Privacy Policy

Information pursuant to art. 13 of European Regulation 679/2016

Pursuant to art. 13 of the European Regulation (EU) 2016/679 (hereinafter GDPR), and in relation to the personal data of which TERAPLAST SPA, in the person of the Legal Representative Pro tempore, with headquarters in Via Del Progresso, n 65 – 36070 – Castelgomberto ( VI) – VAT number: 02892400249 will become available to the personal data provided by you, in the execution of a contract of which you are a party or in carrying out pre-contractual activities upon your request, we inform you of the following:

1. Data controller and person responsible for the protection of personal data

The data controller is  TERAPLAST SPA (hereinafter also referred to as “DATA CONTROLLER” in the person of the Legal Representative Pro tempore, with headquarters in Via Del Progresso, n 65 – 36070 – Castelgomberto (VI) – VAT number: 02892400249. THE Data Controller may be contacted for any communication regarding privacy at the following email address: [email protected].

2. Purpose of data processing and legal basis of processing

The Data Controller processes the personal data of natural persons, legal entities, sole proprietorships and/or freelancers (“Data Subjects”) for the following purposes:

1. need to execute a contract of which the interested party is a party or to carry out pre-contractual activities at his request. This necessity represents the legal basis that legitimizes the resulting processing. The provision of the data necessary for these purposes represents, depending on the case, a contractual obligation or a requirement necessary for the conclusion of the contract; in the absence of them, the owner would be unable to establish the relationship or execute it;
2. need to fulfill legal obligations (e.g. obligations under anti-money laundering legislation, provisions issued by Supervisory Authorities, the Judiciary, etc.). This necessity represents the legal basis that legitimizes the resulting processing. The provision of the data necessary for these purposes represents a legal obligation; in the absence of them, the owner would be unable to establish relationships and may have the obligation to make reports;
3. need to carry out processing activities on plastics and different materials, including through the design and creation of moulds, the final assembly of multiple parts and the creation of customized packaging. This necessity represents the legal basis that legitimizes the consequent processing. The provision of the data necessary for these purposes represents, depending on the case, a contractual obligation or a requirement necessary for the conclusion of the contract; in the absence of them, the owner would be unable to establish the relationship or execute it;
4. sending dedicated commercial communications, including through the sending of news letters, text messages, emails and telephone calls, carrying out promotional, marketing and sales activities of “dedicated” products and services of the owner or third-party companies, specifically identified through the processing and analysis, also through the use of automated techniques or systems, of information relating to preferences, habits, consumption choices, aimed at dividing interested parties into homogeneous groups based on specific behaviors or characteristics (customer profiling ) also implemented through the enrichment of data with information acquired from third parties (enrichment). The legal basis that legitimizes the resulting processing is the consent of the interested party which he is free to give or not and which he can, in any case, revoke at any time. The provision of the data necessary for these purposes is not mandatory and the refusal to provide them does not lead to any negative consequences, except for the impossibility of receiving dedicated commercial communications.

Personal data may be processed using both paper and computer archives (including portable devices) and processed in ways strictly necessary to meet the purposes indicated above.

3. Consequences of failure to provide personal data

With regard to personal data relating to the execution of points a, b, c, above of which you are a party, or relating to the fulfillment of a regulatory obligation (for example the obligations related to the keeping of accounting and tax records), failure to communicate personal data prevents the completion of the contractual relationship itself and/or in any case the possibility of carrying out and carrying out existing commercial and contractual collaboration activities as well as fulfilling the contractual obligations deriving from points a, b, c themselves. With regard to personal datathem relating to the commercial and promotional activities referred to in point d), the provision of the data necessary for these purposes is not mandatory and the refusal to provide them does not lead to any negative consequences, except for the impossibility of receiving dedicated commercial communications

4. Data retention

Your personal data, subject to processing for the purposes indicated above, will be kept for the duration of the contract and, subsequently, for the time in which the Data Controller is subject to conservation obligations for tax purposes or for other purposes, foreseen, by law or regulation.

5. Data communication

Your personal data may be communicated to:

a) consultants and accountants or lawyers who provide functional services for the purposes indicated above;
b) banking and insurance institutions that provide functional services for the purposes indicated above;
c) subjects who process data in compliance with specific legal obligations;
d) Judicial or administrative authorities, for the fulfillment of legal obligations;

6. Data Profiling and Dissemination

Your personal data is not subject to dissemination or any fully automated decision-making process, including profiling.

7. Rights of the interested party

The rights recognized to you by the GDPR include those of:

• ask the Data Controller for access to your personal data and information relating to them; the rectification of inaccurate data or the integration of incomplete data; the deletion of personal data concerning you (upon the occurrence of one of the conditions indicated in art. 17, paragraph 1 of the GDPR and in compliance with the exceptions provided for in paragraph 3 of the same article); the limitation of the processing of your personal data (in the event of one of the hypotheses indicated in art. 18, paragraph 1 of the GDPR);
• request and obtain from the Data Controller – in the cases in which the legal basis of the processing is the contract or consent, and the same is carried out by automated means – your personal data in a structured and readable format by automatic device, even at order to communicate such data to another data controller (so-called right to portability of personal data);
• object at any time to the processing of your personal data in the event of particular situations concerning you;
• revoke consent at any time, limited to cases in which the processing is based on your consent for one or more specific purposes and concerns common personal data (for example date and place of birth or place of residence), or particular categories of data (for example data revealing your racial origin, your political opinions, your religious beliefs, your health or sexual life). Processing based on consent and carried out prior to its revocation, however, retains its lawfulness;
• submit a complaint to a supervisory authority (Personal Data Protection Authority – garanteprivacy.it).