Privacy policy
Orbital Cultura S.r.l., in its capacity as the data controller (hereinafter referred to as “Orbital Cultura” or the “Company”), informs you, pursuant to Articles 13 and 14 of Regulation (EU) No. 2016/679 (hereinafter, “GDPR”), that your personal data will be processed according to the methods and for the purposes outlined below.
1. Data controller
The data controller is Orbital Cultura S.r.l. (Tax Code 04766270484 and VAT No. 10542790968) with registered office in Florence – Via Policarpo Petrocchi 24. The Data Protection Officer (DPO), at Nexi Payments SpA, is available at the email address: dpo@nexigroup.com.
2. Purposes of data processing and data processed
The acquired data are processed manually and automatically for:
- registration on the Orbital Cultura website, necessary to use site services, including any assistance requests and submission of complaints;
- administrative and accounting purposes;
- performing obligations arising from current laws or regulations (for example, in tax matters).
The legal basis for processing is therefore identified as fulfilment of legal obligations to which Orbital Cultura is subject, as well as the necessity to execute contractual or pre-contractual relationships.
Acquired data may also be processed by Orbital Cultura for:
- the sending of communications (newsletters) aimed at promoting our activities.
Such activities can only be carried out upon registration to the “Newsletter” service.
Carrying out the above purposes involves the processing of the following personal data:
- identification data (first name, last name, date of birth, nationality, gender, tax code, VAT number);
- contact data (email address, telephone number, physical address).
3. Categories of persons to whom the data may be communicated
Data may be processed by employees and/or collaborators of Orbital Cultura responsible for pursuing the above purposes, who have been expressly authorized and who have received appropriate operational instructions under Article 29 of the GDPR and Article 2-quaterdecies of Legislative Decree 196/2003, as amended and adapted to the GDPR by Legislative Decree 101/2018.
Data may be disclosed to entities acting as independent data controllers, including, by way of example, authorities and supervisory bodies and, in general, subjects, public or private, entitled to request data.
Data may also be processed, on behalf of Orbital Cultura, by entities appointed as processors pursuant to Article 28 of the GDPR (such as companies providing technical support for website and ticketing system management).
4. Data transfer abroad
The acquired data are not transferred outside the European Union.
5. Period of data conservation
Your personal data will be retained only as long as necessary to ensure proper service provision and, if applicable, until all legal obligations and those arising from contractual relationships with the Company are fully met (typically, for tax purposes, data will be retained for 10 years).
6. Rights of the persons concerned
At any time, data subjects may contact the DPO at dpo@nexigroup.com to request access to their data, its rectification, completion, or erasure, the restriction of processing as per Article 18 GDPR, as well as object to processing under Article 21 GDPR in cases of legitimate interest.
Data subjects may also exercise their right to portability under Article 20 GDPR, that is, the right to receive their data in a structured, commonly used and machine-readable format, and, if technically feasible, to transmit it to another controller without hindrance.
Finally, data subjects have the right to lodge a complaint with the Data Protection Authority.
