Privacy Policy

Privacy policy website www.ecopack.com

Ecopack S.p.A., having its registered office at Via della Masolina, 24 – 10040 – Piobesi T.se (TO), pursuant to Article 13 of Regulation (EU) 2016/679 (General Data Protection Regulation), in its capacity as Data Controller, provides the following information on the processing of personal data provided during navigation on the website www.ecopack.com (hereinafter: the “Website”)

A. DATA CONTROLLER
The Data Controller is: Ecopack S.p.a., via della Masolina, 24 – 10040 – Piobesi T.se (TO), that may be contacted by post or e-mail info@ecopack.com

B. CATEGORIES OF PERSONAL DATA PROCESSED
The types and methods of data processing conducted through the website are described below.
• Browsing/operating website data. During standard operation, the IT systems and software procedures used to operate the website acquire some personal data, the transmission of which is implicit in the use of Internet communication protocols. This data category includes, for example, IP addresses, the date and time of access, the pages visited (URI/URL), the method used to submit the request to the server, the names of the devices used to connect to the sites and other parameters related to the user’s operating system and computer environment.
• Voluntarily provided personal data. In the section of the website hosting the contacts, some common identification data (e.g., name, surname, e-mail) are required to establish a communication channel with the company and make generic or specific requests on services and products offered and on anything that concerns the company.
• Data collected via cookies. Cookies are small text files that can be sent to and recorded on your computer by the website, and then transferred back to the website when you visit it again. For further details, please refer to the Cookie Policy published on the website.

C. PURPOSE AND LEGAL BASIS OF DATA PROCESSING
Your personal data will be processed for the following purposes, legal basis, and retention time:
i. operation of the website, provision of related services to process your requests for assistance and information. For this purpose, the legal basis lies in the execution of a contract which you are a party to. With reference to the retention period, personal data will be kept for the time necessary for the correct operation of the website and necessary for the provision of services. Once this period has expired, your data will be permanently deleted or rendered anonymous. Finally, for this purpose, the provision of personal data is necessary and any refusal to provide the data may result in the impossibility for the company to comply with the requested service, to comply with legal obligations and to process and respond to your requests.
ii. in order to evaluate your application as a collaborator of the company. For this purpose, the legal basis lies in the execution of a contract which you are a party to or the execution of preliminary contract-related measures. However, if you do not provide personal data, it will be impossible to evaluate your application. Personal data will be kept for 24 months, and, at the end of this period, they will be deleted, unless otherwise required by law.
iii. statistical analysis of performance through the use of cookies. For this purpose, the legal basis lies in your consent. For more information, also in relation to the retention period. Please refer to the specific “Cookie Policy” section.
iv. marketing including sending advertising material, commercial communication by mail, via the website. For this purpose, the legal basis lies in your consent, which may be revoked at any time. For this purpose, the retention period is equal to 60 months from collection, unless there is a withdrawal of consent, by the interested party, before the expiry of this period. After 60 months, your personal data will be automatically deleted or permanently and irreversibly erased or made anonymous. Finally, for this purpose the provision of personal data is optional. However, your refusal to provide the data may make it impossible to receive any advertising material in the manner described in the company information sheet.
v. profiling, i.e., the analysis of your consumption habits and related purchasing choices, in order to be able to send personalized offers. For this purpose, the legal basis lies in your consent, which may be revoked at any time. For this purpose, the retention period is equal to 60 months from collection, unless there is a withdrawal of consent, by the interested party, before the expiry of this period. After 60 months, your personal data will be automatically deleted or permanently and irreversibly erased or made anonymous. Finally, for this purpose the provision of personal data is optional. However, your refusal to provide the data may make it impossible to receive any customized offer based on your purchasing habits.
vi. prevention and repression of fraud/abuse/fraudulent activities conducted via the website. For this purpose, the legal basis lies in the legitimate interest of the company and the retention period considered of this purpose and, in any case, no more than 48 months. Once this period has expired, your data will be permanently deleted or rendered anonymous. Finally, for this purpose the provision of personal data is necessary.

D. THE SUBJECTS OR CATEGORIES OF SUBJECTS TO WHOM THE PERSONAL DATA MAY BE COMMUNICATED OR WHO MAY COME TO KNOW IT AS DPOs OR AGENTS
Personal data may be processed by our internal and external collaborators (consultants, accountants, etc.) as agents or processors.
In addition, for certain processing operations instrumental to the pursuit of the purposes referred to in the previous points, they may be communicated to third parties with respect to the Company as data processors (e.g., sending advertising emails on behalf of the owner in case of consent, customer service, technological and commercial partners that support the provision of the service, etc.). Your data will not be disclosed for any reason.

E. RIGHTS OF THE DATA SUBJECT
By submitting a written request to the contacts indicated in the paragraph, you can ask the Data Controller for access to the data concerning you, their deletion, the correction of inaccurate data, the integration of incomplete data, the limitation of processing in the cases provided for by art. 18 GDPR, as well as the opposition to processing, for reasons related to your particular situation, in cases of legitimate interest of the Data Controller. Furthermore, if the data processing is based on consent or contract and is conducted with automated tools, you are entitled to receive the data in a structured, commonly used and automatically readable format, as well as, if technically feasible, to transmit them to another controller without impediments. Finally, you have the right to lodge a complaint to the competent Supervisory Authority in the Member State where you normally reside or work or the State in which the alleged violation occurred.