Click and reduce energy consumption by 10% while exploring the site. Join the renewal!
This document (hereinafter referred to as the “Privacy Policy”) provides information about the processing of personal data collected by One Terra S.r.l. (Benefit Corporation - Innovative Start-up) (hereinafter also referred to as the "Company" or “Data Controller”) through this website (hereinafter referred to as the “Site”). It serves as a notice to data subjects in accordance with current legislation and as required by Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, concerning the protection of natural persons with regard to the processing of personal data and the free movement of such data (hereinafter referred to as the “GDPR”).
One Terra S.r.l. is particularly concerned with the protection of privacy and wishes that those visiting the website www.oneterra.it feel safe, whether they are simply browsing or providing their personal data to use specific services or functionalities.
The Data Controller is One Terra S.r.l., with its registered office in Rome, Via Tevere No. 48 (Postal Code 00198).
The Data Controller can be contacted via email at info@oneterra.it
The personal data provided by the user while interacting with the Site's functionalities will be processed, including browsing data, or data requested to use the services offered on the Site (registration to reserved areas, applications, requests for information, reports through contact forms, etc.), as well as data collected via cookies as specified in the cookie policy.
With the user’s consent, the Data Controller may process the user's personal data to enable the use of the services and functionalities available on the Site, optimize its operation, perform visit statistics, manage requests and reports received through the Site, and register for reserved areas or specific initiatives, pursuant to Article 6.1.(a) of the GDPR.
With the user’s express consent, common and/or special data may be processed for the management of applications under Articles 6.1.(a) and 9.2.(a) of the GDPR.
Furthermore, with the user's optional express consent, personal data may also be used for institutional communications (including newsletters) or promotional activities (marketing), i.e., to send promotional material and/or commercial communications related to the Company's services, at the provided addresses, through both traditional (e.g., mail, operator phone calls) and automated means (e.g., internet communications, email, SMS, social media
accounts such as Facebook). The legal basis for processing for this purpose is Article 6.1.(a) of the GDPR.
Providing personal data for these purposes is optional, but failure to provide it will result in the inability to fulfill the user’s requests.
The Data Controller may also process personal data to comply with obligations derived from laws, regulations, or EU regulations: the legal basis for processing for this purpose is Article 6.1.(c) of the GDPR.
The processing of personal data is carried out using automated and non-automated tools, with logic strictly related to the processing purposes.
The Data Controller ensures the logical and physical security of the data and, in general, the confidentiality of the personal data processed, by implementing all necessary technical and organizational measures to ensure their security.
The processing is done in compliance with Article 32 of the GDPR to ensure the integrity and security of the processed data and to prevent unauthorized access.
Personal data collected for the purposes mentioned in this Privacy Policy will be processed and retained for the period strictly necessary to achieve the specific purposes and, in any case, the retention period will be based on the terms allowed by applicable laws, and on the principles of data minimization, retention limitation, and rational archive management.
The personal data provided by you may be made accessible to the Data Controller's employees and/or collaborators, in their capacity as persons authorized and/or responsible for data processing and/or system administrators, within the scope of their duties and/or assignments.
Furthermore, the data may be communicated to:
(i) professionals, third parties, and/or service providers used by the Data Controller for the provision of commercial, professional, and technical services related to the management of the Site and its functionalities, the pursuit of the specified purposes, and the services requested by the user;
(ii) judicial or supervisory authorities, administrations, public bodies (both national and foreign), when necessary to comply with legal obligations or to fulfill requests from these entities, as well as for the prosecution of crimes and for safeguarding against public security threats.
In any case, your personal data will not be publicly disclosed.
Your personal data will be stored on servers located within the European Union, owned and/or made available to the Data Controller and/or third-party companies, duly appointed as data processors. Should the processing of your personal data require transfer outside the European Economic Area, the Data Controller will ensure that the processing is carried out in accordance with one of the methods permitted by the Regulation, such as the user's consent, the adoption of Standard Clauses approved by the European Commission, selection of entities adhering to international data transfer programs (e.g., EU-US Privacy Shield), or operating in countries deemed secure by the European Commission.
The processing of personal data of users who only visit the Site (i.e., without sending communications or using any of the available services/functions) is limited to browsing data, i.e., those for which transmission to the Site is necessary for the operation of the computer systems responsible for managing the Site and Internet communication protocols. This category includes, for example, IP addresses or the domain of the computer used to visit the Site and other parameters related to the operating system used by the user to connect to the Site. The Company collects these and other data (such as, for example, the number of visits and time spent on the Site) only for statistical purposes and in an anonymous form in order to monitor the operation of the Site and improve its functionality. This is information that is not collected to be associated with other information about users and identify them; however, such information by its very nature may allow the identification of users through processing and association with data held by third parties. Browsing data are normally deleted after anonymous processing but may be retained and used by the Company to ascertain and identify the perpetrators of any computer crimes committed against or through the Site. Except for this eventuality and as specified in the Cookie Policy section, the browsing data described above are only temporarily stored in compliance with applicable regulations.
Cookies
Cookies are used by websites to recognize users within a session. As indicated by the provisions of the Privacy Guarantor, they are “small text files” - made up of letters and numbers - “that, the sites visited by the user, send to his terminal (usually to the browser), where they are stored in order to be then re-transmitted to the same sites on the next visit of the same user.”
Cookies are secure, they can only store the information that is entered by the browser, related to the access in the browser itself or that is included in the requested page. They cannot turn into codes and cannot be used to access the user's computer. If a website encrypts the information in the cookie, only the website can read the information.
For more information on the use of cookies, please read the relevant policy.
The users to whom the personal data refer may always contact the Data Controller identified above to assert their rights as provided for in the European Regulation and in particular they may exercise their right
(i) to access their Personal Data (and to know the origin, the purposes and the data of the subjects to whom they are communicated, the period of data retention or the criteria useful to determine it), (ii) to request its rectification and/or deletion (“oblivion”), if no longer necessary, incomplete, erroneous or collected in violation of the law, (iii) to request that the processing be limited to a part of the information concerning them; (iv) to the extent technically feasible, to receive in a structured format or to transmit to third parties specified by the user the information about him or her (c. d. “portability” of the information voluntarily provided); (v) as well as to withdraw their consent at any time, in the event that this constitutes the basis of the processing without prejudice to the lawfulness of the processing carried out up to that point.
Each user has, in addition, the right to object, in the cases provided for by law, to the processing of their personal data, as well as to lodge complaints with the competent Supervisory Authority.
For any request relating to the processing of personal data by the Controller, to exercise the rights recognized by the applicable legislation, as well as to know the updated list of subjects to whom the data are accessible, the user may contact the Controller at the e-mail address info@oneterra.it.