdrawn at any time without affecting the lawfulness of processing carried out before its withdrawal. Requests relating to the exercise of data subject rights may be sent to privacy@nuovaosba.it or directly to the DPO at dpo@nuovaosba.it.
Data subjects also have the right to lodge a complaint with the competent supervisory authority pursuant to Article 77 GDPR.
9. Cookies
Information regarding the cookies and other tracking technologies used by the website, their purposes, retention periods and the methods for managing preferences is available in the Cookie Policy published on the website.
10. Updates
This Privacy Notice may be updated from time to time to reflect legal, technical or organisational changes.
The most recent version is always available on the website and shows the date of the latest update.
The Data Controller
Nuova Osba S.r.l.