Privacy Policy

Data Protection Declaration

Please read the following declaration carefully in order to knowingly express your consent to the use of personal data and to get full knowledge of your data protection rights and options you have, according to the requirements of the General Data Protection Regulation (EU) 2016/679 of the European Parliament (“GDPR”).

1. Who are we?
Overmade Srl is the controller for the purposes of the GDPR, a company registered in Italy (P. Iva 04353570239), with its registered office located in Via Mirandola, 13 - 37026 Settimo di Pescantina (VR), Italy. The data controller is in charge for choices concerning why, how and by which means your personal data are used. Interested parties can send requests to the Data Controller to the following contacts: telephone 0458281111, e-mail [email protected], PEC [email protected].

2. For what purpose we use personal data?   
Personal data that you knowingly provided by filling up our contact form will be used by Overmade Srl, according to your choices, for the following reasons:  

The processing of personal data for the suppliers is carried out for the following purposes:

1. Establishment and execution of the contractual relationship with the supplier and related activities, such as administrative and accounting activities;
2. Fulfilment of legal obligations;
3. Credit recovery and judicial protection and related activities;
4. Evaluation of the supplier’s financial condition;
   
   

The processing of personal data for the customers is carried out for the following purposes:

1. Establishment and execution of the contractual relationship with the customer and related activities, such as administrative and accounting activities;
2. Fulfilment of legal obligations;
3. Credit recovery and judicial protection and related activities;
4. Credit evaluation and credit insurance;
   
   

Legal basis. The processing is carried out legitimately on the basis of the following conditions:

1. Execution of the contract for the purpose n. 1;
2. Legal obligation for the purpose n. 2;
3. Legitimate interest for the purposes n. 3-4.

3. What happens if you do not provide your data and/or deny approval?
If you deny your approval, Overmade Srl will not be able to send you technical and commercial information by email.  Overmade Srl and selected third parties might also process your personal data for anonymous statistical analysis to improve our services. This processing activity is based on legitimate interest. In the event that your personal data are incomplete or incorrect, Overmade Srl will not be able to guarantee a proper handling of your request. 
The provision of personal data is mandatory also for customers and suppliers, for the execution of the contract and failure, or partial, or incorrect provision can make it impossible or inaccurate.

4. How do we use your data?
Overmade Srl and selected third parties use your personal data by taking all the reasonable steps to protect the security and privacy of personal information that you provide, employing both electronic and paper tools.  

5. With whom do we share your data
In order to handle your specific requests, your personal data will be used by: (i) internal employees of Overmade Srl, expressly authorized and therefore tied to confidentiality, or (ii) by external partners selected by Overmade Srl (former art. 28 GDPR) as external data controller, on the basis of a specific agreement aiming to guarantee that your personal data are processed according to the terms you explicitly accepted as mentioned under point 2. The full list of (external) personal data controller is available at Overmade Srl’s registered office and can be requested by using the contact details reported below. 

6. Recipients
The customer's and supplier's personal data may be disclosed, for the purposes described, to the following categories of recipients: agents, suppliers, professionals (accountant, law firm, consultants), commercial information companies, agencies and public bodies, supervisory bodies and control bodies, judicial authorities, IT services companies, transport and logistics companies, credit, financial and insurance institutions.

7. For how long will you hold my data?
Your personal data will be only held for the time reported in the chart at point 2, unless your consent is withdrawn or unless your rights are exercised as mentioned under point 8. In any case, the firm’s owner or the appointed data controller can hold your personal data longer, but only  to fulfil specific legal obligations. At the end of this period your data will be cancelled or changed to anonymous data.    

For what concerns customers and suppliers, the treatment has a duration equal to that of the contractual relationship and the data will be kept for a maximum time of 10 years, in order to fulfil legal obligations, as well as to protect the legitimate interests of the owner.

8. Do we transfer data to destinations outside of the EEA?
None of your personal data will be stored, transferred or sent or stored to any legal subjects  residing outside the European Economic Area.

9. How can you exercise your privacy rights?
Overmade Srl and its partners allow you to exercise all your legal rights concerning the use of personal data that you provided. You can exercise these rights at any time, in detail you can:

1. Inquire whether and how your data are being processed (Right to access).
2. If necessary, request an update, a correction or completion of your data (Right of rectification). 
3. Request to cancel your personal data (Right to erasure)
4. Request to restrict or halt the processing of data in case of potential legal violations. 
5. When technically possible, ask for a copy of your data in an interoperable format, which can be easily transferred to other operators.
6. Object to the use of your data for acceptable reasons.
7. Withdraw a given consent at any time
8. Inquire about the processes of automated individual decision-making
9. Processing in the hypothesis of legitimate interest of the owner and the withdrawal of consent, in cases where the processing is based on it.

For the exercise of their rights, interested parties can address their requests by writing an email to [email protected]. 
Furthermore, interested parties have the right to lodge a complaint with the competent Supervisory Authority in the Member State in which they usually reside, or work, or in the State in which the alleged violation has occurred.

All the above-mentioned enquiries can be addressed to Overmade Srl’s registered office or sent by email to the email address [email protected]. Please remember that, in any case, you have the right to file a complaint to the competent authorities, i.e. to the Data Protection Authority, directly