Privacy policy.

The data controller of personal data is Orange System S.r.l., with registered office in Via G. L. di Scalea, 405 — 90146 Palermo (PA), Italy. VAT 05500100820.

For any request related to the processing of personal data, you can contact the controller through the contact form of the site, specifying "GDPR rights" in the subject.

Through the forms on the site (contact, quote request, dealer application) we collect contact data strictly necessary to respond to the request: name, surname, business name, email, phone, city, province and any message.

In no case do we collect data belonging to special categories under art. 9 GDPR (racial or ethnic origin, political opinions, religious or philosophical beliefs, genetic, biometric, health, sex life or sexual orientation data).

Personal data collected through the site forms are processed exclusively to: respond to the requests received, manage any subsequent commercial relationships, comply with legal obligations connected to the company's activity.

The legal basis of the processing is the consent of the data subject (art. 6.1.a GDPR) provided at the time of filling out the form, and/or the execution of pre-contractual measures at the request of the data subject (art. 6.1.b GDPR).

Processing takes place with IT and paper tools, with technical and organizational security measures appropriate to the risk. Data is accessible exclusively to authorized internal personnel and to appointed external processors (IT, hosting and email service providers).

Data is neither disseminated nor transferred outside the European Union. Any communications to third parties take place only within the limits necessary to follow up on the data subject's request (e.g. transmission to a dealer of the network upon explicit request).

Data collected through forms is retained for the time strictly necessary to follow up on the request. For commercial requests, the retention time is normally 24 months from the last useful contact, unless a different legal basis exists (e.g. accounting or tax obligations).

After this period, the data is deleted or irreversibly anonymized.

At any time, the data subject has the right to: access their data (art. 15 GDPR), request rectification (art. 16), erasure (art. 17), restriction of processing (art. 18), object to processing (art. 21), obtain portability (art. 20), withdraw consent without prejudice to the lawfulness of processing carried out previously.

To exercise these rights, write to the data controller through the site's contact form, specifying "GDPR rights" in the subject and clearly indicating the request.

The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).