This is to inform you that our company is carrying out the processing of your personal data. The processing is carried out by the criteria outlined in the European Data Protection Regulation, Reg. 2016/679/EU, in force since May 25, 2018 (hereinafter G.D.P.R.). According to the indicated regulations, the processing must be based on the principles of fairness, lawfulness, and transparency and the protection of your privacy and rights.

1) The data controller is Imball srl, in the person of its legal representative pro tempore, with registered office at Via Cà De Testi, 16/3 40037 Sasso Marconi (Bo) tel: 051-842154 e-mail: amministrazione@imball.it.

2) The data collected will be used for the following purposes:

1. a. Sending requested information for which express consent is not required (Art. 6.1(a), G.D.P.R.);
2. b. Commercial marketing for which express consent is required (Art. 6.1(a) and (f), G.D.P.R.).

3) Modalities: Personal data are processed by the owner and duly appointed managers for the proper fulfillment of the purposes indicated in point 2) by means of electronic tools and paper archives, as well as with the use of security measures to ensure the confidentiality of personal data and to prevent undue access to unauthorized parties.

4) Communication: data may be communicated to duly appointed internal and external parties which carry out activities on behalf of the data controller.

Disclosure to third countries outside the E.U. and dissemination (e.g., social networks, websites, etc.) is not envisaged. The data controller does not use solely automated processes to achieve the purposes set forth in this policy and does not engage in profiling.

5) The Controller will process personal data for as long as necessary to fulfill the above purposes and in any case for no longer than 2 years after the termination of the relationship for the stated Purposes.

6) The data subject shall have the right to request from the data controller access to or rectification or erasure of his or her personal data or restriction of the processing concerning him or her, or the right to object to its processing, as well as the right to request portability of the data.

The request can be made by email or by fax or registered mail with the subject line: “request by data subject” specifying in the request the right the data subject wishes to exercise (cancellation, rectification, portability, oblivion), together with a valid email/pec address to which to deliver the acknowledgment.

The data controller or, anyone appointed by the same, will proceed to fulfill the request within 30 days from the date of receipt. Should the response be complex, the time could be extended to an additional 30 days, subject to timely notice to the same interested party.

Should you deem it appropriate to assert your rights, you are entitled to file a complaint with the competent supervisory authority, corresponding to the National Privacy Guarantor, located at Piazza Venezia, 11 – 00187 Rome, garante@gpdp.it.