- is intended to www.plastotecnica.com (hereafter, the “Website”);
- is an integral part of the website and services that we offer;
- is made under the article 13 of the Regulation to those who interact with website services.
Your Personal Data Processing will be based on fairness, lawfulness, transparency, purpose and storage limitation, data minimisation and accuracy, integrity and confidentially principles as well as the principle of accountability (article 5 of the Regulation).
Your Personal Data will be processed in accordance with the Regulation legislation and confidentially obligations set out therein.
The term “Personal data” means any type of information or set of operations which is performed upon Personal Data (collection, registration, storage, disclosure, adaptation or modification, extraction, consultation, usage, dissemination, interconnection, limitation, cancellation and destruction).
1. Data Controller
2. Personal Data being processed
2a. Navigation Data
2b. Special Categories of Data
2c. Data provided voluntarily by users
2d. Third parties Data provided voluntarily by users
3. Purposes of processing
4. Legal basis and mandatory and optional nature data provision
5. Personal Data recipient categories
6. Transfer of Personal Data
7. Retention period of Personal Data
8. Data Subject’s rights
9. Changes on Personal Data processing
1. Data Controller and Data Protection Officer (DPO)
The Data Controller is Plastotecnica S.p.a., Viale dell’Industria, 5a Strada nr. 2/I° – 35023 – Bagnoli di Sopra (PD), Tel. +39 049.9579911, Fax. +39 049.9579902, E-mail: firstname.lastname@example.org.
2. Personal Data being processed
As a result of the website navigation, we inform you that Plastotecnica will process Personal Data that can be composed of identifier as name, surname, nationality, contacts (including address, phone number and email address), date and place of birth, civil status, economic and financial information, details of ID documents suitable to make the data subject identified or identifiable (hereafter, only, “Personal Data”). Personal Data processed via website are the following:
a. Navigation Data
The information systems and software procedures relied upon to operate this website acquire personal data as part of their standard functioning; the transmission of such data is an inherent feature of Internet communication protocols.
These information are not collected in order to be associated with to identified data subjects; however, because of its nature, it might allow user identification after being processed and matched with data held by third parties.
This data category includes IP addresses and/or the domain names of the computers used by users connected with this website, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of a request, the method used for submitting a given request to the server, returned file size, a numerical code relating to server response status (successfully performed, error, etc.), and
other parameters related to the user’s operating system and computer environment.
These data are only used to extract anonymous statistical information on website use as well as to check its functioning; they are erased immediately after being processed. The data might be used to establish liability in cases where computer crimes are committed against the website; except for this circumstance, any data on web contacts are currently retained for no longer than seven days.
b. Special Categories of Data
Using the website section “Work with Us”, it may occur, through sending CV, a provision of Personal Data considered in special categories of personal data, as defined in article 9 of the Regulation. The possible processing of such data occur under the Article 9 of the Regulation in accordance with the current authorizations pro tempore for the protection of data.
If personal and special data are provided spontaneously by the data subject, the submitted curriculum will immediately be destroyed, in case your application would not be in Plastotecnica S.p.a interest.
Otherwise, if it were of interest to the company, data will be stored for the time necessary to achieve the purposes for which they are collected and in any case the maximum storage time for statistical purposes are 5 years from the date of receipt.
c. Data provided voluntarily by users
d. Data provided voluntarily by users transmitted to third parties
When using certain website services ,we may need to process third party data that you voluntarily provided.
In all these and similar situations, you will act as the data holder and you will take on all the consequent legal obligations and responsibilities. In this sense, you hereby grant us the widest indemnity with respect to any objection, claim, and request for compensation, etc. that we may receive by third parties whose Personal Data have been processed through your use of our services in violation of the applicable rules on the protection of Personal Data.
In any case, if you provide us or otherwise process Personal Data of third parties, you guarantee that this particular hypothesis of treatment is based on the prior acquisition – on your part – of the third party consent about his or her Personal Data processing operations.
DEFINITIONS, CHARACTERISTICS AND ENFORCEMENT
Cookies are information stored on websites and apps on the users devices during their first visit to the site. Cookies allow websites and apps to remember user actions and preferences (such as login data, the default language, display settings, etc.) so that they will be available in the user’s subsequent visits. Therefore, cookies are used to perform IT authentications, session monitoring and to store information about the activities of users who access a service. The website may also use third-party cookies, which are cookies from sites or web servers other than this website that are used for purposes of such third parties.(so-called “third parties”). Certain operations could not be carried out without using cookies, which in some cases are technically required for the website operation.
There are different types of cookies, depending on their characteristics and functions, and these can stay in the computer of the user for different period of time: so- called session cookie which is automatically delated at the browser closure; so-called persistent cookie which remains on the user equipment until pre-fixed date.
Especially, “technical cookies” namely those used for the only purpose of carrying out the transmission of a communication over an electronic communications network, or as strictly necessary for the provider of an information society service explicitly requested by the subscriber or user to provide the service, do not required such consensus.
Among technical cookies, which do not required an expressed consensus for their use, the Italian Data Protection Officer (see. Simplified Arrangements to Provide Information and Obtain Consent Regarding Cookies – 8 may 2014 and following clarification, hereafter only “Arrangements”) includes also:
• “analytics cookies” wherever it is applied directly by the website operator to collect information, in aggregated form, on the number of users and on how they visit this site.
• navigation or session cookies ( to log in)
• functional cookies, which allow the user, the navigation in accordance with a series of selected criteria (for example language, selected products for the purchase) in order to improve service provided.
• “profiling cookies”, conversely i.e. those aimed at creating profiles related to the user and use in order to send advertisements in accordance with expressed preferences from the same within the Internet navigation, it is required a prior consensus of the user
Type of cookies used by the Website and possibility of (de)selection
The Website use the following cookies which can be deselected, except for cookies of third parties for those you should refer directly to selection and deselection mode of its cookies, by using link:
• technical or session navigation cookies absolutely necessary for the website functioning or for allow to gain access of contents and services requests;
• technical analytics cookies which allow to understand how the website is used by the users. Cookies are not collect information about user identity and any personal data. Information are processed in aggregated and anonymous form
• functional cookies i.e. used for activate specific website functionality and a series of selected criteria (for example language, selected products for the purchase) in order to improve service provided.
WARNING: By disabling technical cookies and/or website functioning may not be inaccessible or some services and website certain functions may not be available or not work correctly and it can be forced to modify or to introduce manually some information or preferences every time, you will visit the website.
How to display and modify cookies through the Browser
• Internet Explorer
3. 3. Purposes of Processing
Your Personal Data will be processed with your consensus, where necessary, for the following purposes, where applicable:
a. Realised of required services (eg. contact request or an estimate, information request, sending documentation requests, reports of abuses) as well as website navigation.
b. Find specifics requests addressed to the Controller
c. play marketing activities, as draw up statistics and market research, send information and promotional material concerning the activities, products and services of the Controller. In accordance with the Data Protection Officer “ Guidelines on marketing and against spam 4 July ”, in case you decided to borrow your consensus upon receipt of information concerning promotional activities, included market researches of the Controller, we inform you that such activities can be exercise, according to the current regulation, via snail mail, telephone contact via operator (“traditional mode”), e-mail, texting and use of social networks (“ automated mode”).
We inform you, moreover, that in any moment you can withdraw your consensus previously released for traditional or automated mode, communicating to the Controller, without any formality, writing to email@example.com. Whenever you wish to go against to the Personal Data Processing , to marketing purposes by appropriates means, you can do it whenever you want, by contacting the Controller to firstname.lastname@example.org, without prejudice the lawfulness of the processing based on the consensus given before the revocation;
d. fulfil to any obligations under the current laws, regulations or EU laws or meet the demands derived from authorities
e. analyse curriculum vitae, evaluate the coherence of your profile compared to opened job positions within the Controller, the management of recruitment procedures and reconnect the candidates who have submitted their applications via website in the section “ Work with Us”
f. statistics purposes, enabling it to not be traced back his identity;
g. play direct marketing via email for products and services similar to those request (such as: demo, website download material or documentation) unless its expressed refusal to receive such communication, which you can make in the process of service request or in following occasions, writing to email@example.com.
Your Personal Data, included among the special categories (for example data related to your state of health, can be processed with automated or not tools.
4. 4. Legal basis and mandatory and optional nature Data Provision
The legal basis of the processing of Personal Data for the purposes referred to in section 3 (a-b-c) is art. 6 (1) (b) of the GDPR, since processing operations are required in order to provide the services as per contract. The provision of Personal Data for these purposes is optional, however, failure to provide them would imply the inability to initiate the requested Services.
The purpose referred to in Section 3 (d) constitutes a lawful processing of Personal Data pursuant to art. 6 (1) (c) of the GDPR. Processing operations carried out for the marketing purposes described under section 3 (f) and for disclosing to third parties described under section 3 (g) are based on the granting of your consent pursuant to art. 6 (1) (a) of the GDPR. The provision of your Personal Data for these purposes is entirely optional and does not affect your use of the Services.
The processing activities under section 3 (e) performed for the purposes of e-mail marketing on products or services similar to those purchased by you, find instead its legal basis, pursuant to art. 6.1.f of the GDPR, to promote its products or services in a context in which the data subject can reasonably expect this type of processing, and which s/he can oppose at any time. Indeed, if you refuse to have your data processed for marketing purposes pursuant to section 3(e) and 3(f), you can at any time do so via your control panel, by sending a request or through the link at the bottom of the e-mail. The profiling processing referred to in section 3 (h) is based on the legitimate interest of the Data Controller, pursuant to art. 6.1.f. of the GDPR, to personalise its commercial communication. The processing referred to in section 3 (i) is grounded as well in the legitimate interest of the Data Controller to detect fraud and scams committed against it in accordance with art. 6(1)(f) of the GDPR.
5. Personal Data recipient categories
Personal Data can be shared, for the purpose of section 3, with:
a. subjects who interact typically as responsible of the processing namely: i). people, businesses or professional firm which provide assistance and advice of the Controller in administrative and legal matters, related to the provision of services; ii.) subjects with which it is necessary to interact for the provision of services ( for example the hosting provider which operate as Data Processor ; iii). i.e. subjects delegated to pursue technical maintenance activities ( network systems and electronic communication networks included;) collectively “recipient categories” .
b. subjects, institution or authorities to which it is mandatory communicate your Personal Data on the basis of legal provisions or order of authorities or in case of alerts to investigate the complaints and identify the source received from the users.
c. persons authorised by the Data Controller required to pursue activities strictly related to the provision of services, who are employed on privacy or have an adequate legal privacy obligation. (ex. employees)
6. Transfer of Personal Data
The Data Controller has no intention to transfer your Personal Data outside European Economic Area (EEA)
7. Retention period of Personal Data
Personal Data processed for the purpose referred to 3.a. and 3.b. should only be retained for as long as necessary. In any case, regard to performed processing operations for the provision of goods/services, the Controller will process Personal Data until the time allowed by the Italian legislation for the protections of their interests (Art. 2946 c.c. e ss.).
Personal Data processed for the purposes under section 3.c., will be processed until the revocation of the consensus
Personal Data processed for the purposes under section 3.d. will be stored until the time allowed by a specific obligation or applicable rules of law
As regards to regulations of section 3.e, CVs transmit will be stored for 24 months from their transfer and they can be used for recruitment or any future interviews. After this period, you will received an updating request of your personal data: in the absence of feedback, after 15 days of dispatch of the call, Personal Data will deleted; in case of a hit, Personal Data will be stored for further 12 months and after delated.
Personal Data processed for the purposes of section 3.g. will be processed until his objection to this regulation.
It is subject to anywhere the possibility for the Controller of preserving your Personal Data for the estimated and issued time of the Italian legislation for the protection of their interests.
(art. 2947 co.1 e 3 c.c.)
8. Data Subject’s rights
Under Article 15 of the Regulation and following, you have the right to obtain from the controller confirmation as to whether or not Personal Data concerning you are being processed, adjusted or delated as well as you can object to the processing under Article 21 of the Regulation, you have the right restrictions to the processing in case provided for Article 18 of the Regulation, and moreover to obtain in a structured format, of common use and legible from automatic device data that concern you, under Article 20 of the Regulation.
The requests shall be addressed to: firstname.lastname@example.org.
In any case you have the right to lodge a complaints to the DPO (Data Protection Officer)under Article 77 of the Regulation, if it considers that the Personal Data Processing is contrary to existing rules.
9. Changes on Personal Data Processing