Privacy Policy

The company Orbital Cultura, in its capacity as controller of personal data (hereinafter, “Orbital Cultura” or the “Company”), informs you, pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”), that your personal data will be processed according to the methods and purposes described below.

1. Data Controller

The data controller is Orbital Cultura s.r.l. (Tax Code 04766270484 and VAT no. 10542790968), with its registered office in Florence – Via Policarpo Petrocchi 24.

The Data Protection Officer (DPO), at Nexi Payments SpA, can be contacted at the following email address: dpo@nexigroup.com.

2. Purposes and legal bases of the processing, types of data processed

The data collected are processed using manual and automated tools for the following purposes:

  • registration on the Orbital Cultura website, necessary to use the services offered, including any assistance requests and the handling of complaints;
  • administrative and accounting purposes;
  • fulfilling legal or regulatory obligations (for example, in the tax field).

The legal basis for the processing lies in the fulfilment of the legal obligations to which Orbital Cultura is subject, and in the necessity to execute the contractual and/or pre-contractual relationship.

The data collected may also be processed by Orbital Cultura for:

  • sending communications (newsletters) aimed at promoting our activities.

This activity may only be carried out after subscribing to the “Newsletter” service.

The achievement of the purposes described above involves the processing of the following personal data:

  • identification data (name, surname, date of birth, nationality, gender, tax code, VAT number);
  • contact data (email, telephone number, address).

3. Categories of recipients to whom the data may be disclosed

The data may be processed by employees and/or collaborators of Orbital Cultura appointed to pursue the above purposes, duly authorised and instructed in accordance with Articles 29 of the GDPR and 2-quaterdecies of Legislative Decree 196/2003, as amended by Legislative Decree 101/2018.

The data may be disclosed to subjects acting as independent controllers, such as supervisory and control authorities and, in general, public or private entities legally entitled to request the data.

The data may also be processed on behalf of Orbital Cultura by subjects appointed as data processors pursuant to Article 28 GDPR (for example, companies providing technical support for the management of the website or ticketing systems).

4. Data transfer abroad

The data collected are not transferred outside the European Union.

5. Data retention period

Your personal data will be kept only for the time necessary to ensure the proper provision of the services offered and, if applicable, until all legal and contractual obligations have been fulfilled (as a rule, for tax purposes, data are stored for 10 years).

6. Rights of the data subjects

By contacting the DPO at dpo@nexigroup.com at any time, data subjects may request access to their data, their rectification, updating or deletion, limitation of processing in the cases provided for by Article 18 GDPR, as well as object to the processing pursuant to Article 21 GDPR.

Data subjects may also exercise the right to data portability pursuant to Article 20 GDPR, that is, the right to receive their data in a structured, commonly used and machine-readable format and, where technically feasible, to transmit them to another controller.

Finally, data subjects have the right to lodge a complaint with the competent Data Protection Authority.

Shopping Cart