Privacy Policy

Dear Data Subject, We wish to inform you that the ‘European Regulation 2016/679 on the protection
of individuals with regard to the processing of personal data and on the free movement of such data’
(hereinafter ‘GDPR’) provides for the protection of individuals with regard to the processing of personal data as a fundamental right. Pursuant to Article 13 contained in the aforementioned regulation we inform you that:

Holder of the treatment:

The data controller is One Shot Lab s.r.l., in the person of its legal representative Marina Ferrando, who
can be contacted at the address Piazza Buonarroti, 32 – 20145 Milan (MI) or at the e-mail addresses
info@oneshotlab.it and e-mail pec oneshotlab@pec.it.

Data categories:

One Shot Lab s.r.l. will process your personal data as:

Automatically collected data. The computer systems and applications dedicated to the operation of
this website collect, during their normal operation, certain data (the transmission of which is implicit in
the use of Internet communication protocols) potentially associated with identifiable users. The data
collected include the IP addresses and domain names of the computers used by users who connect
to the site, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the
time of the request, the method used to submit the request to the server, the size of the file obtained
in response, the numerical code indicating the status of the response given by the server and other
parameters concerning the operating system, the browser and the computer environment used by the
user. This data is processed, for the time strictly necessary, for the sole purpose of obtaining statistical information on the use of the site and to check its regular operation. The provision of such data is compulsory as it is directly related to the web browsing experience.

Cookies: The site uses technical cookies necessary for the site to function properly. The site uses third party cookies. See the cookie policy for more information.

Data provided voluntarily by the user. The personal information that Users freely provide by filling in the contact request form relating to property broking and consultancy services offered by Oneshotlab srl and promoted on the Site; the types of data collected are as follows:

1. first name and last name
2. email address and phone number
3. city of origin

The provision of data in this area is optional. Should the User decide not to provide such data, he/ she will not be able to forward contact requests to Oneshotlab srl, which will therefore be unable to provide an appropriate response.

Purpose of data processing and legal basis:

The processing of your data is carried out in order to monitor the proper functioning of the portal and, inaddition, with regard to data provided voluntarily, the processing is carried out for:

1. fulfil the specific contact request forwarded by the User;
2. manage the subscription to the newsletter;
3. send offers on products or services.

The processing of data for the purposes listed above has as its legal basis your consent, which is
revocable at any time.

Data recipients:

Within the limits pertinent to the processing purposes indicated, your data may be communicated to
partners, consulting companies, private companies, appointed as Data Processors by the Data Controller or for legal obligations or to fulfil your specific requests. The Data Processors and Persons in Charge of Processing in office are punctually identified in the Privacy Document, which is updated periodically.

Data transfer abroad:

The data collected are not transferred abroad.

Storage period:

Collected data will be retained for a period of time not exceeding the fulfilment of the purposes for
which they are processed (‘principle of retention limitation’, Art. 5, GDPR) or in accordance with the
deadlines stipulated by legal regulations. A check on the obsolescence of the retained data in relation to the purposes for which it was collected is carried out periodically.

Rights of the data subject:

The data subject always has the right to request from the Data Controller access to his/her data,
rectification or cancellation thereof, restriction of the processing or the possibility to object to the
processing, to request data portability, if the processing of personal data is based on the consent given by the User, pursuant to Art. 7 paragraph 3 of the Regulation, the possibility to revoke the consent given for the sending of communications and updates for promotional and commercial purposes is recognised, asserting these and the other rights provided for by the GDPR by simply notifying the Data Controller. at the above-mentioned addresses.

Data processing methods:

The personal data provided by you will be processed in accordance with the aforementioned legislation and the confidentiality obligations that govern the Controller’s activities. The data will be processed both by computer and on paper or on any other suitable type of support, in compliance with the appropriate security measures pursuant to Article 5(1)(F) of the GDPR.
The information is not to be considered valid for other websites that may be consulted via links on the
Owner’s domain websites, which is not to be considered in any way responsible for the websites of third parties.