“www.italpaper.com” WEB INFORMATION
The Owner of the Treatment is Italpaper Distribution S.r.l., headquarters in Marsala (TP), Contrada San Silvestro 452E-TER, Cap 91025, (later known as “Owner”), and informs you under art. 13 of the EU Regulation 679/2016 (later also “GDPR”)that your data will be treated with the following modalities and purposes.
1. WHAT PERSONAL DATA DO WE DEAL WITH?
For the purposes of this Notice, Italpaper Distribution S.r.l. may process common personal data, such as personal data (first name, last name,address, phone number, e-mail and other contact details, an identification number, an economic and heritage data (e.g. data relating to transactions in place during the contractual relationship with the Holder). ItalpaperDistribution S.r.l. may – with your explicit consent – also deal with particular categories of your personal data only in two hypotheses: for the acquisition of information prior to the conclusion of contracts (pre-contract report) as well as for the management of the contractual relationship and to fulfill specific requests
which satisfaction requires the processing of particular categories of personal data. Any decision not to grant such consent will make it impossible for the Holder to proceed with the execution of the contractual relationship. Italpaper Distribution S.r.l. can further process personal data of computer type, such as Navigation Data, Data voluntarily provided by the user and Cookies.
1.1 Navigation data
The computer systems and software procedures in charge of the operation of this website acquire, in the course of their normal operation, some personal data which transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified stakeholders, but by which its very nature could, through elaborations and associations with data held by third parties, allow to identify users. This data category includes the IP addresses or domain names of the computers used by users who connect to the site, the Uniform Resource Identifier (URI) notation addresses of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (good end, error, etc.) and other parameters related to the operating system and the user’s computer environment. This data is used for the sole purpose of obtaining anonymous statistical information about the use of the site and to check its proper functioning and is deleted after processing. The data could be used to ascertain liability in the event of hypothetical cybercrime against the site.
1.2 Data voluntarily provided by the user
The optional, explicit and voluntary sending, if required, e-mail to the addresses indicated on this Site and filling out the “formats” involves the subsequent acquisition of the e-mail address, necessary to respond to your requests, as well as to any other personal data communicated spontaneously to the Holder. Unless you provide additional personal information for the handling of your request, for the purposes set out in this Notice, the Holder treats the following personal data:- personal details: first name, last name, address, phone number, e-mail and other contact details;- data relating to the contract with the Owner. For the purposes of the management of your application, including the management of your application, the Holder may also treat particular categories of personal data, such as data suitable to reveal union membership (recruitment of positions, request for withholding membership of political parties, religious beliefs (if you were to apply to join certain religious holidays), as well as your health status if you communicated them spontaneously to the Holder. For the processing of these categories of personal data, the Holder requires you to have explicit consent to the treatment. Specific summary information will be progressively reported or displayed on the pages of the site prepared for particular services on demand.
1.3 Cookies
Through the Website, the Owner will also treat your personal data through the use of cookies. For such treatments, the Owner invites you to view the Cookie Policy present on the site.
2. WHAT ARE THE PURPOSES OF THE TREATMENT?
Your personal data will be processed by the Owner for:
2.1 Requests made through the Site
Your personal data may be processed by the Owner to meet your requests made by writing to one of the e-mail addresses available on the Site or filling out the formats on the Site.
Failure to provide the required data will make it impossible for the Owner to carry out your request.
The legal basis for the treatment is the need for your request to be carried out, per Article 6, paragraph 1, letter b), GDPR. Therefore, it is not necessary to acquire prior consent to the treatment. For the handling of your request, the Holder may also process particular categories of personal data that you communicated to the Holder. The data collected for this purpose will be processed for the time strictly necessary to meet your request and subsequently retained for 1 year after the fulfilment of the request.
2.2 Registration, reserved area, voucher request
Your personal data may be used by the Owner to
meet your request to register to the Site;
In order to provide the services connected to the restricted area of the Site;
To send, if requested by you, coupons (vouchers), by email, text message, telephone, related to initiatives, which could also include products and/or services for which the Holder has entered into agreements with third-party companies, provided by insured, contractors or partners
Failure to provide the required data will make it impossible for the Owner to continue with your registration to the Site.
The legal basis for registering with the Site and providing related services is the need to carry out your request, per Article 6, paragraph 1, letter b), GDPR. Therefore, it is not necessary to acquire prior consent to the treatment.
The Owner will treat your personal data only for the time it takes to manage the current contract between you and the Owner. In any case, your personal data will be retained for a maximum period of 10 years from the termination of the contract, in accordance with the statute of limitations provided by the Italian civil code.
2.4 Law Obligations
Your personal data may be used by the Owner to satisfy to fulfil a legal obligation. In particular, legal obligations under:
(a) the legislation on preventing the use of the financial system for money laundering or financing terrorism and fraud;
(b) EU regulations and/or regulations;
(c) legislation dictated by supervisory and control bodies or other authorities entitled to this.
2.5 Site Management
Your personal data described at the previous points will also be processed by the Owner to manage the Site, carry out anonymous statistical analysis on the use of the site to check its proper functioning and/or for the verification of responsibility in case of hypothetical cybercrime against the Site.
In any case, such data is processed anonymously and is deleted immediately after processing.
The legal basis of the treatment is the legitimate interest of the Owner to ensure the correct use of the Site and to prevent any possible cybercrime, in accordance with Article 6, paragraph 1, letter f), GDPR. Therefore, you will not need to acquire consent.
Your personal information will be deleted at the end of your browsing session. However, if cybercrime is detected, your personal data will be retained for as long as it takes to handle the dispute.
2.6 Disposal of your personal data
With your consent, Italpaper Distribution S.r.l. may sell your personal data to third-party companies, below “Transferees”, for marketing and profiling purposes.
“Transferees” may process your personal data as self-employed in order to
send commercial communications of products and services, including direct marketing, as well as direct sales and completion of market surveys or research;
Analyze your consumption habits, as well as aspects of your financial situation in order to offer you the best offers in accordance with your personal needs
2.7 Sending communications with telephone media (e.g. SMS, WhatsApp, etc.)
With your consent, the Controller will be able to send communications by email, text message, telephone, WhatsApp related to the services performed for the execution of the contract in favour of the person (contractor and insured).
The nature of the provision is Optional; Failure to provide data will not affect the satisfaction of its requests and the execution of contracts but will result in the owner being unable to send you communications about the services required.
Your personal data for this purpose will be processed until you are opposed and/or obtain termination of treatment.
2.8 Acquisition of preliminary information after contracts
Your personal data may be processed by the Owner to
Meet your requests for product/service quotes;
Acquisition of information prior to the conclusion of contracts;
Failure to provide the required data will make it impossible for the Owner to carry on your request.
The legal basis for the treatment is the need for your request to be carried out, by Article 6, paragraph 1, letter b), GDPR. Therefore, it is not necessary to acquire a prior consent to the treatment.
For the purposes of the handling of your request, the Holder may also process particular categories of personal data that you communicated to the Holder.
The information collected, useful for the formulation of quotes and prior to the conclusion of the contract, will be treated for the time strictly necessary to meet your request
and subsequently retained for the necessary period provided by the current rules.
2.9 Profiling
With your consent, the Owner may process your personal data, your insurance situation, as well as consumption habits, preferences, interests, behaviours, in a way that is entirely or partially automated, in order to identify and offer services or activities more appropriate to your person.
The legal basis for the treatment is the express consent of the person concerned.
The nature of the provision is optional; Failure to give consent, although it will still allow the Company to perform the activity you requested, will prevent the Company from identifying services that conform to your personal standards.
Your personal data will be processed for that purpose until your decision to revoke consent and/or obtain termination of treatment. In any case, profiling activities will only take into account data recorded in the last 12 months.
We inform you that, at any time, you have the right to object to direct marketing profiling by contacting the Owner to one of the contacts indicated in this policy.
3.HOW DO WE PROCESS YOUR PERSONAL DATA?
The processing of your personal data is carried out through the operations indicated in art. 4 n. 2) GDPR and precisely: collection, registration, organization, retention, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion and destruction of data. Your personal data is processed both on paper, electronic and/or automated.
4.MODALITY OF THE TREATMENT
The processing of your personal data will be, in accordance with the provisions of the GDPR, and the subsequent D. Lgs 101/2018 using paper, computer and telematic tools, with logic closely related to the stated purposes and, in any case, in a manner suitable to ensure its safety and confidentiality in accordance with the provisions of Article 32 GDPR.
5. WHO HAS ACCESS TO YOUR DATA?
Your data may be made accessible for the purposes of paragraph 2:-
to employees and partners of the Owner, in their capacity as authorised to process and/or system administrators;
– to third-party companies or other entities (as an indication, lenders, professional firms, consultants, insurance companies for the provision of insurance services, etc.), who are outsourced on behalf of the Holder, in their capability as Managers of Treatment.
6. WHO CAN YOUR DATA BE TRANSFERRED TO?
Personal data is stored in paper archives and on servers located in Italy or within the European Union. In any case, it is understood that the Owner, if necessary, will also have the power to move the servers to non-EU countries. In any case, the Owner assures you that your personal data will be transferred to third countries on the basis of a European Commission adequacy decision, in accordance with Article 45 GDPR, in the presence of standard contractual clauses under the GDPR, or the presence of one of the exemptions specifically provided for by Article 49 GDPR.
- WHAT ARE YOUR RIGHTS?Concerning the treatments described in this Notice, as an interested person you may exercise the rights enshrined in the articles of GDPR and, in particular:
The right to obtain confirmation that personal data is being processed or not that concerns you and, if so, obtaining access to your personal data – including a copy of it.
The right to rectify – the right to obtain, without unjustified delay, the correction of inaccurate personal data concerning you and/or the integration of incomplete personal data.
The right to delete (Right to be forgotten) – the right to obtain, without unjustified delay, the deletion of personal data concerning you.
The right to restrict treatment – the right to obtain the limitation of treatment, when the conditions of law apply.
The right to data portability – the right to receive, in a structured format, commonly used and readable by an automatic device, the personal data that concerns you provided to the Holder and the right to transmit it to another Holder without impediments, if the treatment is based on consent and is carried out by automated means. In addition, the right to obtain that your personal data is transmitted directly from Italpaper Distribution S.r.l. to other Holder if this is technically feasible.
The right of opposition – the right to oppose, at any time, the processing of personal data relating to you based on the condition of legitimacy of the legitimate interest, including profiling, unless there are legitimate reasons for the Holder to continue the treatment that prevails over the interests, rights and freedoms of the person concerned or for the investigation, exercise or defence of a right in court.
The complaint to the Data Protection Authority.
It is important to withdraw consent at any time, as easily as it was provided, without prejudging the legality of the consent-based treatment given before revocation.8. HOW CAN YOU PERFORM YOUR RIGHTS?
You may exercise your rights at any time by sending a notice to the following contacts:- Italpaper Distribution S.r.l., Marsala (TP), Contrada San Silvestro 452E-TER, Cap 91025- e-mail: italpaperprivacy@gmail.com