Privacy

Who is the data controller

The data controller is Mattia Baldi. For any request about your data write to info@omniaplay.com.

Which rules apply

Processing is governed by Regulation (EU) 2016/679 (GDPR), Italian Legislative Decree no. 196 of 30 June 2003 (Personal Data Protection Code) and Article 5(3) of Directive 2002/58/EC (ePrivacy Directive), implemented by Article 122 of the Code.

What data we process and why

We only collect the data described here. We do not build visitor profiles and we do not take automated decisions that have legal or similarly significant effects on people.

Browsing the site

The systems that serve the site may record technical connection data: IP address, date and time, requested page, response status, browser type and referrer. It is used to deliver pages, keep the site secure and diagnose errors. The legal basis is the controller's legitimate interest (Art. 6(1)(f) GDPR). This data is not used for advertising or combined with contact form data. We keep it for as long as security requires, normally no more than 12 months, unless a longer period is needed to establish an offence or defend a right.

Contact form

If you write to us through the site form, we process your name, e-mail address, message text, page language and the date sent in order to answer your request. The legal basis is the performance of pre-contractual measures taken at your request (Art. 6(1)(b) GDPR) and, for other kinds of enquiry, our legitimate interest in replying (Art. 6(1)(f)). Providing this data is optional: without it we cannot reply. We keep the correspondence for as long as needed to handle the request and any collaboration that follows, and then for the period required by law. We do not use it for any other purpose.

The form is protected by an anti-spam check (Cloudflare Turnstile) and a limit on submissions. For that limit the IP address is held only in the server's temporary memory, for a few minutes, and is not stored.

Statistics with Google Analytics

We use Google Analytics 4 to understand how the site is used: pages viewed, where the visit came from, device type and approximate duration. It is not used to identify visitors by name and is not combined with contact form data. For users in the European Economic Area, the United Kingdom and Switzerland the legal basis is consent (Art. 6(1)(a) GDPR and Art. 122 of the Code), collected before statistics cookies are written to or read from the device.

For this processing Google Ireland Limited acts on our behalf as data processor. Google Analytics does not store full IP addresses. Statistics data is kept for the period set in the property, normally 2 or 14 months. Without consent we do not enable Analytics cookies. Declining does not prevent you from browsing the site.

Advertising

The site does not show ads and does not use cookies or technologies for advertising or profiling.

Who we share data with

We do not sell personal data and we do not pass it to advertisers, agencies or other publishers. For statistics, with your consent, Google processes the technical data of the visit on our behalf through Analytics. We do not send Google the data collected through the contact form.

To provide the service we rely on providers that process data on our behalf: the hosting provider that serves the site, the e-mail provider through which we receive form messages, and Cloudflare for the anti-spam check.

Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the contact for European users; some processing is carried out by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, United States). How Google uses information is described in Google's privacy policy.

We may disclose data to public authorities when Italian or European law requires it, or to establish, exercise or defend a legal claim. In that case the legal basis is a legal obligation (Art. 6(1)(c) GDPR) or legitimate interest (Art. 6(1)(f)).

Cookies and similar technologies

Google Analytics cookies are set only after consent. For visitors from the European Economic Area, the United Kingdom or Switzerland, we do not write statistics cookies before you choose. Your saved choice is read again on later visits. Outside those countries the service starts active, because consent is not required in the same way there.

The list of Analytics cookies is at support.google.com/analytics. Names and durations may change when Google updates them. The site does not use advertising cookies.

You can decline or withdraw consent from the site's privacy message at any time, as easily as you gave it. You can also delete cookies from your browser settings. Withdrawal does not affect the lawfulness of processing carried out up to that point.

Transfers outside the European Economic Area

Data collected by Google through Analytics and data processed by Cloudflare may be transferred to the United States. The transfer relies on the European Commission's adequacy decision on the EU-US Data Privacy Framework of 10 July 2023, in which these providers participate. Where the decision does not cover a transfer, the European Commission's standard contractual clauses apply. You can ask us for a copy of the applicable safeguards by writing to info@omniaplay.com, to the extent we hold them.

Your rights

You can ask at any time, by writing to info@omniaplay.com, for:

• access to your data and a copy of the information about you;
• rectification of inaccurate data;
• erasure, in the cases provided by Article 17 GDPR;
• restriction of processing;
• portability of the data you gave us that we process by automated means on the basis of consent or a contract;
• objection to processing based on legitimate interest;
• withdrawal of consent for statistics, without effect on processing already carried out.

We reply within one month, extendable by two months if the request is complex. If you believe the processing breaches the rules you can lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali), Piazza Venezia 11, 00187 Rome, garanteprivacy.it. You can also contact the authority of the European country where you live or work.

Children

The site is not aimed at children under 14 and we do not knowingly collect their data. If we find we have received data from a child under 14 without the consent of the person with parental responsibility, we delete it.

Updates

If purposes, recipients or technologies change, we update this page and the date at the top. The version published here is the one that applies.