Privacy Policy

Information Notice pursuant to arts. 12, 13 and 14 of Regulation (EU) 679/2016

Dear User,

Thank you for visiting the www.brandart.com website. This page describes the methods used by this website regarding the processing of personal data of those who visit it.

It is an Information Notice provided pursuant to arts. 12, 13 and 14 of Regulation (EU) 679/2016 - General Data Protection Regulation, to those who use the website services provided by Brandart Image Packaging S.r.l. regarding the protection of personal data accessible via electronic communication systems.

The reason for this notice

Brandart Image Packaging S.r.l. has always paid great attention to ensuring the confidentiality, accuracy, availability and security of all data and information. In accordance with the cited Regulation, Brandart Image Packaging S.r.l has adopted and put in place all measures necessary to safeguard the rights and freedoms of data subjects regarding the protection of personal data.

The Privacy Policy and Standards used by Brandart Image Packaging S.r.l. to protect personal data are based on the following principles:

• PRINCIPLE OF RESPONSIBILITY
  The processing is performed based on a principle of responsibility of the Data Controller who has adopted and put in place the security measures required by art. 32 of the Regulation as regards corporate organisation.

• PRINCIPLE OF TRANSPARENCY
  Personal data are collected and subsequently processed according to the principles expressed by the Privacy Policy adopted by Brandart Image Packaging S.r.l. indicated in this Information Notice. At the time the personal data is collected, the Information Notice referred to in arts. 12, 13 and 14 of the Regulation, is provided to the Data Subject.

• PRINCIPLE OF COLLECTION RELEVANCE
  Personal data are processed in a lawful and correct manner; they are recorded for specific, explicit and legitimate purposes; they are relevant and not excessive in relation to the purposes of the processing; they are stored for the time necessary for the purposes of the collection.

• PRINCIPLE OF PURPOSE OF USE
  The specific purposes for which personal data are processed should be made known to the Data Subjects at the time of the collection of the personal data. Any new data processing, if unrelated to the previously stated purposes, shall be activated after sending a new Information Notice to the Data Subject together with a consent request as applicable.

• PRINCIPLE OF VERIFIABILITY
  Personal data are exact and updated over time. They are also organised and stored in such a way that the Data Subject is given the opportunity to find out, if required, what data has been collected and recorded, as well as to check the quality of the same, and request the rectification, integration, erasure due to a data breach, or exercise his right to object to the processing and to exercise all other rights, pursuant to and within the limits of arts. 15-22 of the regulation.

• PRINCIPLE OF SECURITY
  Personal data are protected by technical, IT, organisational, logistic and procedural security measures, against the risk of intentional or unintentional destruction or loss, and unauthorised access or unauthorised processing. These measures are updated periodically on the basis of technical progress, the nature of the data and the specific characteristics of the processing, monitored constantly and verified over time. Third parties who provide support services of any kind to allow Brandart Image Packaging S.r.l. to provide its own services, in relation to which they process personal data, are designated by the latter as Data Processors and are contractually bound to comply with the measures put in place to ensure the security and confidentiality of processing procedures. The identity of these third parties is made known to users. In some cases, the employees of third-party companies that collaborate with Brandart Image Packaging S.r.l. may be granted processing authorisation, if the processing operations are carried out under the direct authority of Brandart Image Packaging S.r.l..Our Company has assessed the impacts that the processing of personal data may have on the freedoms and rights of the Data Subjects (art. 35 of the Regulation) and, consequently, has adopted and put in place the security measures in accordance with art. 32 of the same Regulation.

The processing of personal data related to the web services provided by this website is performed at the Brandart Image Packaging S.r.l. offices in Via A.Costa 19/21 21052 Busto Arsizio (VA) Italy, and alternatively at the independent offices of the third-party designated Data Processors, supervised by individuals authorised by the Data Controller to process the services requested, from marketing activities - where requested by the user - to data storage and retention activities and occasional maintenance operations.

Scope of data disclosure
Personal data may also be disclosed to third parties to fulfil all legal obligations, execute orders received from Public Authorities or exercise or defend a right in a court of law. Given that, if you wish, you can also use the services and products provided by Brandart Image Packaging S.r.l., or receive commercial information from Brandart Image Packaging S.r.l.. Where required to provide the particular services or products requested, personal data may be disclosed to third parties who perform, in their capacity as independent data controllers, activities strictly connected and instrumental to the provision of services or supply of products. Without such disclosure, these services and products could not be provided. Personal data shall not be disseminated unless the requested service requires such measures.

Type of data collected and processing methods
By browsing the Brandart Image Packaging S.r.l. website, your professional and personal interests may be collected: this information, however, is collected for the sole and exclusive purpose of providing the requested services and, as and when appropriate, to test and monitor the quality of the services offered.

Data provided spontaneously by the User
The types of personal data collected and processed on the Brandart Image Packaging S.r.l. website are those necessary for the provision of the various services requested by users. The collected data are processed using paper-based, automated and electronic methods, with logics strictly related to the purposes of the processing. We may also use your fax and telephone numbers and your email address to offer you the services. It is therefore clear that, if such data are not provided, we will be unable to provide the services that require the use of such tools. If you do not grant your consent to the use of your email, telephone and fax details for advertising or direct sales or interactive commercial communications, these tools will not be used for this purpose. Specific Information Notices will be progressively displayed on the website pages pursuant to the collection of personal data. Emails sent voluntarily to the addresses indicated on the website infers the acquisition of the sender's address as well as any other information contained in the message; such personal data shall be used for the sole purpose of providing the support or service requested.

Browsing data
It is useful to know that the data processing systems and software procedures used by this website collect some personal data, during their normal functions, the transmission of which is implicit when using Internet communication protocols. Although this information is not intended to be associated with identified users, given their nature, if they are associated with other data stored by third parties (e.g. your Internet service provider), they may allow the identification of the users. This category of data includes IP addresses or computer domain names used by the users to connect to the website, the URL (Uniform Resource Locator) addresses of the requested resources, the time of request, the method used to make the request to the server, the size of the file received in reply, numerical code indicating the status of the reply given by the server (successful, error etc.) and other parameters of the operating system and the environment used by the User. This data is used for the sole purpose of collecting anonymous statistics on the use of the site and to check it functions correctly. The Data Controller and, depending on the service requested, the designated Data Processors retain, for a limited period foreseen by law, the connections/browsing logs to respond to any requests submitted by any judicial authority or other public body entitled to request such logs to ascertain any responsibility in case of computer crimes.

Apart from what indicated regarding browsing data, users are free to decide whether to grant consent to the collection of the personal data requested on the service request form. Some data, however, may be marked as mandatory on the forms; this means that such data are necessary in order to provide the requested service. If the consent to the collection of such personal data is not granted, the requested service can not be provided along with any other related opportunities.

Security measures put in place to protect collected personal data
Brandart Image Packaging S.r.l. uses "secure" architectures and technologies to protect personal data against unlawful disclosure, alteration or improper use. The personal data security measures put in place aim, in particular, to minimise the risk of intentional or unintentional destruction or loss of such data, further to unauthorised access or unauthorised processing that does not comply with the scope and purpose of collection indicated herein. These security measures comply with the adequacy requisites that the Data Controller is required to meet.

Duration of the processing and Storage of personal data
The processing referred to in this Information Notice shall be carried out to the extent strictly necessary and proportionate for the purposes of providing the services requested by users, as well as fulfilling all obligations imposed on the Data Controller by national and/or supranational laws and by the laws of the countries to which the data may be transferred.

Rights of Data Subjects (arts. 15 to 22 of the Regulation)
To conclude, please note that articles 15 to 22 of the Regulation provides information on how data subjects can exercise their specific rights. In particular, data subjects can obtain from the Data Controller, in relation to their personal data: right to access (art. 15); right to rectification (art. 16); right to erasure - right to be forgotten - (art. 17); right to restriction of processing (art. 18); notification obligation in the event of rectification, erasure or restriction (art. 19); right to data portability (art. 20); right to object (art. 21) and the right not to be subject to automated individual decision-making, including profiling (art. 22).

Data Controller and Data Processor contact details
Brandart Image Packaging S.r.l. is the Data Controller with registered office in Busto Arsizio (VA), via A. Costa 19/21;
The Data Processor is the Chief Information Officer & Controlling Director, domiciled for the purpose at the Data Controller's own premises.