Back to top

Privacy Policy

Ondaluce Customer Information

Disclosure for the processing of personal data under EU Regulation No. 679/2016

This document represents the disclosure and request for consent under article 13 and below of EU Regulation No. 2016/679 (GDPR), relating to the protection of the processing of personal data.

holder of the treatment

The owner of the processing of personal data is Ciciriello S.r.l., S.P 231 km. 49-700 76123 ANDRIA (BT) P.IVA 0715429072
5 E-mail address: info@ciciriellogroup.com

Purpose of treatment

Your personal data, freely communicated and acquired by the holder due to your request for marketing advice and communication online and offline, will be treated lawfully and fairly, as required by the the following purposes:

Statutory compliance

Service communications and useful information to customers

Any newsletters if expressly authorized.

Your data will only be used for the performance of the activity you requested.

What data can Wave ask you

In order to perform the tasks indicated by the owner, the owner must ask for some data concerning her.

This data can be:

first name, last name, email address, phone number, tax code, and SALES tax number.

This data will allow Waveluce to proceed with the activity you requested.

If you decide not to provide the required data Wavelight:

You may not be able to provide the activity or service you requested;

You may be able to provide the activity or service you requested only partially.

The data collected will be processed in accordance with GDPR, will be updated, and will be processed only for the purposes indicated from time to time and accepted by you.

Methods of Treatment

The data you communicate will be processed in full respect of data security and confidentiality.

It is specified in this regard that:

the data you provide will not be disclosed to third parties without your express consent.

Ondaluce’s employees will be able to process its data only according to the indications provided by Ondaluce

The data is stored and protected by appropriate protection measures as indicated by GDPR, both with the help of electronic and computer tools as well as manuals.

Legal basis of the treatment

The legal basis for the processing of your personal data is based:

request for a service you have formulated;

consent given by the person concerned to the processing of data;

on a legal obligation.

Mandatory or optional nature of data delivery

To provide you with the required service Wavelight needs to use its data. You
can freely choose if and what data to provide. In
the event that you decide not to provide all the data requested by Waveluce, you will not be able to provide the service and carry out the required task.

Communicating data to third parties

Your personal data will be processed by the Controller of the Treatment, any processors appointed by the same nominee and any strictl
y authorised processors. Your data may be disclosed following inspections or checks (if required), to all inspection bodies responsibl
e for checks and checks relating to the regularity of legal requirements. Your data may also be communicated to companies, professional firms, freelancers who provide consulting and operational assistance activities (such as example and not exhaustive web masters, IT technicians, “It’s a good place to be,” he said. institutional functions within the limits set by law or regulations. Y
our personal data is not disclosed.

Subscribe to the newsletter

Wavelight periodically sends subscribers to its newsletter information, news, discount codes, event invitations and promotions via an em
ail. To receive these communications, you must authorize Wave to use your email address.


The user through the subscription to the newsletter will be placed in special lists in order to receive targeted information related to their activity.

Retention times

The Owner will treat personal data for the time it takes to fulfil the above purposes and your personal data will be retained for a period of 10 (ten) years from termination of the relationship or in that different measure that should be imposed by the law.

As for sending the newsletter, the treatment will cease:

with the simple deletion from the mailing list (to be made via the delete link present in each communication);

when Wavelight decided to stop sending the newsletter.

Existence of automated decision-making

There is no automated decision-making process.


The Owner has taken appropriate security measures, both digital and physical, to protect your data against the risk of loss, abuse or alteration.

Technical tools used

Wave light uses for data management and storage for administrative and organizational software purposes in the cloud. T
hese systems respond and follow the privacy policies and policies of their respective manufacturers.

The servers of the software used may be allocated in non-EU territories.

Intention of the Owner of The Personal Data Processing on Data Transfer

The Controller will not transfer your personal data to a third country or to an international organization.

Owner and Responsible for Treatment

The data controller is CicirielloGroup, based in Andria, S.P. 231 KM 49.700
.Contact data of the Controller of the treatment, m
p.comThe designated treatment manager for the feedback to the person in case of exercise of the rights, is Simone Manfroni, simone.manfroni@gmail.com

Access right

You have the right to ask the controller whether personal data about him is being processed and if so to gain
access to it a
nd the following i
nformation: recipients or categories of recipients to whom personal data has been or will
be disclosed, particularly if recipients from third countries or international
organisations; or, if it is not possible, the criteria used to determine that period; they relate to or to oppose thei
r treatment;’ the right to com
plain to a supervisory authority; “I think it’s a good t
hing that we’re going to be able to do that,” he said. If personal data is transferred to a third country or to an international organisation
, you have the right to be informed of the existence of adequate guarantees under Article 46 relating to the transfer.

Lucel specifies that:

It does not disclose users’ personal data to international organizations or third countries;

At any time, you have the opportunity to request the correction or deletion of your personal data by sending a written communication to info@ciciriellogroup.com or by writing to the following address: Ciciriello S.r.l., S.P 231 km. 76123 ANDRIA (BT).

Personal data is not collected with fully automated procedures.

Right to cancel and right to rectify

You have the right to obtain from the holder of the treatment:

correcting the data, if they are incorrect

deletion of your personal data.

For the exercise of this right you can send a written request to info@ciciriellogroup.com or by writing to the following address: Ciciriello S.r.l., S.P 231 km. 76123 ANDRIA (BT).

The holder of the treatment will provide, without delay, in full compliance with art. 17 of the European Regulation at the requested cancellation.

Right to restrict treatment

The person concerned has the right to obtain from the controller the limitation of the treatment itself
in the following cases: ‘the person disputes the accuracy of his data: for the time it takes the controlle
r to verify its accuracy; In the event of an offence, the person objected to the cancel
lation and called for its use to be restricted. 21 paragraph 1 pending verification of whether the rightful reasons of the controller were prevalent in relation to those of the person concerned.

Luceon states that:

The processing of personal data takes place only with the release of the user’s consent, only for the purposes expressed from time to time at the time of the collection of personal data. If you consider that you exercise the right to restrict the treatment, you may send a written request to info@ciciriellogroup.com or by writing to the following address: Ciciriello S.r.l., S.P 231 km. 49-700 76123 ANDRIA (BT)

Right to make complaint

You have the right to complain to the Supervisory Authority.

How rights are exercised

At any time, you may exercise the rights reserved for you, enshrined in art. 15 of the EU Regulation 2016/679 – Right to access personal data.
The exercise of rights can be exercised by writing to the e-mail address: info@ciciriellogroup.com or by writing to the following address: Ciciriello S.r.l., S.P 231 km. The full text of
the 2016/679 EU Regulation is available at ciciriello S.r.l., S.P 231 km. 76123 ANDRIA (BT) and on the www.garanteprivacy.it website.