PRIVACY POLICY

As required under Italian Legislative Decree No. 196/2003 and EU Regulation No. 679/2016 (GDPR) and with reference to the personal data concerning you that will be processed by us, please be informed of the following:

1. PURPOSES OF PROCESSING

Mecolpress S.p.A., in its capacity as the data controller, will process the personal data of the customer for the following purposes:

  1. a) deliberating on whether to conclude a contract with the customer (financial standing of the customer, potential consequences of the contractual relationship in terms of reputation, anti-bribery and money-laundering compliance);
  2. b) concluding the contracts with the customer, as well as managing and performing the contracts entered into with the customer;
  3. c) complying with the provisions of the Italian Civil Code, as well as with any other tax-related or accounting obligations; complying with contractual obligations; providing technical support and assistance with regard to the products and services purchased by you, including after sale and after the expiry of the related warranty, where expressly agreed; managing the contractual relationship from an administrative viewpoint;
  4. d) with reference to marketing and references, information on future commercial initiatives, product and/or service innovations, offers.

2. LEGAL GROUNDS OF PROCESSING

The personal data of the customer are processed on the basis of consent expressed upon signing of this Privacy Policy.

Be informed that in the absence of consent or in the event of withdrawal of the same, we may still process your personal data on the strength of the following legal grounds.

  1. a) processing is necessary for the performance of the contract to which you are a party or in order to take steps at your request prior to entering into a contract;
  2. b) processing is necessary for compliance with a legal obligation to which Mecolpress S.p.A is subject.
  3. c) processing is necessary to protect the interests of a natural person;
  4. d) processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in Mecolpress S.p.A.;
  5. e) processing is necessary for the purposes of the legitimate interests pursued by Mecolpress S.p.A.; in particular, legitimate interests may include:
  • the interest to enter into, manage and perform the contracts under section 1, item b) above;
  • the interest to protect the company’s interests arising – directly or indirectly – out of the above contracts;
  • the interest to protect the company’s security and assets;

provided that the interests or the fundamental rights and freedoms of the data subject are not overriding.

3. PROVISION OF PERSONAL DATA

Without prejudice to the right of the data subject to make an independent choice, provision of personal data to be obtained directly may be:

  1. a) obligatorily required in order to comply with national laws and regulations, EU legislation or provisions issued by the competent authorities or by supervisory and monitoring bodies;
  2. b) strictly necessary for the conclusion of new contracts between Mecolpress S.p.A. and the customer or the management and performance of existing contracts.

Objection by the data subject to the processing of personal data and/or refusal by the same to provide personal data may lead to the impossibility for or refusal by us, in whole or in part, to enter into any new contracts with the data subject or to perform the contracts that are already in place, to fulfil obligations imposed by national laws and regulations, EU legislation or provisions issued by the competent authorities or by supervisory and monitoring bodies

4. DATA COLLECTED FROM THIRD PARTIES

Be informed that the personal data which are subject to processing, in particular for the purposes under section 1, item a) above, may be obtained from third parties, rather than directly from the data subject, by accessing specific databases or using dedicated enquiry services.

5. METHODS OF PROCESSING

Personal data may be processed through analogic or electronic or simply automated means, using the methods and procedures that are strictly necessary to pursue the purposes above.

Mecolpress S.p.A. may process the data directly through persons that belong to its organisation or through external entities. Such persons and entities will process the data:

  1. a) in accordance with the instructions provided by the data controller, acting in their capacity as persons authorised to process the data or processors, exclusively for the specific purposes set out in this Privacy Policy.
  2. b) independently, as independent controllers.

6. DISCLOSURE AND DISSEMINATION OF PERSONAL DATA

For the exclusive purposes under section 1 above, personal data may be disclosed to:

  1. a) employees or contractors of Mecolpress S.p.A. who have been authorised by the company to process the data;
  2. b) lending institutions, providers of document registration, packaging, transport and sorting services, works contractors and service providers, notaries, lawyers, assessors, debt collection firms and consultants, independent auditing firms;
  3. c) entities to which the personal data must be disclosed to comply with collective agreements (e.g.: trade unions) or specific legal obligations (e.g.: public security bodies and other public authorities).

Personal data will not be disseminated under any circumstances.

7. RIGHTS OF THE DATA SUBJECT

The legislation on the protection of personal data (articles 7-10 of Italian Legislative Decree No. 196/2003 and articles 12-22 of EU Regulation 679/2016) grants the data subject the right to be informed of the processing of personal data, as well as the right to access the data at any time and to request their updating, completion and rectification. Where the relevant conditions apply, the data subject shall also have the right to request erasure of personal data or restriction of processing, the right to data portability, the right to object to processing, as well as the right not to be subject to decisions based solely on automated processing.

When processing of personal data is based on consent by the data subject, the latter shall have the right to withdraw consent.

To exercise your rights or to obtain more detailed information on the persons or entities to whom your personal data are disclosed or who may come to learn your data in their capacity as processors or as persons authorised to process the data, you may contact the data protection officer of Mecolpress S.p.A. at the following address: Via Don Maestrini, 51 – 25020 Flero (BS), Italy, or at the following email address: gdpr@mecolpress.com

Should you believe that your rights have been affected, you may lodge a complaint with the Personal Data Protection Authority.

8. PERIOD FOR WHICH THE PERSONAL DATA WILL BE STORED

The personal data will be stored for the time necessary to achieve the purposes under section 1 above, and, once the above purposes have been achieved, until expiration of the rights to which you and Mecolpress S.p.A. are entitled in consequence of the legal and de facto relationships occurred between the parties and in connection – directly or indirectly – with the above purposes (10 years).

As regards marketing purposes, the data will be stored for 5 years.

9. PROCESSING OF THIRD-PARTY DATA

The customer is informed that should the customer choose to involve third parties (e.g.: representatives, employees, contractors) in the performance of the contracts entered into with Mecolpress S.p.A., the personal data of any such third parties may be processed by Mecolpress S.p.A., in its capacity as data controller, for the purposes under section 1 above and, in particular, for the management of the contracts with the contact persons and representatives of the customer.

Said processing shall be carried out for the same purposes and in the same manner and the data shall be stored for the same period as previously described in this Privacy Policy; with regard to said processing, the data subjects shall have the same rights as identified under section 8 above.

The customer undertakes to inform any data subjects involved by the customer with regard to the above processing, including by giving them this Privacy Policy and getting them to sign it for acceptance.

Mecolpress