Privacy notice.

This notice explains how OpenLan S.r.l. processes personal data in connection with its website, commercial contacts and services.

1) Data controller

OpenLan S.r.l., Via Marco Polo 14, 20094 Corsico (MI), Italy; VAT no. IT13233530156; telephone +39 02 87365140; email info@openlan.it.

2) Legal basis and purposes

Data may be processed to answer requests, prepare quotations, take pre-contractual measures, perform contracts, comply with legal and tax obligations, send service or commercial communications where permitted, and protect the controller’s contractual and legal interests.

The legal bases are pre-contractual measures, performance of a contract, compliance with a legal obligation, consent where requested, and the legitimate interests of the controller, subject to the data subject’s right to object.

3) Providing data

Providing data during the pre-contractual stage is optional. During a contractual relationship, some information is necessary to provide the service and comply with legal obligations; refusal may make the service impossible.

4) Categories of data

OpenLan generally processes ordinary personal data such as name, company, tax or VAT details, physical and email addresses, contact details and banking information. The site forms do not request special categories of data.

5) Processing methods

Processing may take place electronically or on paper, using organisational and technical security measures appropriate under Article 32 GDPR. Access is limited to people who need the information for their work.

6) Disclosure

Data is not made public. Where necessary, it may be shared with banks, professional advisers supporting legal or accounting obligations, public authorities and service providers appointed as data processors. Processor details are available from the controller.

7) Transfers outside the EU

The controller does not intentionally transfer customers’ personal data outside the European Union. Where a supplier requires an international transfer, the controller applies the safeguards required by the GDPR.

8) Retention

Data is kept only for as long as necessary for the purposes described. In particular, invoicing data is retained for at least ten years after the relevant contract closes where required by tax and accounting rules. Promotional communications stop when the recipient objects.

9) Profiling

The controller does not carry out automated decision-making or profiling of customers.

10) Data subject rights

Subject to the legal requirements, data subjects may request access, confirmation of processing, information on origin and purposes, rectification, erasure, restriction, portability and objection. Requests may be sent to OpenLan S.r.l., Via Marco Polo 14, 20094 Corsico (MI), Italy, or to info@openlan.it.

You may also lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

11) Data protection officer

The Data Protection Officer can be contacted for questions about processing and the exercise of rights at dpo@openlan.it.