Privacy Policy

1. Data Controller

The Data Controller is:

Company name

OLIO SB srl

Registered office

Via della Fisica 6, 40068 San Lazzaro di Savena (BO), Italy

VAT / Tax code

04038011203

Share capital

€10,000 fully paid-in

Privacy contact email

info@oliosb.it

2. Categories of data processed

Through this website the following personal data may be collected and processed:

• Browsing data: IP addresses, request timestamps, browser and device parameters (collected automatically for security, performance and technical diagnostics).
• B2B partner application form: company name, contact email, message text, and the selected partner type (supplier or marketplace).
• Login area: authentication credentials (email and password) transmitted to Olio’s authentication systems to access the reserved partner platform.

3. Purposes and legal bases

Personal data are processed only for the following purposes:

• Responding to B2B partnership requests submitted via the partner application form — legal basis: performance of pre-contractual or contractual measures (Art. 6(1)(b) GDPR).
• Allowing authentication and access to the reserved area / internal platform for partners already onboarded — legal basis: performance of a contract or related measures (Art. 6(1)(b) GDPR).
• Ensuring website security, integrity and maintenance (fraud prevention, abuse detection, correct technical operation) — legal basis: legitimate interest of the Controller (Art. 6(1)(f) GDPR).
• Complying with legal obligations applicable to the Controller — legal basis: legal obligation (Art. 6(1)(c) GDPR).

4. Processing methods and retention

Processing is carried out with electronic/IT tools and, where needed, paper means, according to logics strictly related to the purposes above and with measures aimed at protecting confidentiality and security.

Data are retained only for as long as necessary to achieve the purposes for which they were collected:

• Partner / contact requests: up to 24 months after handling the request, unless a contractual relationship is established afterwards.
• Login credentials / reserved area: for the duration of the commercial or contractual relationship and until account deletion is requested or the account is deactivated.
• Technical / security logs: for the period strictly necessary for security and diagnostics, and in any case in line with applicable law.

5. Cookies and similar technologies

This website may use technical cookies or equivalent storage necessary for authentication and session continuity after login (for example a cookie named token used to keep the user authenticated when accessing the partner platform).

These cookies are necessary for the service requested by the user and do not require consent under applicable ePrivacy rules. No advertising or profiling cookies are used on this landing website for marketing purposes.

You can manage cookies through your browser settings; disabling technical cookies may prevent login or use of the reserved area.

6. Recipients of the data

Data will not be disseminated to indeterminate third parties. They may be disclosed only to:

• Internal staff authorised and instructed by the Controller.
• Technical service providers (e.g. hosting, CDN, IT consultants) acting as processors under Art. 28 GDPR where required — including cloud infrastructure providers used to host and deliver this website (currently AWS services in the EU).

Data are not transferred outside the European Economic Area (EEA) unless appropriate safeguards are in place (e.g. Standard Contractual Clauses of the European Commission).

7. Nature of providing data

Providing browsing data is automatic when you visit the site. Providing data in the partner form or login fields is optional but necessary to process the request or to authenticate: without them we cannot reply to the application or grant access to the reserved area.

8. Data subject rights

At any time you may exercise the rights under Articles 15–22 GDPR, including:

• Access to your personal data.
• Rectification or erasure (right to be forgotten).
• Restriction of or objection to processing.
• Data portability.
• Right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali — www.garanteprivacy.it).

To exercise these rights, send a written request to the Controller’s email address indicated in section 1 (info@oliosb.it).