Privacy

INFORMATION ABOUT PERSONAL DATA PROCESSING IN ACCORDANCE WITH ARTICLE 13 OF THE REGULATION (EU) 2016/679

Data subjects: visitors of “UNIVERSAL PACK S.R.L.” website www.universalpack.it

WHY THIS INFORMATION

In accordance to the Regulation (EU) 2016/679 (below “Regulation”, or “GDPR”), this page describes the methods of processing personal data of the users visiting “UNIVERSAL PACK S.R.L.” website, accessible by electronic means at the following URL: www.universalpack.it

This information do not affect other websites, pages or online services accessible by hypertext links eventually uploaded on this website, but it is referred to external resources in relation to the domain www.universalpack.it

DATA CONTROLLER

After the visitor has accessed the aforementioned website, personal data related to identified or identifiable individuals can be processed.

The data controller is “UNIVERSAL PACK S.R.L.” with registered and operative head office in Via Vivare, 425 – 47842 San Giovanni in Marignano (RN), VAT Number / Tax Code: 02209430400

TYPOLOGIES OF DATA PROCESSED, PURPOSE OF PROCESSING AND LEGAL BASIS

1) Navigation data
Legal basis: “Data processing needed for the website navigation” – contract obligations – art. 6 par. 1 (B) of GDPR

During their operations, ICT systems and software procedures aimed at the functioning of this website collect some personal data related to its users, whose transmission is implicit in the use of Internet communication protocols.

This category of data includes IP addresses or domain names of computers and terminals used by users, the addresses in URI/URL notation (Uniform Resource Identifier/Locator) of the requested resources, the time of the request, the method used when placing request to server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters related to the operating system and the user’s computer environment.

These data are needed for browsing the website and for using the information uploaded on it. Moreover, they are processed by the controller in order to:

• obtain aggregate and anonymous statistical information with regard to the use of the website (more visited pages, number of visitors by time or day, geographic areas of visitors, ecc.);
• check the correct usability of the contents offered by the website;
• prevent or combat any kind of computer crime, the fraudulent use of the functions available on the website, in order to restore security accidents and their traceability

Duration of the storage:
In compliance with the principles of lawfulness, purpose limitation, data minimization, according to art. 5 of GDPR, the navigation data will be stored for a period of time no longer than that required for carrying out the purpose for which they were processed, except when required by the judicial authorities to detect criminal activities.

2) Data communicated by the user
Legal basis: “Data processing needed to answer questions of the users” – contract obligation – art. 6 par. 1 (B) of GDPR

The optional, explicit and voluntary sending of messages to the contact address of “UNIVERSAL PACK S.R.L.”, private messages sent by the users to profiles/institutional pages on social media (where this possibility is provided for), as well as the compilation and transmission of forms available on the “UNIVERSAL PACK S.R.L.” websites, involves the collection of the user’s contact information, as well as the personal data included in the same communications.

Specific notes are published on the pages of the website dedicated to the provision of certain services; if necessary, the consent is collected by informing the user each time about the purposes and optional nature of the provision.

Duration of the storage:
The data communicated by the user are stored for the time needed to manage the individual requests; the potential next period of storage for statistical purposes involves the anonymization of these data (except when required by the judicial authorities to detect criminal activities).

3) Cookies and other tracking systems

Use is made of:

1. technical cookies needed for the navigation of the users, they facilitate the correct browsing of the website and the usability of the contents by the user. Legal basis: “contract because they are functional and necessary”.
2. Analytical cookies used to process aggregate statistical analysis about the use and the interaction by the user with the website. Only with user’s consent. Legal basis: “consent”.
3. Profiling cookies allow to collect information about user’s expressed preferences during its browsing activity and to process reports intended to be used for targeted marketing and advertising campaigns. Legal basis: “consent”.

The information about personal data processing, purposes, duration and cookie management, including the consent and withdrawal, are available in the document “Cookie management”, which you can find in the footer as well.

4) Social Media Policy: Information about the personal data processing made with Social Media platforms used

For all the information about personal data processing made by social media platforms operators, see the information provided by them with the respective privacy policies. The controller processes the personal data given by the users through the pages of the dedicated Social Media platforms, as part of their promotional purposes and business publicity, to manage the interactions with the users themselves (comments, public posts, messages, shared contents, etc.) in compliance with the current regulation regarding the protection of personal data and this statement; if necessary, the consent is collected by informing the user each time about the purposes and optional nature of the provision. Personal data (or “sensitive”) inserted in comments or public posts on social media platforms can be deleted.

The Social Media platform used are:

• YouTube 
• Linkedin 

DATA RECIPIENTS

The data collected as a result of the consultation of the sites listed above may be recipients of the data, designated by the controller in accordance with article 28 of the Regulation, as data processors, and other further service providers as part of web-agencies, digital communication, system support, and other possible digital service providers, for which it is possible to request the full list by writing to info@universalpack.it

Some data and information may be transmitted or collected by subjects identified as independent data controllers, these data are related to cookies, which are anonymized before sending, for statistical purpose. If it is expected the transfer of these data to non-EU countries, the assurance measures will be indicated, described in the paragraph 6 of this document.

The personal data collected is furthermore processed by “UNIVERSAL PACK S.R.L.” staff, acting in compliance with specific instructions in order to respect aims and control procedures.

SECURITY OF THE PROCESSING

The personal data transmitted and stored as long as necessary to achieve the expressed purposes are protected by specific technical and organizational security measures in relation to art. 32 of the Regulation, guaranteeing confidentiality, integrity, availability and even the ability to restore the availability and the access to personal data in a timely manner in the event of a physical or technical incident, even in the face of risks deriving from accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access, of personal data transmitted, stored or processed.

TRANSFER OF PERSONAL DATA TO NON-EU COUNTRIES

The controller does not transfer personal data to non-EU countries. If there is this necessity, the data subjects will be previously informed, and assurance measures for the transfer to data recipients will be adopted, which can be, depending on the case: verification of the existence of adequacy decisions for the recipient country made by the Commission, subscription of standard contractual terms, verification of the adoption of possible additional measures in compliance with the recommendation 01/2020 EDPB. Notwithstanding these guarantees, if applicable (in relation to art. 49 of GDPR), for data processing it is possible to verify the existence of a contract or pre-contractual measures in favor of the interested subject, or the consent to the transfer.

RIGHTS OF DATA SUBJECTS

From “UNIVERSAL PACK S.R.L.”, the data subjects are entitled to obtain, in the cases provided for, the access to own personal data, the correction, the deletion, the limitation of the processing, the portability or the possibility to oppose the processing and withdraw the consent (if used as legal basis in compliance with artt. from 15 to 22 of the Regulation).
The request must be submitted using contact information of “UNIVERSAL PACK S.R.L.” with registered and operative head office in Via Vivare, 425 – 47842 San Giovanni in Marignano (RN).
For the exercise of rights, it is possible to use the form provided and available on the Data Protection Authority’s website at this link:
https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/9038275

RIGHT TO COMPLAINT

Data subjects that argue that personal data processing through this website infringes the Regulation, are entitled to lodge a complaint to the Supervisory Authority, as established in art. 77 of Regulation itself, or to take the appropriate judicial seats (art. 79 of the Regulation). The form to propose complaint is available on the Data Protection Authority’s website at this link: https://www.garanteprivacy.it/home/docweb/-/docwebdisplay/docweb/4535524