This policy describes how the website https://oobexr.com is managed with regard to the processing of personal data of users who visit it. This notice is provided in accordance with applicable personal data protection legislation.

1. Data Controller

The Data Controller is:

Oobe-xr S.R.L.
Registered office: VIA BENIGNO CRESPI 24, 20159 Milan - Italy
VAT No.: IT08704980724
Tel
Email

2. Types of Processing and Data Collected

Among the Personal Data collected by this site, either directly or through third parties, are:

Data voluntarily provided by the user: the site provides access to various forms through which users can request information from the Data Controller. The forms and the data collected are listed below:

FORM	DATA
Start a Project - Web XR Configurator / TheAppXR / VirtualReplica / 3DRendering / WebXRConfigurator / SystemIntegration - Company / Freelance / Private	Full name; Email; Company (optional); Phone (optional)
Join the Team	Full name; Role; Email; Phone (optional); Upload your CV (.pdf, .doc, .docx); LinkedIn Profile URL (optional); Portfolio URL; Availability
Collaborate with us	Full name; Email; Phone (optional); Company; Website; Industry; Type of collaboration

Browsing Data:
The computer systems and software procedures used to operate this website collect, in the normal course of their operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified individuals, but by its very nature it could, through processing and association with data held by third parties, allow users to be identified. This category includes IP addresses or domain names of the computers used by users who connect to the site, URI (Uniform Resource Identifier) addresses of the resources requested, and other parameters relating to the operating system and the user's IT environment. Processing is carried out automatically by the website.

Cookies:
This site uses only technical cookies. For more details, please refer to the "Cookie Policy" section.

3. Purposes and Legal Basis of Processing

User data is collected for the following purposes and on the following legal grounds:

Purpose of Processing	Personal Data Processed	Legal Basis
Responding to contact requests	Full name; Email; Phone (optional); Company (optional); Role; Upload your CV (.pdf, .doc, .docx); LinkedIn Profile URL (optional); Portfolio URL; Availability; Website; Industry; Type of collaboration	Performance of pre-contractual measures (answering questions - gathering availability for collaboration) taken at the request of the data subject (Art. 6(1)(b) GDPR).
Ensuring the correct functioning of the site	Browsing data, Technical cookies	Necessity of making the site usable following access by the user (legitimate interest of the Controller - Art. 6(1)(f) GDPR).

4. Processing Methods and Location

Processing is carried out using IT and/or electronic tools, with organisational methods and logic strictly related to the stated purposes. Data is processed at the Controller's operational headquarters and in any other place where the parties involved in the processing are located.

Specific security measures are in place to prevent data loss, unlawful or improper use, and unauthorised access — primarily through electronic storage on devices equipped with access credentials, managed by duly trained personnel or stored in locations with adequate security measures.

5. Retention Period

Data is processed and retained for the time required by the purposes for which it was collected. Therefore:

• Personal Data collected for purposes related to the performance of a contract or pre-contractual measures (contact request) will be retained until such contract is fully performed, and deleted if, following the request, the requesting party does not enter into any contract with the Data Controller.
• Browsing data and technical cookies do not persist beyond the duration of the individual browsing session.

6. Data Disclosure

The collected personal data will not be disseminated or communicated to third parties without the explicit consent of the data subject.

Without requiring the data subject's consent, the Data Controller may communicate personal data in its possession: a) to those parties to whom such communication must be made in compliance with a legal, regulatory, or EU obligation; b) to intermediaries to whom data may be disclosed pursuant to anti-money laundering legislation (cf. Art. 39, paragraphs 3 and 5, of Legislative Decree no. 231/2017), which provides for the possibility of communicating personal data relating to suspicious transaction reports, additional information requested by the UIF, or the existence or likelihood of investigations into money laundering or terrorist financing.

7. Rights of the Data Subject

Pursuant to Articles 15 et seq. of the GDPR, the user has the right to:

• Withdraw consent at any time.
• Access their own Data.
• Verify and request rectification of their Data.
• Obtain restriction of processing.
• Obtain erasure or removal of their Personal Data (right to be forgotten).
• Receive their Data or have it transferred to another controller (right to data portability).
• Object to the processing of their Data.
• Lodge a complaint with the competent personal data protection supervisory authority (for Italy, the Garante per la Protezione dei Dati Personali).

To exercise their rights, users may address a request to the contact details of the Controller indicated in this document. Requests are free of charge and will be fulfilled by the Controller as soon as possible, and in any case within one month.

8. Cookie Policy

This site uses exclusively technical cookies, which are essential for the correct functioning of the site and to enable browsing. No profiling cookies are used, nor are any other tracking methods employed. Since no profiling cookies are used, prior user consent is not required for their use.

What are Cookies

Cookies are small text strings stored on your computer when you browse websites. In most browsers, cookies are enabled by default.

Cookie Classification

Cookies can be classified into different categories based on three main criteria: their duration, their origin, and their purpose.

A. Based on DURATION:
Session Cookies: Stored temporarily on the user's device and deleted automatically when the browser is closed.
Persistent Cookies: Remain stored on the user's device until a predetermined expiry date (which can range from minutes to several years) or until manually deleted by the user.

B. Based on ORIGIN:
First-Party Cookies: Installed and managed directly by the operator of the website the user is visiting.
Third-Party Cookies: Installed and managed by domains or websites other than the one the user is visiting (for example, through the integration of maps, videos, social buttons, or external advertising services).

C. Based on PURPOSE (Type):

1. Technical Cookies (Strictly Necessary): These are cookies essential for the correct functioning of the website. Without them, some operations could not be performed or would be more complex and less secure. Consent: Prior user consent is not required for the installation of these cookies.
2. Analytical Cookies (Statistical): Used to collect information, in aggregate or disaggregated form, on the number of users and how they visit the site. Consent: If data is anonymised and not cross-referenced with other data, these can be treated as technical cookies. If they allow identification, user consent is required.
3. Functional Cookies: Allow the user to browse based on a set of selected criteria in order to improve the service provided.
4. Profiling Cookies (Marketing/Advertising): Aimed at creating user profiles and used to send advertising messages in line with the preferences expressed. Consent: Prior and freely given user consent is always required for the use of profiling cookies.

Cookie List and Function

Name	Nature	Function
consent__cookie	Technical - First party (.oobexr.com)	Stores the user's cookie consent preferences as expressed via the site banner.

How to Manage or Disable Cookies

Upon first accessing the site, you will be shown a banner containing a brief notice and a preference management panel, through which you can accept, reject, or selectively choose the categories of cookies to install (with the exception of technical cookies, which are always active).

The site https://oobexr.com works best when cookies are enabled. You can manage how cookies are used on your computer by accessing your browser settings directly:

Firefox; Internet Explorer; Edge; Google Chrome; Safari

Please note that disabling cookies may disable some features of the site.

Retention

Technical cookies are retained only for the duration of the browsing session.

Disclosure

Without requiring the data subject's consent, the Data Controller may communicate personal data in its possession to those parties to whom such communication must be made in compliance with a legal, regulatory, or EU obligation.

9. Changes to this Privacy Policy

The Data Controller reserves the right to make changes to this privacy policy at any time, notifying users by publishing the updated version on this page. Users are therefore encouraged to check this page regularly, referring to the date of last modification shown at the bottom.