Privacy and Cookie Policy

Onstreamgallery.com collects some Personal Data of its Users.

Users may be subject to different levels of protection. Therefore, some Users enjoy greater protection. More information about the protection criteria can be found in the applicability section.

This document contains a section devoted to California consumers and their privacy rights.

Thisdocument contains a section dedicated to Users residing in Brazil and their rights regarding privacyThisdocument can be printed using the print command in the settings of any browser.

Data Controller

Onstream Gallery SRLS, Via Belluno, 16 - 00161 Rome RM Italy

Holder's email address: hello@onstreamgallery.com

Types of Data Collected

Among the Personal Data collected by onstreamgallery.com, either autonomously or through third parties, are: Cookie; Usage Data; email; name; telephone number; Data provided during the use of the service.

Full details on each type of data collected are provided in the relevant sections of this privacy policy or by means of specific information texts displayed before collecting such data.
Personal Data may be freely provided by the User or, in case of Usage Data, automatically collected during the use of onstreamgallery.com.
Unless otherwise specified, all Data requested by onstreamgallery.com is mandatory. If the User refuses to provide such data, it may be impossible for onstreamgallery.com to provide the Service. In the event that onstreamgallery.com indicates that some Data are optional, Users are free to refrain from providing such Data, without this having any effect on the availability of the Service or on its performance.
Users who may have doubts as to which Data is mandatory are encouraged to contact the Owner.
The possible use of Cookies - or of other tracking tools - by onstreamgallery.com or by the owners of third party services used by onstreamgallery.com, unless otherwise specified, is aimed at providing the Service requested by the User, as well as for the further purposes described in this document and in the Cookie Policy, if available.

The User accepts responsibility for Personal Data obtained, published or shared by third parties through onstreamgallery.com and warrants that he/she is entitled to communicate or disseminate such Personal Data, thus releasing the Owner from any liability towards third parties.

Method and place of processing of collected data

Treatment modes

The Owner adopts appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data.
The treatment is carried out by means of computer and/or telematic instruments, with organizational methods and logics strictly related to the indicated purposes. In addition to the Data Controller, in some cases, other entities involved in the organization of onstreamgallery.com (administrative, sales, marketing, legal and system administration staff) or external entities (such as third party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may also have access to the Data (if necessary, Data Processors). The updated list of Data Processors can always be requested from the Data Controller.

Legal basis of processing

The Data Controller processes Personal Data relating to the User if one of the following conditions exists:

  • the User has given consent for one or more specific purposes; Note: in some jurisdictions, the Controller may be allowed to process Personal Data without the User's consent or another of the legal bases specified below, until the User opts out of such processing. However, this does not apply where the processing of Personal Data is governed by European legislation on the protection of Personal Data;
  • the processing is necessary for the execution of a contract with the User and/or the execution of pre-contractual measures;
  • the processing is necessary to fulfil a legal obligation to which the Controller is subject;
  • the processing is necessary for the performance of a task carried out in the public interest or in the exercise of public authority vested in the Data Controller;
  • the processing is necessary for the pursuit of the legitimate interest of the Owner or of third parties.

However, it is always possible to ask the Data Controller to clarify the concrete legal basis of each processing and in particular to specify whether the processing is based on law, provided for by a contract or necessary to conclude a contract.

Location

The Data are processed at the operational headquarters of the Owner and in any other place where the parties involved in the processing are located. For further information, please contact the Data Controller.
The User's Personal Data may be transferred to a country other than the one where the User is located. To obtain further information on the location of the processing You may refer to the section on details of the processing of Personal Data.

In case of higher protection, the User is entitled to obtain information on the legal basis of the transfer of Data outside the European Union or to an international organization of public international law or formed by two or more countries, such as the UN, as well as on the security measures adopted by the Owner to protect the Data.

If one of the transfers just described takes place, the User may refer to the respective sections of this document or ask the Data Controller for information by contacting him at the contact details given at the beginning.

Conservation period

The Data are processed and stored for the time required by the purposes for which they were collected.

Therefore:

  • Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User will be retained until the performance of such contract is completed.
  • Personal Data collected for purposes attributable to the legitimate interest of the Owner will be retained until such interest is satisfied. The User may obtain further information regarding the legitimate interest pursued by the Controller in the relevant sections of this document or by contacting the Controller.

When processing is based on the User's consent, the Data Controller may retain Personal Data for longer until such consent is revoked. In addition, the Data Controller may be obliged to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority.

At the end of the retention period the Personal Data will be deleted. Therefore, at the end of this period, the right of access, cancellation, rectification and the right to Data portability can no longer be exercised.

Purposes of the processing of collected data

The User's Data are collected to enable the Data Controller to provide the Service, comply with legal obligations, respond to requests or enforcement actions, protect its rights and interests (or those of Users or third parties), detect any malicious or fraudulent activities, as well as for the following purposes: Statistics, Displaying content from external platforms, Tag management, Remarketing and behavioral targeting, Content and functionality performance testing (A/B testing), Advertising, Contacting the User, Managing User databases, Payment management, Heat mapping and session recording, Hosting and backend infrastructure, Interaction with social networks and external platforms and Data Linking.

To obtain detailed information on the purposes of the processing and on the Personal Data processed for each purpose, the User may refer to the section "Details on the processing of Personal Data".

Personal Data Processing Details

Personal Data is collected for the following purposes and using the following services:

Data Link

This type of service allows the Owner to share Data with third party services mentioned within this privacy policy.
This causes Data to flow through these services and possibly be stored.

Zapier (Zapier, Inc.)

Zapier is a workflow automation service provided by Zapier, Inc. that automates the flow of data between (third-party) services.

Personal data processed: Data communicated during the use of the service.

Place of processing: United States - Privacy Policy

Category of personal information collected under the CCPA: Internet information.

This type of processing constitutes a "sale of data" ("sale") under the CCPA. In addition to the information contained in this clause, the User may consult the section describing California consumer rights for information regarding how to opt-out of the sale.

Contacting the User

Mailing list or newsletter (onstreamgallery.com)

By registering with the mailing list or the newsletter, the User's e-mail address shall be automatically added to a list of contacts to which e-mail messages containing information, including commercial and promotional information, relating to onstreamgallery.com may be sent. The User's e-mail address may also be added to this list as a result of his/her registration on onstreamgallery.com or after making a purchase.

Personal data processed: email; name.

Category of personal information collected under the CCPA: identifiers.

User database management

This type of services allows the Owner to create user profiles starting from an e-mail address, name or any other information the User provides to onstreamgallery.com, as well as to track the User's activities through statistical means. This Personal Data may also be cross-referenced with publicly available information about the User (such as social network profiles) and used to build private profiles which the Data Controller may display and use in order to improve onstreamgallery.com.
Some of these services may also allow the scheduled sending of messages to the User, such as e-mails based on specific actions performed on onstreamgallery.com.

HubSpot CRM (HubSpot, Inc.)

HubSpot CRM is a User database management service provided by HubSpot, Inc.

Personal data processed: email; telephone number; various types of data as specified in the privacy policy of the service.

Place of processing: United States - Privacy Policy

Category of personal information collected under the CCPA: identifiers; Internet information.

This type of processing constitutes a "sale of data" ("sale") under the CCPA. In addition to the information contained in this clause, the User may consult the section describing California consumer rights for information regarding how to opt-out of the sale.

HubSpot Lead Management (HubSpot, Inc.)

HubSpot Lead Management is a User database management service provided by HubSpot, Inc.

Personal Data processed: various types of Data as specified in the privacy policy of the service.

Place of processing: United States - Privacy Policy

Category of personal information collected under the CCPA: Internet information.

This type of processing constitutes a "sale of data" ("sale") under the CCPA. In addition to the information contained in this clause, the User may consult the section describing California consumer rights for information regarding how to opt-out of the sale.

ActiveCampaign (ActiveCampaign, Inc.)

ActiveCampaign is a User database management service provided by ActiveCampaign, Inc.

Personal Data processed: email; Tracking Tool; various types of Data as specified in the privacy policy of the service.

Place of processing: United States - Privacy Policy

Category of personal information collected under the CCPA: identifiers; Internet information.

This type of processing constitutes a "sale of data" ("sale") under the CCPA. In addition to the information contained in this clause, the User may consult the section describing California consumer rights for information regarding how to opt-out of the sale.

Payment management

Unless otherwise specified, onstreamgallery.com processes all payments by credit card, bank transfer or other means through external payment service providers. In general, and unless otherwise specified, Users are requested to provide payment details and personal information directly to such payment service providers.
Onstreamgallery.com is not involved in the collection and processing of such information: instead, it will only receive a notification from the relevant payment service provider that the payment has been made.

PayPal (Paypal)

PayPal is a payment service provided by PayPal Inc., which allows the User to make payments online.

Personal Data processed: various types of Data as specified in the privacy policy of the service.

Place of treatment: See Paypal - Privacy Policy

Category of personal information collected under the CCPA: Internet information.

Stripe (Stripe Inc)

Stripe is a payment service provided by Stripe Inc.

Personal Data processed: various types of Data as specified in the privacy policy of the service.

Place of processing: United States - Privacy Policy

Category of personal information collected under the CCPA: Internet information.

Tag management

This type of service is functional to the centralized management of tags or scripts used on onstreamgallery.com.
The use of such services implies the flow of User Data through them and, if applicable, their retention.

Google Tag Manager (Google Ireland Limited)

Google Tag Manager is a tag management service provided by Google Ireland Limited.

Personal data processed: Usage Data.

Place of processing: Ireland - Privacy Policy

Category of personal information collected under the CCPA: Internet information.

This type of processing constitutes a "sale of data" ("sale") under the CCPA. In addition to the information contained in this clause, the User may consult the section describing California consumer rights for information regarding how to opt-out of the sale.

Segment (Segment.io Inc.)

Segment is a tag management service provided by Segment.io, Inc.

Personal Data Processed: Usage Data; Tracking Tool.

Place of processing: United States - Privacy Policy

Category of personal information collected under the CCPA: Internet information.

This type of processing constitutes a "sale of data" ("sale") under the CCPA. In addition to the information contained in this clause, the User may consult the section describing California consumer rights for information regarding how to opt-out of the sale.

Heat mapping and session recording

Heat mapping services are used to identify the areas of onstreamgallery.com with which Users interact most frequently, in order to detect which areas attract the greatest interest. These services allow monitoring and analyzing traffic data and are used to track the User's behaviour.
Some of these services may record sessions and make them available for later viewing.

Hotjar Heat Maps & Recordings (Hotjar Ltd.)

Hotjar is a heat mapping and session recording service provided by Hotjar Ltd.
Hotjar respects generic "Do Not Track" headers. This means that the browser can instruct the script not to collect any User data. This is a setting that is available in all major browsers. More information about opting out of Hotjar is available here.

Personal Data processed: Cookies; Usage Data; various types of Data as specified by the privacy policy of the service.

Place of processing: Malta Privacy PolicyOptOut

Category of personal information collected under the CCPA: Internet information.

This type of processing constitutes a "sale of data" ("sale") under the CCPA. In addition to the information contained in this clause, the User may consult the section describing California consumer rights for information regarding how to opt-out of the sale.

Hosting and backend infrastructure

These services are intended to host data and files that allow onstreamgallery.com to operate, allow for their distribution and provide an infrastructure that is ready to be used for providing specific functionalities of onstreamgallery.com.

Some of the services listed below, if any, may operate on geographically dispersed servers, making it difficult to determine the actual location where Personal Data is stored.

Google Cloud Storage (Google Ireland Limited)

Google Cloud Storage is a hosting service provided by Google Ireland Limited.

Personal Data processed: various types of Data as specified in the privacy policy of the service.

Place of processing: Ireland - Privacy Policy

Category of personal information collected under the CCPA: Internet information.

Interaction with social networks and external platforms

This type of service allows you to interact with social networks or other external platforms directly from the pages of onstreamgallery.com.
Interactions and information acquired by onstreamgallery.com are in any case subject to the privacy settings of the User relating to each social network.
This type of service may still collect traffic data for the pages where the service is installed, even when Users do not use it.
We recommend that you disconnect from the respective services to ensure that data processed onstreamgallery.com is not linked to your profile.

PayPal button and widget (Paypal)

The PayPal button and widgets are services for interaction with the PayPal platform, provided by PayPal Inc.

Personal data processed: Cookies; Usage Data.

Place of treatment: See Paypal - Privacy Policy

Category of personal information collected under the CCPA: Internet information.

This type of processing constitutes a "sale of data" ("sale") under the CCPA. In addition to the information contained in this clause, the User may consult the section describing California consumer rights for information regarding how to opt-out of the sale.

Advertisement

This type of service allows for the use of User Data for commercial communication purposes. These communications are displayed on onstreamgallery.com in the form of banners and other forms of advertising, also in relation to the User's interests.
This does not mean that all Personal Data will be used for this purpose. Data and conditions of use are indicated below.
Some of the services mentioned below may use cookies or other identifiers in order to identify the User or to use the behavioral retargeting technique, i.e. displaying customized advertisements based on the User's interests and behaviour, also collected outside onstreamgallery.com. For further information, we suggest that you check the privacy policy of the respective services.
In addition to the opt-out features provided by the services below, the User may opt-out by visiting the opt-out page of the Network Advertising Initiative

Users may also opt out of certain advertising features through the corresponding device configuration options, such as mobile device advertising configuration options or generic advertising configuration.

Facebook Similar Public (Facebook Ireland Ltd)

Facebook's Similar Audience is an advertising and behavioural targeting service provided by Facebook Ireland Ltd that uses the Data collected through Facebook's Custom Audience service in order to show advertisements to Users with similar behaviours to Users who are already in a Custom Audience list based on their previous use of onstreamgallery.com or their interaction with relevant content through Facebook applications and services.
Based on this Data, customized advertisements will be shown to Users suggested by Facebook's Similar Audience.

Users can opt out of Facebook cookies for ad personalization by visiting this opt-out page

Personal data processed: Cookies; Usage Data.

Place of processing: Ireland - Privacy PolicyOptOut

Category of personal information collected under the CCPA: Internet information.

This type of processing constitutes a "sale of data" ("sale") under the CCPA. In addition to the information contained in this clause, the User may consult the section describing California consumer rights for information regarding how to opt-out of the sale.

Remarketing and behavioral targeting

This type of service allows onstreamgallery.com and its partners to communicate, optimize and serve advertisements based on the User's past use of onstreamgallery.com.
This activity is facilitated by tracking of Usage Data and the use of Tracking Tools to collect information which is then transferred to partners that perform remarketing and behavioral targeting activities.
Some services offer an email list-based remarketing option.
In addition to the opt-out features offered by the services below, you may opt-out by visiting the Network Advertising Initiative opt-out page.

Users may also opt out of certain advertising features through the corresponding device configuration options, such as mobile device advertising configuration options or generic advertising configuration.

Facebook Remarketing (Facebook Ireland Ltd)

Facebook Remarketing is a remarketing and behavioral targeting service provided by Facebook Ireland Ltd that links the activity of onstreamgallery.com with the Facebook advertising network.

Personal data processed: Cookies; Usage Data.

Place of processing: Ireland - Privacy PolicyOptOut

Category of personal information collected under the CCPA: Internet information.

This type of processing constitutes a "sale of data" ("sale") under the CCPA. In addition to the information contained in this clause, the User may consult the section describing California consumer rights for information regarding how to opt-out of the sale.

Facebook Custom Audience (Facebook Ireland Ltd)

Facebook's Personalized Audience is a remarketing and behavioral targeting service provided by Facebook Ireland Ltd that links onstreamgallery.com's activity with Facebook's advertising network.

Users can opt out of Facebook cookies for ad personalization by visiting this opt-out page

Personal data processed: Cookies; email.

Place of processing: Ireland - Privacy PolicyOptOut

Category of personal information collected under the CCPA: identifiers; Internet information.

This type of processing constitutes a "sale of data" ("sale") under the CCPA. In addition to the information contained in this clause, the User may consult the section describing California consumer rights for information regarding how to opt-out of the sale.

Remarketing with Google Analytics (Google Ireland Limited)

Remarketing with Google Analytics is a remarketing and behavioral targeting service provided by Google Ireland Limited that links the tracking activity performed by Google Analytics and its Cookies with the Google Ads advertising network and the Doubleclick Cookie.

Personal data processed: Cookies; Usage Data.

Place of processing: Ireland - PrivacyPolicyOpt Out

Category of personal information collected under the CCPA: Internet information.

This type of processing constitutes a "sale of data" ("sale") under the CCPA. In addition to the information contained in this clause, the User may consult the section describing California consumer rights for information regarding how to opt-out of the sale.

Google Ads Remarketing (Google Ireland Limited)

Google Ads Remarketing is a remarketing and behavioral targeting service provided by Google Ireland Limited that links onstreamgallery.com's activity to the Google Ads advertising network and to the DoubleClick cookie.

Users may opt out of the use of Google cookies for ad personalization by visiting Google's Ads Settings.

Personal data processed: Cookies; Usage Data.

Place of processing: Ireland - Privacy PolicyOptOut

Category of personal information collected under the CCPA: Internet information.

This type of processing constitutes a "sale of data" ("sale") under the CCPA. In addition to the information contained in this clause, the User may consult the section describing California consumer rights for information regarding how to opt-out of the sale.

Statistics

The services contained in this section allow the Data Controller to monitor and analyse traffic data and serve to keep track of the User's behaviour.

Google Analytics (Google Ireland Limited)

Google Analytics is a web analytics service provided by Google Ireland Limited ("Google"). Google uses the Personal Data collected in order to track and examine the use of onstreamgallery.com, compile reports and share them with other services developed by Google.
Google may use Personal Data to contextualize and customize the ads in its advertising network.

Personal data processed: Cookies; Usage Data.

Place of processing: Ireland - Privacy PolicyOptOut

Category of personal information collected under the CCPA: Internet information.

This type of processing constitutes a "sale of data" ("sale") under the CCPA. In addition to the information contained in this clause, the User may consult the section describing California consumer rights for information regarding how to opt-out of the sale.

Facebook Ads conversion tracking (Facebook pixel) (Facebook Ireland Ltd)

The Facebook Ads conversion tracking (Facebook pixel) is a statistical service provided by Facebook Ireland Ltd that links data from the Facebook ad network with actions taken within onstreamgallery.com. The Facebook pixel monitors conversions that can be attributed to Facebook Ads, Instagram and Audience Network ads.

Personal data processed: Cookies; Usage Data.

Place of processing: Ireland - Privacy Policy

Category of personal information collected under the CCPA: Internet information.

This type of processing constitutes a "sale of data" ("sale") under the CCPA. In addition to the information contained in this clause, the User may consult the section describing California consumer rights for information regarding how to opt-out of the sale.

Google Ads Conversion Tracking (Google Ireland Limited)

Google Ads conversion tracking is a statistical service provided by Google Ireland Limited that links data from the Google Ads network with actions performed within onstreamgallery.com.

Personal data processed: Cookies; Usage Data.

Place of processing: Ireland - Privacy Policy

Category of personal information collected under the CCPA: Internet information.

This type of processing constitutes a "sale of data" ("sale") under the CCPA. In addition to the information contained in this clause, the User may consult the section describing California consumer rights for information regarding how to opt-out of the sale.

FullStory (FullStory, Inc.)

FullStory is a statistics and heat mapping service provided by FullStory, Inc.
FullStory maps the frequency with which Users interact with different areas of onstreamgallery.com, thus allowing the Data Controller to draw conclusions about their interests and preferences. FullStory also allows recording mapping sessions which can then be reproduced visually at a later time.

Personal Data Processed: Usage Data; Tracking Tool.

Place of processing: United States - Privacy PolicyOptout

Category of personal information collected under the CCPA: Internet information.

This type of processing constitutes a "sale of data" ("sale") under the CCPA. In addition to the information contained in this clause, the User may consult the section describing California consumer rights for information regarding how to opt-out of the sale.

Performance testing of content and functionality (A/B testing)

The services contained in this section allow the Data Controller to track and analyze the User's response, in terms of traffic or behaviour, to changes in the structure, text or any other component of onstreamgallery.com.

Google Optimize (Google Ireland Limited)

Google Optimize is an A/B testing service provided by Google Ireland Limited ("Google").

Google may use Personal Information to contextualize and personalize ads in its ad network.

Personal data processed: Cookies; Usage Data.

Place of processing: Ireland - Privacy Policy

Category of personal information collected under the CCPA: Internet information.

This type of processing constitutes a "sale of data" ("sale") under the CCPA. In addition to the information contained in this clause, the User may consult the section describing California consumer rights for information regarding how to opt-out of the sale.

Displaying content from external platforms

This type of service allows you to display contents hosted on external platforms directly from the pages of onstreamgallery.com and to interact with them.
This type of service may still collect web traffic data relating to the pages where the service is installed, even when users do not use it.

Google Fonts (Google Ireland Limited)

Google Fonts is a font display service operated by Google Ireland Limited that allows onstreamgallery.com to integrate such content into its pages.

Personal Data processed: Usage Data; various types of Data as specified by the privacy policy of the service.

Place of processing: Ireland - Privacy Policy

Category of personal information collected under the CCPA: Internet information.

This type of processing constitutes a "sale of data" ("sale") under the CCPA. In addition to the information contained in this clause, the User may consult the section describing California consumer rights for information regarding how to opt-out of the sale.

Further information on Personal Data

Sale of goods and services online

The Personal Data collected is used to provide services to the User or to sell products, including payment and delivery. The Personal Data collected in order to finalize the payment may be those relating to the credit card, to the bank account used for the transfer or to other payment instruments provided for. The Payment Data collected by onstreamgallery.com depends on the payment system used.

User Rights

Users may exercise certain rights with reference to the Data processed by the Data Controller.

In case of superior protection, the User may exercise all the rights set out below. In all other cases, the User may contact the holder to find out which rights apply in his/her case and how to exercise them.

In particular, the User has the right to:

  • revoke consent at any time. The User may revoke the consent to the processing of their Personal Data previously expressed.
  • oppose the processing of their Data. You may object to the processing of your Data when it is done on a legal basis other than consent. Further details on the right to object are set out in the section below.
  • access to their own Data. The User has the right to obtain information on the Data processed by the Data Controller, on certain aspects of the processing and to receive a copy of the Data processed.
  • verify and request correction. The User may verify the correctness of his/her own Data and request that they be updated or corrected.
  • obtain the limitation of the treatment. When certain conditions are met, the User may request the restriction of the processing of its Data. In this case, the Data Controller will not process the Data for any purpose other than their preservation.
  • obtain the cancellation or removal of their Personal Data. When certain conditions are met, the User may request the deletion of their Data by the Data Controller.
  • receive their Data or have them transferred to another owner. The User has the right to receive his or her Data in a structured, commonly used and machine-readable format and, where technically feasible, to have it transferred without hindrance to another controller. This provision is applicable when the Data are processed by automated tools and the processing is based on the User's consent, on a contract to which the User is a party or on contractual measures related to it.
  • Propose a complaint. The User may lodge a complaint with the competent data protection supervisory authority or take legal action.

Details of the right to object

When Personal Data are processed in the public interest, in the exercise of public powers vested in the Data Controller or to pursue a legitimate interest of the Data Controller, Users have the right to object to the processing for reasons related to their particular situation.

Users are reminded that if their Data are processed for direct marketing purposes, they can object to the processing without providing any reason. To find out whether the Controller processes data for direct marketing purposes, Users may refer to the respective sections of this document.

How to exercise your rights

In order to exercise the User's rights, Users may address a request to the contact details of the Controller indicated in this document. Requests are filed free of charge and processed by the Controller as soon as possible, in any case within one month.

Applicability of the higher protection level

While most of the provisions of this document apply to all Users, some are expressly subject to the applicability of a higher level of protection to the processing of Personal Data.

This higher level of protection is always guaranteed when the treatment:

  • is performed by a Data Controller established in the EU; or
  • concerns Personal Data of Users located in the EU and is functional to the offer of goods or services against payment or free of charge to such Users; or
  • concerns Personal Data of Users located in the EU and allows the Data Controller to monitor the behaviour of such Users to the extent that such behaviour takes place within the EU.

Cookie Policy

Onstreamgallery.com makes use of Tracking Tools. To learn more, the User may consult the Cookie Policy.

Further information on treatment

Defense in court

The User's Personal Data may be used by the Data Controller in judicial proceedings or in the phases preceding such proceedings in order to protect itself against misuse of onstreamgallery.com or of the connected Services by the User.
The User declares that he/she is aware that the Data Controller may be required to disclose such Data by order of public authorities.

Specific information

Upon the User's request, in addition to the information contained in this privacy policy, onstreamgallery.com may provide the User with additional and contextual information regarding specific Services or the collection and processing of Personal Data.

System logs and maintenance

For operating and maintenance purposes, onstreamgallery.com and any third party services used by it may collect system logs, i.e. files recording interactions and which may also contain Personal Data, such as your IP address.

Information not contained in this policy

Further information in relation to the processing of Personal Data may be requested at any time from the Data Controller using the contact details.

Response to "Do Not Track" requests

Onstreamgallery.com does not support "Do Not Track" requests.
In order to find out whether any third party services used support "Do Not Track" requests, the User is advised to consult their respective privacy policies.

Changes to this privacy policy

The Data Controller reserves the right to amend this Privacy Policy at any time by notifying the Users on this page and, if possible, on onstreamgallery.com as well as, when technically and legally feasible, by sending a notice to the Users through one of the contact details provided by the Data Controller. Therefore, please check this page frequently, referring to the last modification date indicated at the bottom of the page.

If the modifications concern processing operations whose legal basis is consent, the Data Controller shall collect the User's consent again, if necessary.

Information for California consumers

This part of the document integrates and supplements the information contained in the rest of the Privacy Policy and is provided by the company that operates onstreamgallery.com and, where applicable, by its parent company and its subsidiaries and affiliates (for the purposes of this section, collectively referred to as "we", "our" or "us").

The provisions contained in this section apply to all Users who are deemed to be consumers residing in the state of California, United States of America, pursuant to the "California Consumer Privacy Act of 2018" (such Users are referred to below simply as "you", "your", "you" or "your"), and, for those Users, these provisions prevail over any other possibly divergent or conflicting provisions contained in this privacy policy.

This section of the document uses the term "personal information" as defined by the California Consumer Privacy Act (CCPA).

Categories of personal information collected, disclosed or sold

This section summarizes the categories of personal information that we have collected, disclosed or "sold" under the CCPA and the related purposes of processing. You can find detailed information about these activities in the section called "Personal Data Processing Details" in this document.

Information we collect: the categories of personal information we collect

We have collected the following categories of personal information about you: identifiers and Internet information.

We will not collect additional categories of personal information without first notifying you of a new disclosure.

How we collect information: what are the sources of the personal information we collect?

We collect the above categories of personal information directly or indirectly from you when you use onstreamgallery.com.

For example, you directly provide us with your personal information when you submit requests through any form on onstreamgallery.com. Moreover, you indirectly provide us with personal information when you browse onstreamgallery.com, as personal information about you is automatically observed and collected. Finally, we may collect your personal information from third parties that work with us in connection with the provision of the Service or the operation of onstreamgallery.com and its features.

How we use the information we collect: We share and disclose your personal information with third parties for operational purposes.

We may disclose your personal information to third parties for operational and service purposes. In this case, we will enter into a written contract with that third party that obligates the recipient of your personal information to keep that information confidential and not to use it for any purpose other than necessary to carry out the contract.

We may also disclose your personal information to third parties when you request or authorize us to do so in order to provide you with our Service.

For further information on the purposes of processing, please refer to the relevant section of this document.

Sale of your personal information

For the purposes of this document, the term "sale" means "to sell, assign, release, make public, disclose, disseminate, make available, transfer, or otherwise communicate orally, in writing, or by electronic means, personal information of a consumer by one business to another business or to a third party, for compensation or other gain."

This means that, for example, a sale can occur whenever an application runs advertisements, performs statistical analysis on its traffic or views, or simply uses tools such as social network plug-ins and similar tools.

Your right to opt-out of the sale of your personal information

You have the right to opt-out of the sale of your personal information. This means that whenever you ask us not to sell your information, we will carry out your request.
Such requests can be made freely, at any time, and without submitting any request subject to verification, simply by following the instructions below.

Instructions for opting out of the sale of your personal information

If you wish to receive further information or to exercise your right to opt-out from all the sales made by onstreamgallery.com, both online and offline, you may contact us using the contact details provided in this document.

What are the purposes for which we use your personal information?

We may use your personal information to allow onstreamgallery.com and its features to function properly ("operational purposes"). In such cases, your personal information will be processed in a manner that is adequate and proportionate to the purposes for which it was originally collected and strictly within the limits of compatible purposes.

We may also use your personal information for other reasons, such as for business purposes (as set out in the "Details of the Processing of Personal Data" section within this document), as well as to comply with the law and defend our rights before the relevant authorities when our rights or interests are threatened or when we suffer harm.

We will not use your personal information for different, unrelated or incompatible purposes without first providing you with a new notice.

Your privacy rights in California and how to exercise them

Right to knowledge and portability

You have the right to know the following:

  • the categories of personal information we collect about you and the sources of that information, the purposes for which we use your personal information and with whom we share it;
  • if we sell or disclose personal information to third parties for operational purposes, we will provide you with two separate lists in which we will disclose to you:
  • for sale, the categories of personal information disclosed to each category of recipient; and
  • for communication to third parties for operational purposes, the categories of personal information obtained from each category of recipients;

The above information will be limited to personal information collected or used within the last 12 months.

Where our response is provided electronically, the information contained therein will be "portable", i.e. delivered in a compatible format so that you can transmit the information to other entities without hindrance - provided this is technically feasible.

Right to request deletion of your personal information

You are entitled to request the deletion of any of your personal information, with the exceptions provided for by law (such as, by way of example, if the information is used for error identification and repair onstreamgallery.com, to detect security incidents, for purposes of protection against fraudulent or unlawful activities, to exercise certain rights, etc.).

If no statutory exception applies, following the exercise of your right, we will delete your personal information and ask our suppliers to do the same.

How to exercise your rights

To exercise the rights described above, you must make a verifiable request by contacting us using the contact information provided herein.

In order to respond to your request, it is necessary for us to be able to identify you. Therefore, you can only exercise the above rights by submitting a verifiable request that must:

  • provide sufficient information to enable us to reasonably verify that you are the person to whom the personal information we have collected relates or an authorised representative of that person;
  • describe your request in sufficient detail for us to understand, evaluate and respond correctly to what you are asking.

We will not respond to any request unless we are able to verify your identity and confirm that the information we hold about you is accurate.

If you cannot personally submit a verifiable request, you may delegate a person registered with the "California Secretary of State" to do so on your behalf.

If you are an adult, you can make a verifiable request on behalf of those who fall under your parental authority.

A maximum of 2 applications may be submitted within 12 months.

How and in how long we will handle your request

Within 10 days we will confirm that we have received your request and provide you with information on how we will process it.

We will respond on the merits of your request within 45 days of receiving it. If we need more time, we will explain why and let you know how much time we need. In this regard, please note that it may take up to 90 days to process your request.

Our communications will cover the previous 12 month period.

If we deny your request, we will explain the reason for the denial.

We will not charge any fee to process or respond to your verifiable request unless the request is manifestly unfounded or excessive. In such cases, we may charge a reasonable fee, or deny the request. In either case, we will notify you of our decisions and explain the reasons for them.

Information for Users residing in Brazil

This section of the document supplements and integrates the information contained in the rest of the Privacy Policy and is provided by the entity that operates onstreamgallery.com and, where applicable, by its parent company and its subsidiaries and affiliates (for the purposes of this section, collectively referred to as "we", "our" or "us").
The provisions contained in this section apply to all Users who are residents of Brazil, within the meaning of the "Lei Geral de Proteção de Dados" (such Users are referred to below simply as "you", "your", "you" or "your"). For such Users, these provisions take precedence over any other possibly divergent or conflicting provisions contained in this privacy policy.
In this part of the document, the term "personal information" as defined by the Lei Geral de Proteção de Dados(LGPD) is used.

Legal basis on which we process your personal information

We process your personal information only where one of the legal bases for such processing exists. The legal bases are as follows:

  • your consent to the processing activities in question;
  • the fulfilment of legal obligations that we are required to meet;
  • the execution of rules dictated by laws or regulations or by contracts, agreements or other similar legal instruments;
  • studies conducted by research organisations, preferably on anonymised personal information;
  • the performance of a contract and related pre-contractual obligations, if you are a party to that contract;
  • the exercise of our rights in court, in administrative proceedings or in arbitration;
  • the defense or physical safety of yourself or a third party;
  • health protection - in the context of procedures carried out by health entities or professionals;
  • our legitimate interests, provided that your fundamental rights and freedoms do not override those interests; and
  • credit protection.

To find out more about the legal basis, you can contact us at any time using the contact details provided in this document.

Categories of personal information processed

To find out what categories of personal information are processed, you can refer to the "Details of Personal Data Processing" section in this document.

Why we process your personal information

To find out why we process your personal information, please refer to the "Details of the Processing of Personal Data" and "Purposes of the Processing of Data Collected" sections of this document.

Your privacy rights in Brazil, how to submit a request and how we will handle it

Your privacy rights in Brazil

You have the right to:

  • obtain confirmation of the existence of processing activities concerning your personal information;
  • access your personal information;
  • obtain correction of your incomplete, inaccurate or outdated personal information;
  • obtain the anonymization, blocking or deletion of unnecessary or excessive personal information, or information that is processed contrary to the provisions of the LGPD;
  • obtain information regarding the possibility of giving or refusing your consent and the consequences thereof;
  • obtain information about the third parties with whom we share your personal information;
  • obtain, upon your explicit request, the portability of your personal information (except for anonymized information) to other providers of products or services, provided that our trade and business secrets are safeguarded;
  • obtain the erasure of personal information processed where the processing was carried out on the basis of your consent, unless one or more of the exceptions set out in Article 16 LGPD apply;
  • revoke your consent at any time;
  • lodge a complaint regarding your personal information with the ANPD (National Data Protection Authority) or a consumer protection body;
  • oppose processing activities in cases where such processing is not carried out in accordance with the provisions of the law;
  • require clear and adequate information about the criteria and procedures used in automated decision-making; and
  • request a review of decisions that affect your interests made solely on the basis of automated decision-making about your personal information. These include decisions to profile you personally, professionally, as a consumer or creditor, or other aspects of your personality.

You will never be discriminated against, or suffer in any way any treatment that is unfavourable to you, as a result of exercising your rights.

How to submit a request

You can make an explicit request to exercise your rights free of charge, at any time, using the contact details in this document or through your legal representative.

How and in how long we will handle your request

We will endeavour to respond to your request as quickly as possible.
In any event, if it is impossible for us to do so, we will ensure that you are informed of the factual or legal reasons why we are unable to comply with or act on your request immediately. If your personal information is not processed by us, we will, if we are able to do so, tell you to whom you should address your request.

If you decide to make a request for access or a request for confirmation of the existence of processing of personal information, please ensure that you specify whether you prefer to receive your personal information in electronic or paper format.
You should also let us know if you would like an immediate response, in which case you will receive a simplified response, or if you would like a full disclosure.
In the latter case, we will respond within 15 days from the time of your request, providing you with all the information regarding the origin of your personal information, whether or not we can confirm the existence of personal information about you, all the criteria used for processing and the purposes of such processing, while safeguarding our trade and business secrets.

If you decide to make a request to have your personal information corrected, deleted, anonymized or blocked, we will make sure that we immediately inform the other parties with whom we have shared your personal information of your request so that they may also comply with your request - unless such communication is impossible or unduly burdensome for us.

Transfer of personal information outside Brazil where permitted by law

We may transfer your personal information outside the Brazilian territory in the following cases:

  • where the transfer is necessary for international legal cooperation between intelligence, investigation and criminal procedure services, as provided for in the instruments made available by international law;
  • when the transfer is necessary to protect your life or physical safety or that of a third party;
  • when the transfer is authorized by the ANPD;
  • where the transfer results from an obligation undertaken in the context of an international cooperation agreement;
  • where the transfer is necessary for the exercise of public policy or the performance of a public service;
  • when the transfer is necessary for the fulfilment of a legal obligation, the execution of a contract and related pre-contractual obligations, or the normal exercise of rights in judicial, administrative or arbitration proceedings.

Definitions and legal references

Personal Data (or Data)

Personal data is any information that, directly or indirectly, even in connection with any other information, including a personal identification number, makes a natural person identified or identifiable.

Usage Data

This information is automatically collected through onstreamgallery.com (including by third party applications integrated in onstreamgallery.com), including: IP addresses or domain names of the computers used by the User when connecting to onstreamgallery.com, URI (Uniform Resource Identifier) notation addresses, the time of the request, the method used to forward the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server's response (successful, error, etc.), the country of origin, the characteristics of the browser and the operating system used by the visitor, the various time stamps (for example, the time spent on each page) and details of the route followed by the visitor.), the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal connotations of the visit (e.g. the time spent on each page) and the details of the itinerary followed within the Application, with particular reference to the sequence of pages consulted, the parameters relating to the operating system and the User's IT environment.

User

The individual using onstreamgallery.com who, unless otherwise specified, is the Data Subject.

Interested

The natural person to whom the Personal Data relates.

Data Processor (or Manager)

The natural person, legal entity, public administration and any other entity that processes personal data on behalf of the Owner, according to what is set out in this privacy policy.

Data Controller (or Holder)

The natural or legal person, public authority, service or other body which, individually or jointly with others, determines the purposes and means of the processing of personal data and the instruments used, including the security measures governing the functioning and use of onstreamgallery.com. The Data Controller, unless otherwise specified, is the owner of onstreamgallery.com.

onstreamgallery.com (or this Application)

The hardware or software tool by which Users' Personal Data are collected and processed.

Service

The Service provided by onstreamgallery.com as defined in the relevant terms (if any) on this website/application.

European Union (or EU)

Unless otherwise specified, any reference in this document to the European Union shall be deemed to extend to all current member states of the European Union and the European Economic Area.

Cookie

Cookies are Tracking Tools that consist of small pieces of data stored within the User's browser.

Tracking Tool

Tracking Tool means any technology - e.g. cookies, unique identifiers, web beacons, embedded scripts, e-tags and fingerprinting - that allows Users to be tracked, for example by collecting or storing information on the User's device.

Legal references

This privacy policy is prepared on the basis of multiple legislative orders, including Articles 13 and 14 of Regulation (EU) 2016/679.

Unless otherwise specified, this Privacy Policy applies exclusively to onstreamgallery.com.

Last modified: 8 April 2021