Information on the processing of personal data

This page describes how the website is managed with regard to the processing of the personal data of users who consult it, as well as the methods and purposes of data processing.
This information is provided pursuant to Articles 13-14 of Regulation (EU) 2016/679 – hereinafter, GDPR – to those who interact with web services accessible by electronic means from the address: https://www.ecopack.com/

This website is the property of ECOPACK S.p.a., which manages and maintains this site with the aim of providing information and communications regarding the products or services offered.

The information is provided only for the website in question and not for any other websites that may be consulted through our links, for which ECOPACK S.p.a. is in no way responsible.

ECOPACK S.p.a. with registered office in Piobesi Torinese (TO) – Via della Masolina 24, in its capacity as Data Controller of your personal data, pursuant to and for the purposes of EU Reg. 2016/679 – GDPR, hereby informs you that the aforementioned legislation provides for the protection of data subjects with respect to the processing of their personal data and that such processing will be based on the principles of correctness, lawfulness, transparency and protection of your confidentiality and your rights.

Contact details of the Data Controller
The Data Controller can be contacted at the following addresses
– Telephone: +39 011 9657657
– Email: info@ecopack.com
Your personal data will be processed in accordance with the legal provisions of the aforementioned legislation and the confidentiality obligations therein.

TYPES OF DATA PROCESSED

Browsing data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and IT environment. This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check that it is functioning correctly, and is deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes to the detriment of the site.

Data provided voluntarily by the user
> Sending communications to our email addresses: the optional, explicit and voluntary sending of electronic mail to the addresses indicated on this site, for the purpose of sending specific requests, entails the subsequent acquisition of the sender’s address, which is necessary for responding to requests, as well as any other personal data included in the message.

> Contacts: completion of the data collection form, explicitly and voluntarily, for the purpose of requests for information, entails subsequent acquisition of the sender’s address, which is necessary to
respond to requests, as well as any other personal data
included in the request.
> DATA COLLECTED THROUGH COOKIES. Cookies are small text files that can be sent and recorded on your computer by the Site, and then transmitted back to the Site when you visit it again. All cookies that are not necessary for navigation are deactivated by default, so that you can decide to activate them if you wish. For further details, please refer to the Cookie Policy on the Site.
> NEWSLETTER: subscription to our newsletter, for the purpose of sending informative material, entails the subsequent acquisition of your email address, as well as all the data necessary for the pursuit of this purpose.

METHODS OF PROCESSING

The data are processed mainly by electronic and computerised means and stored both on computer media and on paper media as well as on any other type of suitable media, in compliance with the modalities set out in Articles 6, 32 of the GDPR and through the adoption of appropriate security measures to prevent the loss of data, unlawful or incorrect use and unauthorised access.
We inform you that, in order to provide a complete service, our portal may contain links to other websites, not managed by us. We are not responsible for errors, content, cookies, publication of unlawful moral content, advertising, banners or files that do not comply with the regulations in force, and for compliance with the Privacy Law by sites operated by us to which reference is made. In order to improve the service offered, immediate notification of malfunctions, abuses or suggestions to the e-mail address: info@ecopack.com is appreciated.
Your data will be processed only by personnel expressly authorised by the Data Controller.

PURPOSE OF PROCESSING AND LEGAL BASIS

The data will be processed for the following purposes:
1. Navigating the site and accessing the reserved areas of the site (Customer Area). The legal basis of the processing is the consent of the data subject, pursuant to Art. 6(1)(a) of the Regulation. Providing data for these purposes is optional, but failure to do so would make it impossible to create a reserved area on the site;
2. process requests for information and quotations. The legal basis for the processing is the consent of the data subject, pursuant to Art. 6(1)(a) of the Regulation. Providing data for these purposes is optional, but failure to do so would make it impossible to obtain the requested response.
3. Sending newsletters. The legal basis of the processing is the consent of the data subject, pursuant to Art. 6, par. 1, lett. a) of the Regulation. Providing data for these purposes is optional, but failure to do so would make it impossible to obtain the requested response;
4. to fulfil obligations provided for by laws or regulations. For this purpose, the processing is necessary to fulfil a legal obligation to which the Controller is subject, pursuant to Article 6(1)(c) of the Regulation.
5. The protection of the Controller in judicial proceedings. For this purpose, the processing is necessary for the pursuit of the legitimate interest of the Controller pursuant to Art. 6(1)(f) of the Regulation;

SUBJECTS TO WHOM PERSONAL DATA MAY BE COMMUNICATED

The personal data relating to the processing in question may also be communicated to subjects whose right to access your personal data is recognised by law or secondary and/or EU regulations. Your data may be communicated exclusively to competent and duly appointed subjects for the performance of the services necessary for the proper management of the relationship, with guaranteed protection of the rights of the data subject. Furthermore, some data may be communicated and disseminated to internet operators which ECOPACK S.p.a. uses for the management of its domains.
Your personal data will not be disseminated in any way.

DATA RETENTION PERIOD

We would like to inform you that, in compliance with the principles of lawfulness, purpose limitation and data minimisation, in accordance with Article 5 of the GDPR, the storage period of your personal data is set for a period necessary for the performance of the services requested and in compliance with the regulations in force regarding the storage of tax, fiscal and contractual documents. For the activity mentioned in number 3 of the purpose list, until the exercise of the rights of cancellation and revocation of consent and, in any case, for a period not exceeding three years from the acquisition of consent.

RIGHTS OF THE INTERESTED PARTIES

1. The data subject has the right to obtain confirmation of the existence or non-existence of personal data concerning him/her, even if not yet recorded, and its communication in intelligible form.

2. The data subject shall have the right to be informed of:
a. The origin of the personal data;
b. of the purposes and methods of processing;
c. the logic applied in the event of processing carried out with the aid of electronic instruments;
d. the identification data concerning the data controller, the data processors and the representative designated pursuant to Article 5(2);
e. of the entities or categories of entity to whom or which the personal data may be communicated or who or which may get to know said data in their capacity as designated representative(s) in the State’s territory, data processor(s) or person(s) in charge of the processing.

3. The data subject is entitled to obtain
a. the updating, rectification or, when he/she is interested, the integration of data;
b. the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed;
c. certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected;
d. the portability of the data.

4. The data subject has the right to object, in whole or in part:
a. on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;
b. the processing of personal data concerning him/her for the purposes of sending advertising or direct sales material or for carrying out market research or commercial communications.

5. The data subject has the right to request the restriction of processing.

He/she may exercise his/her rights by sending an email to info@ecopack.com or by sending a written request to the contact details specified above.
Furthermore, if the data subject considers that the processing of his or her data is contrary to the legislation in force, he or she may lodge a complaint with the Data Protection Supervisory Authority pursuant to Article 77 of Regulation 2016/679.