OpenSymbol Data Processing Notice – Abridged Version

OpenSymbol Data Processing Notice – ABRIDGED VERSION

Dear Data Subject, we are sharing this information with all individuals who interface with our internal systems, pursuant to the “Regulation (EU) 2016/679 on the Protection of Natural Persons with regard to the Processing of Personal Data and on the Free Movement of such Data.” (hereinafter, the “GDPR”).

Pursuant to Article 13 of the GDPR, we hereby inform you that:

Responsibility

The Data Controller is
OpenSymbol Srl

Purpose – Legal Bases

Commercial – Legitimate Interest
Marketing – Consent

Storage Times 

4 years

Categories of Personal Data

Personal, contact and
company data 

Data of minors 

At least 18 years for commercial processing and
14 years for marketing processing, or self-
certification of consent by the individual
exercising parental authority 

Location

European Union and USA
with Standard
Contractual Clauses and
the DPIA (Data
Protection Impact
Assessment) 

Recipients

Your data may be disclosed
to specific suppliers
appointed as Data
Processors, pursuant to
Article 28 of the GDPR.
It is possible to request the
updated list of Data
Processors

Processing

Data collection, recording, organisation,
storage, consultation, processing, modification,
selection, extraction, comparison, use,
interconnection, blocking, erasure and
destruction. Profiling must be added to these
activities; it is performed through the data
subject, but with a focus on the company
he/she represents as an employee or business partner

Methods of Processing 

Such as to guarantee the
availability, integrity and
confidentiality of
personal data.
OpenSymbol is certified
according to:

ISO/IEC 27001,
ISO/IEC 27017,
ISO 27018,
ISO 9001

Communication Channels

privacy@opensymbol.it
Via Vecchia Ferriera, 5
36100 Vicenza (VI) – Italy
+39 0444 189826

Rights of the Data subject 

Access, Rectification, Erasure, Limited
Processing, Objection to Processing, Portability,
Withdrawal of Consent, Contact the Personal
Data Protection Authority

Management Time
Frame 

Right to erasure within 3
months, Other rights
within 1 month