Privacy

Dear customer / supplier

The undersigned Company wishes to inform you that, as part of an orderly management of its Customer/Supplier portfolio, it needs to process certain information concerning you and which is considered as personal data within the meaning of Articles 13 and 14 of the new EU Regulation 679/2016.

DATA CONTROLLER

The data controller, i.e. the company that will decide the purpose and means of processing your personal data, is the company ALIPLAST SPA with head office in Ospedaletto di Istrana in Via Delle Fornaci, 14 Tel. 0422.837090 - Fax 0422.329220 - Email: privacy@aliplastspa.it - aliplastspa@legalmail.it

PURPOSE OF PROCESSING

The personal data we would like to process are necessary:

a) for the fulfilment of all legal (administrative, accounting and tax) and contractual obligations.

b) To share them with companies belonging to the group to which the data controller belongs.

c) For direct marketing purposes and specifically to send you promotional and informative material relating to the products and services that our company is able to provide.

LEGAL BASIS FOR PROCESSING

The legal bases of the processing are:

• the contract with regard to the processing of personal data related to the obligations under the existing contractual relations;

• a legitimate interest of the data controller in the case of sharing your personal data with other companies belonging to the Hera group to which Aliplast S.p.a. belongs; in particular, such data could be shared by our Company in order to be able to benefit from services rendered by other companies belonging to the Hera group, such as, for example, accounting and/or administration and/or logistics services as well as for better planning of our activities and for statistical evaluations according to group logic. In this case we guarantee that all the companies in our group will treat your personal data with the same confidentiality and protection standards used by our company.

• A legitimate interest of the owner for direct marketing activities relating to the sending of information and/or promotional material concerning our products and/or services.

CATEGORIES OF PERSONAL DATA PROCESSED

In particular, we would like to inform you that we may process the following categories of personal data:

• Master data

• Fiscal data

• Contact details

• Bank Codes

• Data on the types of products bought and sold

• Data on possible breaches of contract

CONSEQUENCES OF NON-DISCLOSURE OF PERSONAL DATA

With regard to personal data relating to the performance of the contractual relationship between you and the data controller or relating to the fulfilment of a legal obligation (e.g. fulfilment of obligations related to the keeping of accounting and tax records), failure to provide personal data prevents the completion of the contractual relationship itself.

PARTIES WITH WHOM WE SHARE YOUR PERSONAL DATA

Your personal data will be treated as strictly confidential; in particular, your data may be accessed by the following parties:

• Public bodies (e.g. tax offices);

• Tax document processing agencies;

• Credit institutions;

• Network of agents;

• Group companies to which our company belongs;

• Our lawyers.

For the same purposes, personnel working in the accounting, administrative, commercial and marketing areas of the aforementioned organisations may have access to the data.

PLACE OF PROCESSING

All processing will take place in the European Economic Area. More specifically, the processing operations take place mainly at the premises of the data controller and are carried out by the same. Without prejudice to communications carried out in fulfilment of legal and contractual obligations, the personal data collected will not be transferred to countries outside the EU.

More precisely, the data collected and processed may be communicated in Italy and transferred abroad exclusively for the purposes specified above.

DATA CONTROLLERS

Our company has appointed Mr. Roberto Rupolo as internal data processor, whom you can contact using the company's contact details (Aliplast SpA tel. 0422.837090 - Fax 0422.799469 - Email: privacy@aliplastspa.it) for any needs or explanations concerning your personal data.

The following persons are also appointed as external data processors:

• Professionals or service companies for business administration and management working on behalf of our company.

• Agents acting on behalf of our company

If you wish, you may obtain the list and account details of external data processors by contacting the internal data processor identified above.

MODE OF TREATMENT

Data is processed using automated and non-automated means, in accordance with the stated purposes and in compliance with confidentiality requirements and the most appropriate security measures.
We also assure you that, in accordance with Article 5 of GDPR 679/2016, personal data relating to you will be processed

• in a lawful, fair and transparent manner;

• collected for specified, explicit and legitimate purposes

• subsequently processed in a manner consistent with those purposes;

• adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed; accurate and, where necessary, up-to-date;

• stored in a form that allows the identification of the persons concerned;

• processed in a manner that ensures adequate security of personal data, including protection, by appropriate technical and organisational measures, against unauthorised or unlawful processing and accidental loss, destruction or damage.

DURATION OF DATA RETENTION

All data will be kept for the time strictly necessary in relation to the purposes for which they are processed and for the further period required by current tax legislation.

Without prejudice to the foregoing, processing for marketing purposes will be carried out until the customer exercises his or her withdrawal of consent to this type of processing.

RIGHTS OF THE DATA SUBJECT

Data subjects are granted the rights set out in Articles 15, 16, 17, 18, 20 21 of the aforementioned EU Regulation and in particular:

• the right of access, i.e. to know what personal data our company processes;

• the right to request the correction of any errors and/or omissions;

• the right to obtain the deletion of data;

• the right to restrict data processing;

• the right of portability, i.e. the right to receive all personal data processed by our company in a structured, machine-readable format;

• the right to object to the inclusion of all information.

Data subjects are also granted the right to lodge a complaint with the supervisory authority.

RIGHT TO OBJECT TO DATA PROCESSING FOR DIRECT MARKETING PURPOSES

Finally, you may at any time object to the processing of your personal data for direct marketing purposes and thus be permanently removed from the mailing list.