Skip to content

Privacy Policy

Pursuant to Italian Legislative Decree No. 196 of June 30, 2003, as amended and supplemented (the “Privacy Code”) and the General Data Protection Regulation (EU) 2016/679 (the “GDPR” or “Privacy Regulation”), Optionfactory S.r.l. intends to inform you and all visitors to the website www.optionfactory.net (hereinafter respectively the “Users” and the “Site”) regarding the use of personal data collected through the Site itself.

1. Data Controller, Data Processors, and Data Protection Officer

The Data Controller of the personal data is Optionfactory S.r.l. (Tax Code and VAT No. IT08721210964), with registered office at Viale Bianca Maria 24, 20129 Milan, Italy; e-mail: privacy@optionfactory.net (the “Data Controller”).

An updated list of the designated Data Processors can be provided upon request by the data subjects and/or Users, by sending an e-mail to the Data Controller.

The Data Controller has appointed a Data Protection Officer (DPO), who can be contacted at the e-mail address: dpo@optionfactory.net.

2. Processed Personal Data

2.1 Information automatically collected by the Site

Like all websites, our Site also uses log files, in which information collected automatically during your visits is stored. The computer systems and software procedures used to operate the Site, in fact, automatically acquire some information during use, the transmission of which is implicit in the use of Internet communication protocols.

The collected information is as follows:

  • Internet Protocol (IP) address or the domain name of the device you are using;
  • type of browser and parameters of the device and operating system used to connect to the Site;
  • Uniform Resource Identifier (URI) addresses of the requested resources or the method used to submit the request to the server;
  • date and time of the visit;
  • referring web page (referrer);
  • size of the response content;
  • numerical code indicating the status of the response given by the server (success, error, etc.).

This information is processed in automated form and collected exclusively in aggregated form in order to verify the proper functioning of the Site.

2.2 Cookies and other tracking systems

Cookies are text files that the sites visited by users send to their terminals, and which are retransmitted to the same sites on the next visit. Cookies can be divided into two macro-categories: “profiling cookies” and “technical cookies”.

  • Profiling cookies: the Site does not use profiling cookies, i.e., cookies designed to create user profiles in order to send messages in line with the preferences shown while surfing the web.
  • Technical cookies: the Site uses technical cookies to allow safe, fast, and efficient exploration of the site itself and to provide users with the requested services. The prior consent of users is not required for the installation of these cookies.
  • Session technical cookies: session cookies are used for navigation. The use of these cookies (which are not stored permanently on the user’s computer and disappear when the browser is closed) is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to allow secure and efficient site navigation.
  • Third-party cookies: no third-party cookies are installed on the Site.

3. Social Networks

The Site contains links to the following Social Networks: LinkedIn, Instagram.

By clicking on the corresponding links, the Internet browser connects directly to the social network’s servers. Further information on the collection and use of data by social networks in general, as well as on the rights and modalities available to protect the privacy of the data subject in this context, can be found on the pages of the respective social networks.

4. Purposes of Processing Data Provided Using the Site

Your data is necessary to allow you to access the Site and navigate it.

Your data is processed for the following purposes:
       (i) fulfilling legal obligations;
       (ii) carrying out the technical management of the Site.

The data you provide will be processed mainly with electronic tools under the authority of the Data Controller, by subjects specifically authorized and instructed to process them, pursuant to Article 29 of the GDPR and Article 2-quaterdecies of the Privacy Code. We inform you that suitable security measures are also observed pursuant to Articles 5 and 32 of the GDPR to prevent data loss, illicit or incorrect use, and unauthorized access.

For the purposes referred to in points (i) and (ii) of Article 4 above, the provision of your personal data is necessary, as otherwise you will not be able to use the services offered by the Site. Consequently, for the purpose referred to in point (i), the legal basis for the processing is the fulfillment of legal obligations, pursuant to Article 6, paragraph 1, letter c) of the GDPR, while for the purposes referred to in point (ii), the legal basis for the processing is the performance of the services provided through the Site and requested by you, pursuant to Article 6, paragraph 1, letter b) of the GDPR.

6. Recipients and Context of Data Transmission

Your data may be communicated only within the EU, to the structures, subjects, and external companies (including consultants and service providers) that the Data Controller uses to manage the Site and to carry out related activities, instrumental or consequential to the execution of the services offered by the Site.

7. Your Data Rights

Articles 15 et seq. of the GDPR grant the data subject the right to obtain, in the manner and within the limits established by Article 2-undecies of the Privacy Code and Article 12 of the GDPR:

  • confirmation of the existence or otherwise of personal data concerning them, even if not yet registered, and their communication in an intelligible form;
  • indication of the origin of the personal data, the purposes and methods of processing, the logic applied in case of processing carried out with the aid of electronic tools, and the identification details of the Data Controller;
  • the updating, rectification, integration, erasure, transformation into anonymous form, or blocking of data processed in violation of the law — including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed —, the certification that such operations have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case where such fulfillment proves impossible or involves a use of means manifestly disproportionate to the protected right.

You also have the right:

  • to withdraw consent at any time (where given) to the processing of personal data (without prejudice to the lawfulness of the processing based on the consent given before the withdrawal);
  • to object, in whole or in part, for legitimate reasons, to the processing of personal data concerning them, even if pertinent to the purpose of the collection;
  • to object, in whole or in part, to the processing of personal data concerning them for the purpose of sending advertising material or direct selling or for carrying out market research or commercial communication;
  • to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) in the cases provided for by the Privacy Regulation, by contacting the Authority directly: Website www.garanteprivacy.it, E-mail: protocollo@gpdp.it, Phone Number: (+39) 06.69677.1;
  • to data portability within the limits set out in Article 20 of the GDPR.

You can exercise your rights by sending a communication to the e-mail address: privacy@optionfactory.net.

8. Duration of Processing

Without prejudice to legal obligations, personal data will be kept for a specific period, based on criteria founded on the nature of the services provided. In particular, the collected information will be kept for a maximum duration of 6 months.

9. Security Measures

Through the Site, your data is processed in compliance with the applicable law and using appropriate security measures in accordance with the legislation in force, also pursuant to Articles 5 and 32 of the GDPR.

In this regard, we confirm the adoption of appropriate security measures aimed at preventing unauthorized access, theft, disclosure, modification, or unauthorized destruction of your data.

10. Changes to the Privacy Policy

The Data Controller reserves the right to make changes to this Privacy Policy. The latest updated version is always available on the Site.