Privacy policy

This Privacy policy applies exclusively to navigation on the site open-consulting.net (hereinafter referred to as the Site) accessible at the internet address https://www.open-consulting.net and regularly registered by Marco Viviani - via Celso Ulpiani n°1 – 63100 Ascoli Piceno - Italy

The Data Controller, Responsible and Appointed for the processing of the collected data is Marco Viviani, whose details have been previously provided.

The applications dedicated to the operation of this Site may detect, during their normal functioning, some of your data (the transmission of which is implicit in the use of Internet communication protocols), however not directly associated with you. Among the data collected, there may also be included, by way of example and not exhaustively, the IP address, domain names, and the type of browser of the computers used to connect to the Site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters regarding the operating system and the computing environment you use. These data do not allow, in any case, to ascertain your identity and should therefore be considered anonymous. Particular sources of personal data are indicated in the specific Privacy policies prepared for particular services offered by the Site or software used by it for its proper functioning and are reported below.

The data concerning you will be transformed into anonymous data and processed in aggregated form for statistical purposes and to ensure continuity of service and for the improvement of the Site itself. If you do not agree with this practice, you are requested not to browse the Site nor to make use of the services offered by it. The IP may, in some cases, be used solely for the purpose of blocking attempts to damage the Site itself, as well as activities constituting a crime under current laws. Specific purposes of the processing are outlined in the specific Privacy Policies prepared for particular services offered by the Site or software used by it for its proper functioning and are reported below. 

 The data you provide and collected by the Site are processed only for the strictly necessary time. They are processed electronically and aggregated for the purposes outlined above. Specific methods of processing are outlined in the specific Privacy Policies prepared for particular services offered by the Site or software used by it for its proper functioning and are reported below.

For the purposes of browsing the site, the communication of personal data is not required except for anonymous data and those strictly necessary for the purposes indicated above. However, there are sections of the site that require the creation of an authorisation profile and prior electronic authentication to be browsed. The creation of the profile involves the communication to the Site of personal data additional to those anonymous required for simple browsing. Such data are used solely for the purpose of providing the services that may be requested and processed according to the specific Privacy Policies prepared for this purpose and reported below.  

Direct access to your data is exclusively permitted to the Data Controller indicated.
The hosting service provider is:

Odoo IT S.R.L. - Via Montefeltro 4 - 20156 Milan MI - Italy

and may potentially have access to the data solely for technical reasons of necessity and urgency that require intervention in order not to compromise the functionality and security of the Site.
Other services are or may be offered by other companies. Information in this regard is present in the Privacy policies drafted for each individual service and reported below.

1. The data subject has the right to obtain from the data controller confirmation as to whether or not personal data concerning them is being processed and, in such a case, to obtain access to the personal data and the following information:

• the purposes of the processing;
• the categories of personal data concerned;
• the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular if recipients are third countries or international organisations;
• where possible, the retention period for personal data provided or, if not possible, the criteria used to determine that period;
• the existence of the right of the data subject to request the data controller to rectify or erase personal data or to restrict the processing of personal data concerning them or to object to their processing;
• the right to lodge a complaint with a supervisory authority;
• where the data has not been collected from the data subject, all available information about its source;
• the existence of automated decision-making, including profiling as referred to in Article 22, paragraphs 1 and 4, and, at least in such cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject

2. Where personal data is transferred to a third country or an international organisation, the data subject has the right to be informed of the existence of adequate safeguards pursuant to Article 46 relating to the transfer.

3. The data controller provides a copy of the personal data undergoing processing.

4. In the case of further copies requested by the data subject, the data controller may charge a reasonable fee based on the administrative costs. If the data subject makes the request by electronic means, and unless otherwise specified by the data subject, the information shall be provided in a commonly used electronic format. 

The data subject has the right to obtain from the data controller the rectification of inaccurate personal data concerning them without undue delay. Taking into account the purposes of the processing, the data subject has the right to obtain the completion of incomplete personal data, including by providing a supplementary statement.

1. The data subject has the right to obtain from the data controller the erasure of personal data concerning them without undue delay and the data controller has the obligation to erase without undue delay the personal data, if one of the following grounds applies:

• the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
• the data subject withdraws consent on which the processing is based in accordance with Article 6(1)(a) or Article 9(2)(a), and if there is no other legal ground for the processing;
• the data subject objects to the processing pursuant to Article 21(1), and there are no overriding legitimate grounds for the processing, or they object to the processing pursuant to Article 21(2);
• the personal data have been unlawfully processed;
• the personal data must be erased to comply with a legal obligation in accordance with Union law or the law of the Member State to which the data controller is subject;
• the personal data have been collected in relation to the offer of information society services referred to in Article 8(1).

2. The data controller, if they have made personal data public and are obliged, under paragraph 1, to delete it, taking into account the available technology and the costs of implementation, shall adopt reasonable measures, including technical ones, to inform the data controllers who are processing the personal data of the data subject's request to delete any link, copy or reproduction of their personal data.

3. Paragraphs 1 and 2 shall not apply to the extent that processing is necessary:

• for the exercise of the right to freedom of expression and information;
• for compliance with a legal obligation which requires processing under Union or Member State law to which the data controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller;
• for reasons of public interest in the area of public health in
• compliance with Article 9, paragraph 2, letters h) and i), and Article 9, paragraph 3;
• for archiving purposes in the public interest, for scientific or historical research or for statistical purposes in accordance with Article 89, paragraph 1, to the extent that the right referred to in paragraph 1 is likely to make impossible or seriously impair the achievement of the objectives of that processing; or
• for the establishment, exercise or defence of a right in legal proceedings.
  

1. The data subject has the right to obtain from the data controller the restriction of processing when one of the following applies:

• the data subject contests the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
• the processing is unlawful and the data subject opposes the deletion of the personal data and instead requests that its use be restricted;
• although the data controller no longer needs it for the purposes of processing, the personal data is necessary for the data subject for the establishment, exercise or defence of a right in legal proceedings;
• the data subject has objected to the processing under Article 21, paragraph 1, pending verification regarding the possible prevalence of the legitimate grounds of the data controller over those of the data subject.

2. If the processing is restricted under paragraph 1, such personal data shall be processed, except for storage, only with the consent of the data subject or for the establishment, exercise or defence of a right in legal proceedings or to protect the rights of another natural or legal person or for reasons of substantial public interest of the Union or a Member State.

3. The data subject who has obtained the restriction of processing under paragraph 1 shall be informed by the data controller before the said restriction is lifted.

The data controller shall inform each of the recipients to whom the personal data have been transmitted of any corrections or deletions or limitations of the processing carried out in accordance with Article 16, Article 17, paragraph 1, and Article 18, unless this proves impossible or involves a disproportionate effort. The data controller shall inform the data subject of such recipients if the data subject requests it.

1. The data subject has the right to receive in a structured, commonly used and machine-readable format the personal data concerning them provided to a data controller and has the right to transmit such data to another data controller without hindrance from the data controller to whom they were provided where:

• the processing is based on consent pursuant to Article 6, paragraph 1, letter a), or Article 9, paragraph 2, letter a), or on a contract pursuant to Article 6, paragraph 1, letter b); and
• the processing is carried out by automated means.

2. In exercising their rights regarding data portability under paragraph 1, the data subject has the right to obtain the direct transmission of personal data from one data controller to another, where technically feasible.

3. The exercise of the right referred to in paragraph 1 of this Article shall not affect Article 17. This right does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller.

4. The right referred to in paragraph 1 shall not adversely affect the rights and freedoms of others.

1. The data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them under Article 6, paragraph 1, letters e) or f), including profiling based on such provisions. The data controller shall refrain from further processing the personal data unless they demonstrate the existence of compelling legitimate grounds for proceeding with the processing which override the interests, rights and freedoms of the data subject or for the establishment, the exercise or defence of a right in legal proceedings. 

2. Where personal data are processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning them carried out for such purposes, including profiling to the extent that it is related to such direct marketing. 

3. Where the data subject objects to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes. 

4. The rights referred to in paragraphs 1 and 2 shall be explicitly brought to the attention of the data subject and shall be presented clearly and separately from any other information at the latest at the time of the first communication with the data subject.

5. In the context of the use of information society services and subject to Directive 2002/58/EC, the data subject may exercise their right to object by automated means using specific techniques. 

6. Where personal data are processed for scientific or historical research purposes or for statistical purposes in accordance with Article 89, paragraph 1, the data subject, for reasons related to their particular situation, has the right to object to the processing of personal data concerning them, unless the processing is necessary for the performance of a task carried out in the public interest.

 1. The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.

2. Paragraph 1 does not apply in cases where the decision: a) is necessary for the conclusion or performance of a contract between the data subject and a controller; b) is authorised by Union or Member State law to which the controller is subject, which also specifies appropriate measures to safeguard the rights, freedoms and legitimate interests of the data subject; c) is based on the explicit consent of the data subject.

3. In the cases referred to in paragraph 2, letters a) and c), the controller implements appropriate measures to safeguard the rights, freedoms and legitimate interests of the data subject, at least the right to obtain human intervention from the controller, to express their opinion and to contest the decision.

4. The decisions referred to in paragraph 2 are not based on the special categories of personal data referred to in Article 9, paragraph 1, unless Article 9, paragraph 2, letters a) or g) applies, and adequate measures for the protection of the rights, freedoms and legitimate interests of the data subject are not in place. 

• Part of this site uses cookies, which are text files that are placed on your computer by the Site to allow it to analyse how users use it to exchange information between the server and the user.
• No important data is exchanged via cookies. They allow the automation of certain operations, saving you from complex procedures, and are sometimes essential for the proper functioning of the Site.
• Within the cookies created by open-consulting.net and the services it uses, your personal data that would allow tracing and/or directly knowing your identity is not stored, and they do not pose a risk to your privacy or to the integrity of the computer systems you use to access the Internet communication network or the Site.
• If you do not agree with this practice, you can disable the use of cookies from your browser, but this may cause difficulties in navigating the Site.
• Any data collected or stored by cookies, in the manner specified above, is not transmitted to third parties, unless this is necessary for the proper functioning of the services provided by the Site and delivered by the same third parties.
• Specific information regarding the use of cookies is present in the Privacy policies drafted for specific services offered by the Site and are reported below.

In relation to specific services offered on the Site and/or offered to you by it, specific Privacy policies have been prepared which form an integral part of this general Privacy policy. Below are the links to the Privacy policies of the specific services:

• Privacy policy on visit tracking (Google Analytics)

Below are the links to the bibliography and documentation referred to in this notice:

• REGULATION (EU) 2016/679
  EU OFFICIAL JOURNAL
• GUARANTOR FOR THE PROTECTION
  OF PERSONAL DATA