Skip to main content

Privacy Policy

Customer Information Notice

This notice is provided to customers, whether they are individuals or individuals acting on behalf of legal entity customers, of Oro Crea SNC, owned by Fogliati Armando Gilberto Gervasi and Bertone Angelo, in accordance with Article 13 of GDPR 679/2016 – “European Regulation on the Protection of Personal Data”.

Data Controller’s Identity

The data controller for the personal data of individual customers, or individuals acting on behalf of legal entity customers, is Oro Crea SNC, located at Via Baldissero, 21 – 10080 Vidracco (TO). No DPO has been designated.

Data Source

The personal data processed are those provided by the data subject during:

  • visits to the premises;
  • interactions through the website;
  • requests for information, including via email or social networks;
  • previous transactions.

Purpose of Processing

Tax obligations, organizational management, bureaucratic requirements of requested services, legal obligations, negotiation management, and pre-contractual relationships. Management of requested services and post-contractual relationships. Additionally, all personal data of the aforementioned data subjects will be entered into the Controller’s archives and used (as per the General Provision of the Guarantor G.U. 1st July 2008 no. 188/C, formulation 6, points a, b, c) to send communications regarding products, services, news, and promotions.

Legal Basis

The legal basis is the execution of a contract of which the data subject is a party or the execution of pre-contractual measures taken at the data subject’s request. Some processing is carried out for the legitimate interests of the Controller, such as promoting their commercial activities in line with products or services already purchased.


Recipients of Data

Personal data processed by the Controller will not be disclosed or made known to unspecified individuals in any form, including making them available or simply consulting them. However, they may be disclosed to employees working for the Controller and to certain external parties collaborating with them. They may also be disclosed, to the extent strictly necessary, to parties involved in the fulfillment of purchases or other requests or the provision of services related to transactions or contractual relationships with the Controller. Finally, they may be disclosed to parties authorized to access them under laws, regulations, or EU regulations. In particular, based on the roles and job duties performed, some workers have been authorized to process personal data, within the limits of their competencies and in accordance with the instructions provided by the Controller.

Data Transfer

The Data Controller does not transfer personal data to third countries or international organizations. However, they reserve the possibility of using cloud services; in this case, service providers will be selected from those providing adequate guarantees, as provided for in Article 46 of GDPR 679/16.

Data Retention

The Data Controller retains and processes personal data for the time necessary to fulfill the purposes indicated. Subsequently, personal data will be retained and not further processed for the time established by current civil and tax regulations.

Rights of Data Subjects

With reference to Articles 15 – Right of Access, 16 – Right to Rectification, 17 – Right to Erasure, 18 – Right to Restriction of Processing, 20 – Right to Data Portability, 21 – Right to Object, 22 – Right to Object to Automated Decision-Making of GDPR 679/16, the data subject may exercise their rights by writing to the Data Controller at the address provided above or by email, specifying the subject of their request, the right they intend to exercise, and attaching a copy of an identity document to attest to the legitimacy of the request.

Withdrawal of Consent

With reference to Article 7 of GDPR 679/16, the data subject may withdraw their consent at any time. However, the processing subject to this notice is lawful and allowed, even without consent, as it is necessary for the execution of a contract of which the data subject is a party (the supply relationship) or to fulfill their requests.

Complaint Submission

The data subject has the right to lodge a complaint with the supervisory authority of their country of residence.

Refusal to Provide Data

Individual customers cannot refuse to provide the Data Controller with personal data necessary to comply with laws regulating commercial transactions and taxation. Providing additional personal data may be necessary to improve the quality and efficiency of the transaction. Therefore, refusal to provide data required by law will prevent order processing, while failure to provide additional data may compromise all or part of other requests and the quality and efficiency of the transaction itself.
Individuals acting on behalf of legal entity customers may refuse to provide their personal data. However, providing personal data is necessary for the proper and efficient management of the contractual relationship. Therefore, any refusal to provide data may compromise all or part of the contractual relationship.

Automated Decision-Making Processes

The Controller does not carry out processing consisting of automated decision-making processes on the personal data of individual customers, or individuals acting on behalf of legal entity customers.

Privacy Notice for Newsletter Subscribers

This notice is provided to individuals who access and consult the website of Oro Crea SNC, owned by Fogliati Armando Gilberto Gervasi and Bertone Angelo, in accordance with Article 13 of GDPR 679/16 – “European Regulation on the Protection of Personal Data”.

Data Controller’s Identity

This website is managed by Oro Crea SNC, located at Via Baldissero, 21, 10080 – Vidracco (TO), the data controller responsible for ensuring the security, confidentiality, and protection of personal data collected at any stage of the processing process. Personal data collected are used in compliance with GDPR 679/16. No DPO has been designated.

Subjects Concerned

This notice is provided to individuals who subscribe to the newsletter offered by Oro Crea SNC, owned by Fogliati Armando Gilberto Gervasi and Bertone Angelo.

Data Source

Data is voluntarily provided by the individual through the completion of the fields in the newsletter subscription form.

Purpose of Processing

The personal data of individuals subscribing to the newsletter are processed to send the requested newsletter via email and to enable them to unsubscribe or be removed from the recipient list.

Legal Basis for Processing

The legal basis is the consent of the data subject, expressed through an unequivocal positive action, consisting of the voluntary and free subscription or registration to the newsletter by entering their email address.

Recipients of Data

Personal data processed by the Controller will not be disclosed or made known to unspecified individuals in any form, including making them available or simply consulting them. They may be disclosed, to the extent strictly necessary, to entities that must provide goods and/or perform services or activities on our behalf to fulfill your request. They may also be disclosed to parties authorized to access them under laws, regulations, or EU regulations. In particular, based on the roles and job duties performed, some employees of Oro Crea SNC, owned by Fogliati Armando Gilberto Gervasi and Bertone Angelo, have been authorized to process personal data within the limits of their competencies and in accordance with the instructions provided by the Controller.

Data Retention

The Data Controller retains and processes personal data for the time necessary to fulfill the purposes indicated.

Rights of Data Subjects

With reference to Articles 15 – Right of Access, 16 – Right to Rectification, 17 – Right to Erasure, 18 – Right to Restriction of Processing, 20 – Right to Data Portability, 21 – Right to Object, 22 – Right to Object to Automated Decision-Making of GDPR 679/16, the data subject may exercise their rights by writing to the Data Controller at the address provided above or by email, specifying the subject of their request, the right they intend to exercise, and attaching a copy of an identity document to attest to the legitimacy of the request.

Withdrawal of Consent

With reference to Article 7 of GDPR 679/16, the data subject may withdraw their consent at any time.

Complaint Submission

The data subject has the right to lodge a complaint with the supervisory authority of their country of residence.

Refusal to Provide Data

The data subject may refuse to provide their personal data to the Controller, as it is optional. However, completing the indicated fields is necessary to receive the requested newsletter.

Automated Decision-Making Processes

The Controller does not carry out processing consisting of automated decision-making processes.

Notice for Product Review Submissions

This notice is provided to individuals who submit a product review on the website of Oro Crea snc di Fogliati Armando Gilberto Gervasi e Bertone Angelo, in accordance with Article 13 of GDPR 679/16 – “European Regulation on the Protection of Personal Data”.

Data Controller Identity

This website is managed by Oro Crea snc di Fogliati Armando Gilberto Gervasi e Bertone Angelo, located at Via Baldissero, 21, 10080 – Vidracco (TO), as the data controller responsible for ensuring the security, confidentiality, and protection of the personal data collected, at any stage of the processing process. The personal data collected are used in compliance with GDPR 679/16. No DPO has been designated.

Data Subjects

This notice is provided to individuals who submit a product review on the website of Oro Crea snc di Fogliati Armando Gilberto Gervasi e Bertone Angelo.

Data Source

The data is voluntarily provided by the data subject through the completion of the fields in the review form.

Purpose of Processing

The personal data of individuals who fill out the review form are processed to publish them on the website to promote the products.

Legal Basis for Processing

The legal basis is the consent of the data subject, expressed through an unequivocal positive action consisting of the voluntary and free completion of the review form, including their data and comments.

Recipients of the Data

The personal data processed by the Data Controller will be disclosed, or made known to indeterminate subjects, through the website. They may also be communicated to entities authorized to access them by law, regulations, or EU directives. In particular, based on the roles and tasks performed, some workers of Oro Crea snc di Fogliati Armando Gilberto Gervasi e Bertone Angelo are authorized to process personal data within the limits of their skills and in accordance with the instructions provided by the Data Controller.

Data Retention

The Data Controller retains and processes the personal data for the time necessary to fulfill the purposes indicated.

Rights of the Data Subject

With reference to Articles 15 – right of access, 16 – right to rectification, 17 – right to erasure, 18 – right to restriction of processing, 20 – right to data portability, 21 – right to object, 22 – right to object to automated decision-making of GDPR 679/16, the data subject can exercise their rights by writing to the Data Controller at the address provided above, or via email, specifying the subject of their request, the right they intend to exercise, and attaching a copy of an identity document to attest to the legitimacy of the request.

Withdrawal of Consent

With reference to Article 7 of GDPR 679/16, the data subject can withdraw consent at any time.

Complaint Submission

The data subject has the right to lodge a complaint with the supervisory authority of their country of residence.

Refusal to Provide Data

The data subject can refuse to provide their personal data as it is optional. However, completing the indicated fields is essential for their review to be published on the website.

Automated Decision-Making Processes

The Data Controller does not carry out automated decision-making processes.