INFORMATION NOTICE PURSUANT TO ART. 13 ET SEQ. OF EU REGULATION 679/2016

Neveplast, owned by Neveplast, with registered office at Via L. Galvani, 18, Albano Sant'Alessandro, BG, Italia, 24061, as the data controller of personal data under EU Regulation 679/2016, effective from May 25, 2018 – General Data Protection Regulation (“GDPR”) (hereinafter referred to as GDPR or “Applicable Law”), provides this privacy notice only for the website https://www.neveplast.it (“Site”) and does not apply to other websites that may be accessed via external links. This notice is provided pursuant to Art. 13 et seq. of the Applicable Law.

PRINCIPLES

The processing of your personal data by Neveplast is carried out in accordance with the principles of accountability, lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, integrity, and confidentiality, in accordance with the legislative provisions of the Applicable Law and the confidentiality obligations provided therein.

DATA CONTROLLER

Neveplast, with its registered office at Via L. Galvani, 18, Albano Sant'Alessandro, BG, Italia, 24061 (hereinafter briefly referred to as Neveplast), processes your personal data for the purposes specified below, connected to the provision of its services, the forwarding of information requests and contact through its website, and the operation of the said website (hereinafter referred to as “Site”), as the Data Controller. The Data Controller determines the purposes and means of processing personal data.

PERSONAL DATA SUBJECT TO PROCESSING

“Personal Data” refers to any information relating to an identified or identifiable natural person (the data subject), with particular reference to an identifier such as a name, identification number, location data, online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person. The personal data collected on this site are:

Browsing Data

The Site’s computer systems collect some of your personal data, the transmission of which is implicit in the use of Internet communication protocols. This information is not collected to be associated with you, as the data subject, but could, by its very nature, through processing and association with data held by third parties, allow you to be identified. These include IP addresses or domain names of the devices used to connect to the Site, URI addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server’s response (success, error, etc.), and other parameters related to the operating system and computing environment. This data is used to obtain anonymous statistical information on the use of the Site, to ensure its proper functioning, to provide the correct delivery of the various functionalities requested, for security reasons, and to determine liability in the event of hypothetical computer crimes against the Site or third parties.

Data Provided Voluntarily

Through the Site, you, as the data subject, can voluntarily provide personal data such as your name and email address through the forms available on the site. Neveplast will process this data in accordance with the Applicable Law, assuming that it refers to you as the data subject who provided it or who has expressly authorized third parties to provide it on your behalf based on a suitable legal basis that legitimizes the processing of such data. In these cases, you, as the data subject, and the third party who provided the data on your behalf, assume all legal obligations and responsibilities, holding Neveplast harmless from any dispute, claim, or demand for compensation for damages resulting from processing, etc., that may be brought against Neveplast by other parties whose personal data has been processed through the use of the Site in violation of the Applicable Law.

Cookies and Similar Technologies

Neveplast collects your personal data through cookies. Cookies are small data files that can be sent by a website to the user’s terminal (usually the browser), where they are stored to be sent back to the site during the next visit. A cookie cannot retrieve any other data from the data subject’s hard drive, transmit computer viruses, or acquire email addresses. Cookies can be used by both the site owner and third parties and can be easily disabled by the data subject. To regularly provide its services, Neveplast needs to use certain cookies, including third-party cookies, through this Site. Therefore, if you, as the data subject, decide to disable cookies, for purely technical reasons, Neveplast may be unable to provide you with certain services or to provide them in the manner requested. More information on the use of cookies and similar technologies is available in the dedicated section accessible from the footer of the site.

PURPOSES OF PROCESSING AND LEGAL BASIS

Your personal data, provided by you through the Site, will be processed by Neveplast for the following purposes:

• Registration on the Neveplast website, as well as purposes aimed at doing everything necessary for the provision of the services offered, which takes place mainly through automated and computerized methods, pre-contractual purposes, and contract stipulation. In these cases, for certain services, Neveplast will provide you with additional and specific information on the processing of personal data, in addition to this privacy notice. The legal basis for processing your personal data for the purposes described above (point a) is the provision of the contracted service itself or the response to a request and does not require consent under the applicable law.
• Purposes of research/statistical analysis on aggregated or anonymous data, without the possibility of identifying you, purely aimed at measuring the operation of the Site, evaluating traffic, usage, and interest. This purpose (point b) does not involve the processing of personal data.
• Purposes related to compliance with legal obligations, regulations, community legislation, orders, and prescriptions from competent authorities to which Neveplast is subject. The processing related to the above-mentioned purpose (point c) does not require consent as it constitutes a legitimate processing activity, fulfilling legal obligations, including those related to the provision of services;
• The pursuit of our legitimate interest, as the Data Controller, such as managing complaints and disputes, recovering debts, preventing fraud and illegal activities. The legal basis in this case (point d) is the legitimate interest of Neveplast, including to exercise and/or defend, where necessary, its rights in the appropriate venues.
• Conducting commercial and promotional communication activities to the email address provided by you, as the data subject, related to services and activities of Neveplast. The provision of consent to process your personal data for the purposes listed above (point e) is optional, but failure to provide it could make it impossible to respond to a request or fulfill an obligation to which Neveplast is subject or has been requested.

RECIPIENTS

Your personal data may be shared and communicated, for the purposes specified above in point 3, in Italy or abroad, to third parties such as:

• Subjects necessary for the provision of services offered by the Site, such as tax and legal consultants of Neveplast in relation to their respective obligations, companies and technical consultants responsible for the management and maintenance of information systems, software, and databases, financial, administrative, storage, auditing, and financial statement certification service companies, in any case, strictly in connection with and within the limits of fulfilling their respective tasks and activities.
• Persons authorized by Neveplast to process personal data who are committed to confidentiality or have an appropriate legal obligation of confidentiality (e.g., employees and collaborators of Neveplast).
• Judicial authorities in the exercise of their functions when required by the Applicable Law.

TRANSFERS

Some of your personal data may need to be transferred to recipients outside the European Union, in compliance with the applicable regulations.

DATA RETENTION

Neveplast will process your personal data for the time strictly necessary to achieve the purposes detailed and indicated in point 3 for a limited period, which varies depending on the type of activity that involves personal data processing. After this period, your data will be permanently deleted or made irreversibly anonymous.

• Data collected to conclude and execute contracts will be retained for ten years from the date of contract conclusion.
• Billing-related data will be retained for ten years from the billing date.
• Your data as a registered user, entered at the time of registration on the site, will be retained until the profile deletion request is made.
• Data communicated by you to Neveplast using forms will be retained until the deletion request is made.
• Any attachments and data contained therein will be retained for 12 months from receipt;
• Data provided for commercial communication activities and/or sending newsletters will be retained until the user requests the activity to be stopped and/or unsubscribes from the service or until you ask us to cease sending.

RIGHTS OF THE DATA SUBJECT

Within the limits of the Applicable Law, as the data subject regarding the processing of your personal data through the Neveplast website, you may exercise the following rights at any time:

• The right to obtain confirmation as to whether or not personal data exists and, if so, to access and obtain a copy of it. Unless otherwise required by applicable law, Neveplast may refuse the possibility of obtaining such a copy if it could harm the rights and freedoms of others;
• The right to obtain information on the source of the personal data; the purposes and methods of the processing of personal data; the logic applied in case of processing carried out with the aid of electronic means; the identification details of the Data Controller and, if appointed, of the Data Processors and the privacy representative; the subjects or categories of subjects to whom personal data may be communicated;
• The right to obtain: the updating, rectification, or integration of data; the deletion, anonymization, or blocking