Privacy policy.

The data controller of personal data is Orange System S.r.l., with registered office in Via G. L. di Scalea, 405 — 90146 Palermo (PA), Italy. VAT 05500100820.

For any request related to the processing of personal data, you can contact the controller through the contact form of the site, specifying "GDPR rights" in the subject.

Through the forms on the site (contact, quote request, dealer application) we collect contact data strictly necessary to respond to the request: name, surname, business name, email, phone, city, province and any message.

In no case do we collect data belonging to special categories under art. 9 GDPR (racial or ethnic origin, political opinions, religious or philosophical beliefs, genetic, biometric, health, sex life or sexual orientation data).

Personal data collected through the site forms are processed exclusively to: respond to the requests received, manage any subsequent commercial relationships, comply with legal obligations connected to the company's activity.

The legal basis of the processing is the consent of the data subject (art. 6.1.a GDPR) provided at the time of filling out the form, and/or the execution of pre-contractual measures at the request of the data subject (art. 6.1.b GDPR).

Processing takes place with IT and paper tools, with technical and organizational security measures appropriate to the risk. Data is accessible exclusively to authorized internal personnel and to appointed external processors (IT, hosting and email service providers).

Data is neither disseminated nor transferred outside the European Union. Any communications to third parties take place only within the limits necessary to follow up on the data subject's request (e.g. transmission to a dealer of the network upon explicit request).

Data collected through forms is retained for the time strictly necessary to follow up on the request. For commercial requests, the retention time is normally 24 months from the last useful contact, unless a different legal basis exists (e.g. accounting or tax obligations).

After this period, the data is deleted or irreversibly anonymized.

Voluntary subscription. When you subscribe to our newsletter from our website, we collect your email address and, optionally, your name, based on your explicit consent (Art. 6.1.a Regulation EU 2016/679). We use this data to send you periodic communications about Orange System products, events and news. We use the double opt-in process: after subscribing you will receive a confirmation email and you will become a recipient of our communications only after clicking the link inside. You can unsubscribe at any time using the "Unsubscribe" link in every email, with no formalities.

B2B communications to hospitality businesses and industry operators. For direct marketing addressed to companies and professionals in the hospitality sector, we may use business email addresses collected from public sources (websites of accommodation facilities, industry registries) on the basis of our legitimate interest to promote services technically relevant to the recipient's activity (Art. 6.1.f Regulation EU 2016/679 and Italian Data Protection Authority decision 4 July 2013, doc. web no. 2542348). The subject of communications is strictly related to the recipient's business (technical services for hotels, professional audio-video solutions, hospitality automation). Each email contains a one-click unsubscribe link; the recipient may object to processing at any time by writing to orangesystemsrl@gmail.com or using the link in the email.

Retention. Subscriber data remains in our systems as long as the subscription is active. In case of unsubscription, we keep the email address in a suppression list to ensure we do not contact you again, unless you request otherwise.

Technical provider. For sending emails we use Brevo (Sendinblue SAS, France), external data processor pursuant to Art. 28 GDPR. Brevo is subject to GDPR and processes data based on our documented instructions.

At any time, the data subject has the right to: access their data (art. 15 GDPR), request rectification (art. 16), erasure (art. 17), restriction of processing (art. 18), object to processing (art. 21), obtain portability (art. 20), withdraw consent without prejudice to the lawfulness of processing carried out previously.

To exercise these rights, write to the data controller through the site's contact form, specifying "GDPR rights" in the subject and clearly indicating the request.

The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).