The user / visitor acknowledges that any indication of personal and contact data of any third party other than the user himself (for example when filling in the data entry form on the Site) represents a processing of personal data with respect to which he acts as an autonomous owner, assuming all the obligations and responsibilities provided for by current legislation. In this sense, the user guarantees that any data of third parties which will be so indicated by the user (and which will consequently be treated as if the third party had provided their own informed consent to the processing) has been acquired by the user in full. compliance with applicable laws. The user grants the widest indemnity on this point with respect to any dispute, claim, request for compensation for damage from processing that should be received by any third party concerned due to the provision of the data indicated by the user in violation of the data protection regulations. applicable personal.
The data controller is Plastivar s.r.l., with registered office in Viale Rimembranze, 1 – 23879 Verderio (LC), to which you can contact to assert your rights.
What data do we collect and use?
We collect all information provided by users when sending contact forms. If users contact us by email, we will keep track of that correspondence. We only use personal information for marketing activities if this option has been accepted in the relevant personal data entry form. We collect navigation data, information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes, for example, the IP addresses or domain names of the computers used by users who connect to the Site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used in the submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment. The aforementioned information is processed in an automated form and collected in an exclusively aggregated form in order to verify the correct functioning of the site and for security reasons. For security purposes (spam filters, firewalls, virus detection), the IP address could be used, in accordance with the laws in force on the subject, in order to block attempts to damage the site itself or to damage other users, or in any case harmful or criminal activities. These data are never used for user identification or profiling, but only for the purpose of protecting the site and its users.
Purpose and legal basis of the processing
According to the needs expressed from time to time by the user who accesses the various sections of the Site (and except for specific rules and information for individual operations that involve the provision of specific personal data, published from time to time on the Site), the following are indicated the main purposes of the processing of personal data provided directly by users or acquired automatically through navigation:
- adherence to the services offered by the Site (for example the online booking service for a check-up);
- follow up on any requests made by the users themselves, for example by spontaneously sending applications, e-mails or traditional messages to the addresses indicated on the Site which entail the subsequent acquisition of the sender’s address, including e-mail, or the relative numbering telephone necessary to respond to requests, as well as any other personal data included in the related communications;
- direct marketing and profiling if the user has selected this option;
- improve the quality of the services offered through the Site after anonymization;
- fulfill obligations established by law, by a regulation or by community legislation;
- ascertain, exercise or defend our right in court;
- obtain anonymous statistical information on the use of the Site and check its correct functioning;
- management, administrative, accounting and tax obligations.The processing of such data is permitted by the Regulation, as:
- necessary to follow up on requests made by users themselves;
- necessary for our legitimate interests in pursuing the aforementioned purposes (for example to verify the correct functioning of the site and for security reasons, organizational and production needs to constantly improve the services provided to users, the quality and effectiveness of the customer care). In any case, these interests do not conflict with the users’ right to privacy;
- in some cases, necessary to fulfill a legal obligation, for example in case of communication to authorities, governmental or regulatory bodies;
- necessary to initiate, pursue or defend in legal actions;
Nature of the provision of data and consequences of refusal
The provision of personal data, which are requested on various collection occasions, may be necessary for the pursuit of the purposes identified in the specific information, or optional. The mandatory or optional nature of the provision is specified by the symbol (*) next to the mandatory information. Where the processing is based on your consent, this consent is necessary. Any refusal to communicate certain personal data marked as mandatory o to give your consent where necessary, it makes it impossible to pursue the main purpose of the specific collection: such refusal could, for example, make it impossible to provide the services available on the Site (application for open job positions; processing of data belonging to the categories details referred to in art.9 of the Regulation such as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data intended to uniquely identify a natural person, data relating to health or sexual life or orientation sexuality of the person; support services of our customer service; booking a check – up, sending commercial communications). The provision of further personal data, other than those marked as essential, is optional and does not entail any consequence in order to pursue the main purpose of the collection.
Automated decision making
We do not make decisions solely on the basis of an automated decision-making process, including profiling, which produces legal effects on the user or has other similar consequences.
Data processing takes place with or without the aid of electronic or, in any case, automated, computerized or telematic tools, with logic strictly related to the purposes expressed above. The processing of data will be carried out in a lawful and correct manner and in any case in compliance with the aforementioned legislation, using tools suitable for guaranteeing security and confidentiality and may also be carried out through automated tools designed to store, manage and transmit the data.
We will keep the personal data of users for the period necessary to fulfill our legal obligations. The retention period of personal information depends on the purpose for which the data is processed and the tools with which such personal information is processed. Where possible, we indicate in the individual information the data retention period. In any case, the criteria used to determine the applicable retention period are: (i) time necessary to achieve the related purpose, (ii) time necessary to carry out the commercial relationship with the user, (iii) time accepted by the user and / or (iv) time required by applicable laws. Upon expiry of the retention period, the data will be deleted, or destroyed in a secure way where possible, or made anonymous.
Communication and dissemination of data
Users’ personal data will not be disclosed, i.e. they will not be disclosed to indeterminate subjects. On the other hand, if the communication is necessary or functional to the performance of our business, in the manner and for the purposes illustrated above, they may be communicated to external subjects who can carry out processing activities as independent owners or as managers, belonging to the following categories:
a) freelancers for the acquisition of opinions on the correct method of applying the labor law regulations;
b) companies, private or public, bodies or professionals who carry out consultancy and / or evaluation activities as part of the personnel selection process;
c) companies, private or public, organizations or professionals for the purpose of any preparatory training activities for the establishment of the employment relationship;
d) companies that provide marketing and advertising services, market research;
e) IT service providers (who provide a host or support the IT systems of the Companies which include personal data of candidates);
f) public and private entities, also following inspections, verifications, management of claims for damages, for the fulfillment of legal obligations and / or provisions of public bodies (e.g. financial administration, police bodies, judicial authorities, companies insurance).
The third parties who process data on our behalf and under our authority, have been adequately selected and are endowed with experience, skills and reliability and offer a suitable guarantee of full compliance with the current provisions on processing, including the security profile of the data, are formally appointed as data processors pursuant to art. 28 of the Regulation and are subject to contractual and regulatory obligations in order to maintain the confidentiality of data. We periodically check that the managers have punctually fulfilled the tasks entrusted to them and that they continue to provide suitable guarantees of full compliance with the provisions on the protection of personal data. Furthermore, they will only have access to that information necessary for the performance of their functions. A detailed and updated list of these subjects, as well as those who operate as data processors, can be obtained by sending a request to the Data Controller.
Transfer of data outside the European Union
Personal data may be transferred outside the EU to be stored on the servers subject to the stipulation of standard contractual clauses, adopted by the European Commission, with the server and / or service providers entrusted to third parties, or verification of the registration of the data controller ‘scope of the system called “Privacy Shield”.
- Right to access and obtain a copy of personal data
You have the right to request confirmation that we are processing any of your personal data. In some cases, you may ask us to provide you with an electronic copy of your data.
- Right to rectify personal data
In the event that the data in our possession is incorrect, you have the option of requesting the updating of such data or its correction.
- Right to limitation of processing and right to be forgotten
In some circumstances you have the right to request a limitation of the processing of your personal data and / or the cancellation of the same. You have the right to submit this request at any time and we will evaluate the possibility of accepting it. However, this right is subject to legal rights or obligations and, therefore, we may have to keep the data in question. In situations where we ascertain that, in accordance with the law, your request for deletion of personal data can be accepted, we will immediately do so without undue delay.
- Right to object
He has the right to object at any time, for reasons connected with his particular situation, to the processing of personal data concerning him, including profiling. In this case, we will refrain from further processing your personal data unless there are compelling legitimate reasons to proceed with the processing that prevail over your interests, rights and freedoms or to ascertain, exercise or defend a right in judicial seat. You have the right to object to processing for direct marketing purposes at any time, including profiling to the extent that it is connected to such marketing.
- Right to portability
In the presence of certain conditions, you have the right to receive, in a structured format, commonly used and readable by an automatic device, the personal data concerning you and has the right that such data be transmitted directly to another owner.
- Right to lodge a complaint with the Supervisory Authority
You can lodge a complaint with the Italian Supervisory Authority where necessary, or contact it to request information regarding the exercise of your rights.
- Withdrawal of consent
You can, at any time, revoke the consent given. However, the revocation will not affect the lawfulness of the treatment based on consent before the revocation of the same.
- How to exercise rights
You may, at any time, exercise your rights by sending a certified e-mail message to the e-mail address to: [email protected] When we send marketing communications via e-mail, you can decide not to receive further communications by clicking on “Unsubscribe”.