Privacy Policy

Orizon S.r.l.

Via Cefalonia 70, 25124 Brescia (BS), Italy

Email: [email protected]

The categories of personal data (Art. 4.1 GDPR) processed by the Controller may include, by way of example and not exhaustively:

• Identification data (including first name and surname);
• Contact data (including email address, telephone number, IP address);
• Data concerning the role held in the company or body for which you are the point of contact, where mentioned in your request;
• Personal data relating to any services provided, for example in the course of handling a request sent through the contact section.

These are the only places on this website where you can enter personal data:

• The contact forms on the Contact, Company and product pages;
• The trial request form on our campaign landing pages;
• The newsletter subscription box, which requires you to confirm your address by email before anything is sent to you;
• The free domain analyser, which processes the domain name you enter and your IP address;
• The partner area sign-in, reserved for existing partners and staff.

This website has no careers or CV submission section and no public account registration.

4.1 Purposes based on your consent (Art. 6(1)(a) GDPR)

a) Responding to requests or questions sent through the contact details on this website, in order to provide information about our products and services and about Orizon's activities. Such requests may include, by way of example, requests for commercial catalogues and quotations, support needs and proposals for commercial collaboration. Where a request is made with a view to entering into a contract, or in the context of an existing contractual relationship, the processing is instead based on pre-contractual measures taken at your request or on performance of the contract, under Art. 6(1)(b) GDPR.

Retention for purpose (a): until your request has been dealt with, unless the replies given and the information exchanged are necessary to demonstrate compliance with contractual obligations or obligations arising from a legal relationship entered into, in which case the retention period is the one set out in the notices issued for that relationship.

4.2 Marketing and surveys by the Syneto Group companies as Joint Controllers

Two further purposes appear as optional, unticked boxes on our forms. They are not needed to receive an answer from us, and refusing them changes nothing about the reply you get. If you do tick them, the companies of the Syneto Group — of which Orizon S.r.l. is part — process your data together, as Joint Controllers under Art. 26 GDPR, for the purpose you agreed to.

a) Marketing communications. We use your contact details to send you information about the products, services, events and initiatives of the Syneto Group companies, by email and, where you gave us a number, by telephone. This is commercial communication: you are being sold to, and you should tick the box only if you want that.

b) Surveys. We use your contact details to invite you to take part in questionnaires and satisfaction or market-research surveys about our products and services. Taking part is always voluntary, and declining has no effect on anything else.

The legal basis for both is your consent, under Art. 6(1)(a) GDPR. The two consents are independent: you may give one and not the other. Neither is a condition of using this website or of receiving a reply.

Retention: your data is kept for these purposes until you withdraw consent, and is then removed from the marketing and survey lists. A record that you withdrew is kept, because it is the only way to be sure your address is not added again by a later import.

You may withdraw either consent at any time, at no cost, by writing to the address in section 1 or by using the unsubscribe link at the foot of any message we send you. Withdrawal takes effect from the moment you make it and does not affect anything sent beforehand. As Joint Controllers, the Syneto Group companies have agreed between them who answers your requests; you may exercise your rights against any of them, and writing to the address in section 1 is enough.

The Controller may disclose your data to:

• Internal offices and functions of the Controller;
• Companies and professionals providing IT services, including electronic data processing, software management, cloud management, website management and IT consultancy;
• Mailing companies and hosting providers.

A complete and up-to-date list of recipients (Art. 4.9 GDPR) is available from the Controller at the contact details above.

This website is hosted on servers located in Frankfurt, Germany, and the messages you send us are delivered through our business email provider. Requests submitted through the forms are not stored in a database: they reach us by email.

Some services embedded in the site are provided by companies established in the United States. Mapbox provides the office map on the Contact and Company pages, and Cloudflare screens the forms against automated abuse; both receive your IP address as a technical consequence of your browser contacting them. If, and only if, you accept the corresponding cookie categories, Google, LinkedIn and Meta additionally receive analytics and advertising data about your visit.

Those transfers are carried out on the basis of the European Commission's Standard Contractual Clauses under Art. 46 GDPR, together with the supplementary safeguards published by each provider. If you decline the analytics and marketing cookie categories, no advertising or analytics provider receives anything about your visit.

The up-to-date list of non-EEA countries recognised as adequate by the European Commission is published on the Commission's website.

In relation to the personal data covered by this notice, you may exercise the following rights under the GDPR:

• Right of access (Art. 15) — to be informed about the processing of your data and to obtain a copy;
• Right to rectification (Art. 16) — to have inaccurate data corrected or incomplete data completed;
• Right to erasure, the "right to be forgotten" (Art. 17);
• Right to restriction of processing in the cases set out in Art. 18;
• Right to data portability (Art. 20) — to receive your data in a structured, commonly used, machine-readable format;
• Right to object to processing (Art. 21);
• Right not to be subject to a decision based solely on automated processing (Art. 22).

Where processing is based on consent, you may withdraw it at any time. Withdrawal takes effect from the moment it is made and does not affect the lawfulness of processing carried out beforehand.

To exercise these rights, write to [email protected]. In accordance with Art. 19 GDPR, Orizon S.r.l. informs the recipients to whom the data has been disclosed of any rectification, erasure or restriction requested, where this is possible.

If you consider that your rights have been infringed, you have the right to lodge a complaint with the supervisory authority. In Italy this is the Garante per la protezione dei dati personali. garanteprivacy.it

The purpose described in section 4.1 is based on consent. You may withdraw that consent at any time, with effect from the moment of withdrawal; processing carried out before then remains lawful.

Withholding or withdrawing consent may mean we cannot fully deliver the services or activities concerned by the purpose for which consent is refused.

In particular, while consent to the processing of your personal data remains free and optional, it is necessary in order to deal with a request for information: without it we have no lawful basis on which to reply to you.

When data is no longer necessary, having regard to the retention periods above, it is deleted as a matter of routine. Where deletion is impossible or would require a disproportionate effort because of the particular way the data is stored, the data is no longer processed and is archived in an area that is not accessible.

The use of solely automated decision-making processes within the meaning of Art. 22 GDPR is currently excluded. Should such processes be introduced in the future for individual cases, you will be notified separately where the law so requires, or this notice will be updated.

Personal data is processed by electronic and computerised means and entered into the relevant databases, which may be accessed by the staff expressly designated by the Controller as processors and authorised persons. They may consult, use, process and compare the data and carry out any other appropriate operation, including automated ones, in compliance with the legal provisions necessary to guarantee, among other things, the confidentiality and security of the data as well as its accuracy, currency and relevance to the stated purposes.

The computer systems and software procedures used to operate this website acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of internet communication protocols.

This information is not collected in order to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.

It may include IP addresses, browser type or operating system, URIs, the domain names and addresses of the sites from which access was made or exit occurred, the time of the request to the server, the method used and information about the response obtained, further information about the user's navigation on the site (see also the cookie policy) and other parameters relating to the user's operating system and computing environment. The same data may also be used to identify and establish responsibility in the event of computer offences committed against the site.

Read the cookie policy

Persons under the age of 14 may not provide personal data. Orizon S.r.l. shall not be liable in any way for any collection of personal data, or for any false statements, provided by a minor. In any event, should such use come to light, Orizon S.r.l. will facilitate the exercise of the rights of access and erasure by the legal guardian or by the person exercising parental responsibility.

This notice carries the date of its most recent update in its heading. Orizon S.r.l. may also make changes or additions to it, including as a result of subsequent legislative changes.

The rights summarised in section 7 are set out in full in Articles 15 to 22 of Regulation (EU) 2016/679, whose official text is published by the European Union. Read the official text of the GDPR.