While browsing and using the Company Website, certain information may be collected and processed exclusively for security purposes and to improve the service offered.

If you browse the company websites (oikos-group.it), the information collected mainly concerns interactions with the website, statistics on the pages visited by the user, date and time of access, and the technology used by the user. Information relating to the user's source page and destination page may also be collected.

Furthermore, certain information is collected automatically, in anonymous, aggregated and pseudonymized form, using cookies and similar technologies while browsing the website.

You can read more about our use of cookies in our “Cookie Policy”.

If you decide to contact us by filling in the forms in the “Contacts” or “Contact us” section of the aforementioned websites, the information collected includes name and surname, residential or domicile address, email address, telephone number, profession, as well as the text freely entered by you.

If you contact Oikos to submit an unsolicited application or in relation to available positions, the data processed and collected through the form include, by way of example and without limitation, name and surname, tax code, residential or domicile address, email address, telephone number, curriculum vitae, passport photo, as well as the text freely entered by you.

If you are one of the subjects listed above and, even if no contract is in place, you interact with Oikos to request information, consultancy or to be updated on our initiatives and activities, data may be collected and processed at trade fairs or events, through the completion of digital forms or at your explicit request, and may include name and surname, registered office, email address and telephone number.

If you are our supplier, data will be collected and processed when establishing and managing the contractual relationship and may also concern your employees. Specifically, the data collected will relate to company name, name and surname, registered office, email address, telephone number, tax code and VAT number.

If you participate in a webinar, processing will take place mainly or exclusively by electronic means with regard to images and online identification of participants, in compliance with the security protocols established by the Controller through the external Processor.

The platforms used to provide the service require the participant to enter an email address and a nickname.

The email address is communicated during registration to the platform provider and consists of the first-level identifying data needed to access the connection. The nickname is freely chosen by the participant and is shared in the screen area identifying the participant during the conference in the so-called virtual room. When registering for the webinar, the Controller will request consent to process the data provided for marketing activities.

The participant may choose whether or not to deactivate their camera. If they decide to keep the camera active, images of the person shown on video will also be visible to the other participants and may be recorded by the Controller. The same applies to audio resulting from the activated microphone function.

The email identifier and the data requested during registration are conditions for participation. Likewise, it is mandatory to create a nickname, chosen by the data subject, to be associated with the email address. The choice of whether to keep the camera active and to speak during the session is left to the participant.

If you decide to participate in on-site training courses organized by Oikos at one of its premises, during registration you will be asked to provide common personal data such as, by way of example and without limitation, personal details, contact details, type of work performed, name of the reference Oikos retailer, as well as the possibility of video-photographic documentation of the training meetings.

During the provision of services and/or the organization of events or competitions, the Data Controller may carry out video recordings, including voice, and/or photographic recordings, for communication and promotional purposes, including through social networks, or for sharing the projects you submit on the Oikos community.

If, during such recordings, your image is also captured in a way that makes you wholly or partially recognizable, it falls within common personal data.

Before starting such processing, the Controller will provide notice thereof and, if you do not wish to be recorded in any way, you must inform the Controller.

• During public events or events held in public, images will be processed without the need for explicit consent.
• During courses or events, if the recordings do not make recognition possible, they will be processed without the need for explicit consent.
• During courses or events, if the recordings make the data subject recognizable but consent has been expressed and can be inferred from the context, verbal consent will be considered valid.
• For images or videos in which the data subject is the main subject, specific consent will be requested.

In any case, the Controller states that images will not be used in contexts that may prejudice the personal dignity, decorum and safety of the persons portrayed.

Posing and use of images are to be considered services provided free of charge.

You may always request, at any time, from the Data Controller or the Data Protection Officer, a copy of your personal data, information regarding the location where your personal data are processed and an updated list containing the identification details of all Processors and System Administrators authorized to process your data.

At any time, you may freely withdraw the consent given, without any charge and without prejudice to the lawfulness of processing carried out up to that moment, and exercise the following rights of the data subject against the Data Controller as provided for by European Privacy Regulation EU/2016/679: access, rectification, erasure, restriction, objection, portability and complaint to the Data Protection Authority.