OpenSymbol Data Processing Notice – Abridged Version

We share this information, provided pursuant to article 13 of the “European Regulation 2016/679 concerning the protection of individuals with regard to the processing of personal data, as well as the free circulation of such data” (hereinafter “GDPR “). 

Responsibility

OpenSymbol Srl is the independent Data Controller and/or the Joint Data Controller together with the following companies of Impresoft Group, to which OpenSymbol belongs:

Formula Impresoft S.p.A.
Qualitas Informatica S.p.A.
4ward S.r.l.
NextTech S.r.l.
NextCRM S.r.l.

Purpose and Legal Bases

Commercial
Contractual and pre-contractual measures (art. 6 par. B)
Legitimate Interest (art. 6 par. F)
Marketing (soft spam)

Legitimate Interest (art. 6 par. F)
Marketing (no soft spam)
Consent (art.6 par. A)
Legislative / judicial
Legal Obligation (art.6 par. C)
Statistics
Legitimate Interest (art. 6 par. F)

Joint Data Processing

Transmission of promotional material and automated remote commercial communication and traditional communication

Feedback on quality, including by automated remote communication and traditional communication 

Categories of Personal Data

Personal, contact and
company data 

Data of minors 

At least 14 years old or self-certification of consent by the he party exercising parental authority

Location

European Union and non-EU based on the provisions of the GDPR pursuant to art. 44, 45, 46 and 49

Processing

Data collection, recording, organisation,
storage, consultation, processing, modification,
selection, extraction, comparison, use,
interconnection, blocking, erasure and
destruction. Profiling must be added to these
activities; it is performed through the data
subject, but with a focus on the company
he/she represents as an employee or business partner

Methods of Processing

Such as to guarantee the
availability, integrity and
confidentiality of
personal data.
OpenSymbol is certified
according to:

ISO/IEC 27001,
ISO/IEC 27017,
ISO 27018,
ISO 9001

Storage Times

Period of time not exceeding the achievement of the purposes underlying processing
Additional storage times to fulfill legal obligations and to allow the defense in court of the Joint Data Controllers and the exercise of their rights

Recipients

Your data may be disclosed
to specific suppliers
appointed as Data
Processors, pursuant to
art. 28 of the GDPR.
It is possible to request the
updated list of Data
Processors by writing to email addresses shown on this page

Communication Channels

privacy@opensymbol.it
Via Vecchia Ferriera, 5
36100 Vicenza (VI) – Italy
+39 0444 189826
privacy@impresoftgroup.com
gdpr@formulaimpresoft.com
ufficiomarketing@qualitas.it
dpo@4wardpro.it
privacy@nexttech.it
direzione@pec.nextcrm.it

Rights of the Data subject 

Access, Rectification, Erasure, Limited
Processing, Objection to Processing, Portability,
Withdrawal of Consent, Contact the Personal
Data Protection Authority

OpenSymbol at least every 4 years sends the updated privacy policy and the ways in which Data Subjects can assert their rights