TYPES OF DATA PROCESSED
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and IT environment. This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check that it is functioning correctly, and is deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes to the detriment of the site.
Data provided voluntarily by the user
> Sending communications to our email addresses: the optional, explicit and voluntary sending of electronic mail to the addresses indicated on this site, for the purpose of sending specific requests, entails the subsequent acquisition of the sender’s address, which is necessary for responding to requests, as well as any other personal data included in the message.
> Contacts: completion of the data collection form, explicitly and voluntarily, for the purpose of requests for information, entails subsequent acquisition of the sender’s address, which is necessary to
respond to requests, as well as any other personal data
included in the request.
> NEWSLETTER: subscription to our newsletter, for the purpose of sending informative material, entails the subsequent acquisition of your email address, as well as all the data necessary for the pursuit of this purpose.
METHODS OF PROCESSING
The data are processed mainly by electronic and computerised means and stored both on computer media and on paper media as well as on any other type of suitable media, in compliance with the modalities set out in Articles 6, 32 of the GDPR and through the adoption of appropriate security measures to prevent the loss of data, unlawful or incorrect use and unauthorised access.
We inform you that, in order to provide a complete service, our portal may contain links to other websites, not managed by us. We are not responsible for errors, content, cookies, publication of unlawful moral content, advertising, banners or files that do not comply with the regulations in force, and for compliance with the Privacy Law by sites operated by us to which reference is made. In order to improve the service offered, immediate notification of malfunctions, abuses or suggestions to the e-mail address: email@example.com is appreciated.
Your data will be processed only by personnel expressly authorised by the Data Controller.
PURPOSE OF PROCESSING AND LEGAL BASIS
The data will be processed for the following purposes:
1. Navigating the site and accessing the reserved areas of the site (Customer Area). The legal basis of the processing is the consent of the data subject, pursuant to Art. 6(1)(a) of the Regulation. Providing data for these purposes is optional, but failure to do so would make it impossible to create a reserved area on the site;
2. process requests for information and quotations. The legal basis for the processing is the consent of the data subject, pursuant to Art. 6(1)(a) of the Regulation. Providing data for these purposes is optional, but failure to do so would make it impossible to obtain the requested response.
3. Sending newsletters. The legal basis of the processing is the consent of the data subject, pursuant to Art. 6, par. 1, lett. a) of the Regulation. Providing data for these purposes is optional, but failure to do so would make it impossible to obtain the requested response;
4. to fulfil obligations provided for by laws or regulations. For this purpose, the processing is necessary to fulfil a legal obligation to which the Controller is subject, pursuant to Article 6(1)(c) of the Regulation.
5. The protection of the Controller in judicial proceedings. For this purpose, the processing is necessary for the pursuit of the legitimate interest of the Controller pursuant to Art. 6(1)(f) of the Regulation;
SUBJECTS TO WHOM PERSONAL DATA MAY BE COMMUNICATED
The personal data relating to the processing in question may also be communicated to subjects whose right to access your personal data is recognised by law or secondary and/or EU regulations. Your data may be communicated exclusively to competent and duly appointed subjects for the performance of the services necessary for the proper management of the relationship, with guaranteed protection of the rights of the data subject. Furthermore, some data may be communicated and disseminated to internet operators which ECOPACK S.p.a. uses for the management of its domains.
Your personal data will not be disseminated in any way.
DATA RETENTION PERIOD
We would like to inform you that, in compliance with the principles of lawfulness, purpose limitation and data minimisation, in accordance with Article 5 of the GDPR, the storage period of your personal data is set for a period necessary for the performance of the services requested and in compliance with the regulations in force regarding the storage of tax, fiscal and contractual documents. For the activity mentioned in number 3 of the purpose list, until the exercise of the rights of cancellation and revocation of consent and, in any case, for a period not exceeding three years from the acquisition of consent.
RIGHTS OF THE INTERESTED PARTIES
1. The data subject has the right to obtain confirmation of the existence or non-existence of personal data concerning him/her, even if not yet recorded, and its communication in intelligible form.
2. The data subject shall have the right to be informed of:
a. The origin of the personal data;
b. of the purposes and methods of processing;
c. the logic applied in the event of processing carried out with the aid of electronic instruments;
d. the identification data concerning the data controller, the data processors and the representative designated pursuant to Article 5(2);
e. of the entities or categories of entity to whom or which the personal data may be communicated or who or which may get to know said data in their capacity as designated representative(s) in the State’s territory, data processor(s) or person(s) in charge of the processing.
3. The data subject is entitled to obtain
a. the updating, rectification or, when he/she is interested, the integration of data;
b. the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed;
c. certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected;
d. the portability of the data.
4. The data subject has the right to object, in whole or in part:
a. on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;
b. the processing of personal data concerning him/her for the purposes of sending advertising or direct sales material or for carrying out market research or commercial communications.
5. The data subject has the right to request the restriction of processing.
He/she may exercise his/her rights by sending an email to firstname.lastname@example.org or by sending a written request to the contact details specified above.
Furthermore, if the data subject considers that the processing of his or her data is contrary to the legislation in force, he or she may lodge a complaint with the Data Protection Supervisory Authority pursuant to Article 77 of Regulation 2016/679.