How to concretely exercise your GDPR rights.
You can submit a free-of-charge request in clear language by certified email (PEC) or post. We generally respond within one month, after only the necessary identity checks.
- Latest updateAugust 18, 2026
- Ordinary termOne month from receipt of the request.
Rights and application procedure
This guide concerns the processing of the public site described in the Privacy Policy. For data processed in the customer platform, the data controller can be the customer, employer or client: in that case ORBITA S.R.L. may have to forward the request to the relevant data controller.
1. To whom to send the request
For the public website, the data controller is ORBITA S.R.L., Piazza San Pasquale 48, Palazzo Acquaviva, 80121 Naples (NA), VAT number IT10831001218, REA NA-1135234.
You can send a certified email (PEC) to orbitaholding@pec.it or a letter to the registered office marked “For the attention of the privacy contact”. It is not mandatory to use a specific form.
2. Right of access
You can obtain confirmation whether or not data concerning you are being processed and, if they are, receive a copy and the information required by Article 15 GDPR: purposes, categories, recipients, storage, origin, transfers and presence of automated processes. Copying must not infringe the rights and freedoms of others.
3. Rectification and completion
You can request the correction without unjustified delay of inaccurate data and the completion of incomplete data, even with a supplementary declaration. Indicates the data to be corrected and, when useful, the corrected information.
4. erasure
You can request deletion, among other things, when the data is no longer necessary, you revoke a consent and there is no other legal basis, you validly object, the processing is unlawful or the deletion is necessary for a legal obligation. The right is not absolute: data may be retained when necessary for legal obligations, freedom of expression and information, the public interest, or the establishment, exercise or defence of legal claims.
5. restriction of processing
You can ask that the data be temporarily stored but not used further when you contest their accuracy, the processing is unlawful but you prefer the restriction, the data controller no longer needs it but it is needed for a right or you are waiting for an objection to be verified. Before lifting the restriction, the data controller must inform you.
6. Portability
For data provided by you and processed by automated means based on consent or a contract, you can receive them in a structured, commonly used and machine-readable format and, if technically feasible, request direct transmission to another data controller. Portability does not apply to processing based on legal obligation or legitimate interest and must not prejudice the rights of others.
7. objection
You can object at any time, on grounds relating to your particular situation, to processing based on legitimate interests. The data controller will stop the processing unless it can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is required for the establishment, exercise or defence of legal claims.
You can object to direct marketing at any time, without giving a reason. From that point onwards, the data will no longer be used for this purpose.
8. Revocation of consent
You can withdraw your consent to marketing at any time by sending a certified email (PEC) to orbitaholding@pec.it or writing to the registered-office address. You can revoke analytics from Cookie Preferences in the footer. Withdrawal does not affect the lawfulness of processing carried out beforehand and does not prevent processing based on another legal basis.
The site does not adopt exclusively automated decisions with legal or similarly significant effects. The ROI calculator provides a rough estimate only.
9. How to formulate the request
- Use «Exercise GDPR rights» as the subject and specify the right you intend to exercise.
- Indicate your name and surname, a reply address and your relationship with Zenit: for example contact form or demo, marketing consent, navigation or customer of the platform.
- Describe the data or the period concerned with sufficient precision to find them; you can indicate the email used in the form and the approximate date.
- Please indicate your preferred response format. If the request is electronic, the response will normally be electronic.
- Don't send a full ID right away. If there is reasonable doubt about your identity, we will only be able to ask for proportionate additional information necessary for verification.
10. Optional request template
Subject: Exercise of data-protection rights
To ORBITA S.R.L., I declare my name and a reply address and ask to exercise one or more rights including access, rectification, erasure, restriction, portability, objection and revocation of consent. I describe the relationship with Zenit, the data and the period involved; if possible, I indicate the address used in the form and the approximate date of sending. Finally, I specify whether I prefer an electronic or paper response.
If I send the request on paper, I add the date and signature.
11. Times, costs and extension
We will communicate the outcome without undue delay and, as a rule, within one month of receipt. In case of particular complexity or number of requests, the deadline can be extended by a further two months; within the first month you will receive an explanation of the delay.
The exercise of rights is free. Only for manifestly unfounded or excessive requests, in particular repetitive ones, does the GDPR allow a reasonable fee or a reasoned refusal. If we do not follow up, we will communicate the reasons and possibilities for complaint or appeal within one month.
12. Recipients of the rectification or erasure
Where applicable, we will communicate rectification, deletion or restriction to the recipients to whom the data have been transmitted, unless this is impossible or requires a disproportionate effort. If you ask, we will inform you of such recipients.
13. Complaint and judicial remedy
If you believe that the processing violates the GDPR, you can lodge a complaint with the Italian Data Protection Authority, in particular in the Member State in which you usually reside or work or where the alleged violation occurred. You can also contact the judicial authorities. The complaint does not prevent you from contacting us first to seek a solution.
14. Related documents and update
To find out about processing, legal bases, recipients, transfers and storage, consult the Privacy Policy; to change the analytical measurement consult the Cookie Policy. Last updated: August 18, 2026.