PRIVACY POLICY PURSUANT TO ARTICLE 13 of the GENERAL DATA PROTECTION REGULATION (EU) 2016/679 (GDPR)
(European regulation on personal data protection)
Dear Customer, this information is provided to individual customers (natural persons), and to
natural persons operating in the name of and on behalf of corporate customers (legal persons), pursuant to article 13
of the General Data Protection Regulation (EU) 2016/679 (GDPR) (European regulation on personal data protection).
1) THE DATA CONTROLLER’S IDENTITY AND CONTACT DETAIL:
The data controller is the company Unitech S.r.l. – Registered office: Via Garbiglia, 18 – 27029 Vigevano (PV) –
VAT NO | TIN 01643710187 - privacy@unitechpackaging.com
2) THE PURPOSES OF AND LEGAL BASIS FOR THE PROCESSING:
a. The processing is necessary for the performance of a contract to which the data
subject is party (art. 6 para. 1 point b GDPR)
The processing of your data is necessary in order to meet obligations arising from a contract/assignment to which
you are party, or to comply, before and after the execution of the contract, with your specific requests.
For such purposes, your prior consent to the processing of your data is not required, as the need to perform a
contract to which you are party, or to comply with your specific requests, constitutes the legal basis legitimating
the data processing.
b. For the purposes of the legitimate interests pursued by the data controller
(art. 6 paragraph 1 point f GDPR)
We will process your data also beyond the extent necessary for the performance of the contract should this be
necessary in order to safeguard our legitimate interests or those of third parties. In such cases, your prior
consent is not required.
c. To comply with a legal obligation (art. 6 paragraph. 1 point c GDPR)
When the processing of your data is necessary for purposes connected with legal obligations imposed by laws, rules,
regulations and provisions issued by the authorities, your prior consent to the processing of your data is not required,
as, in such cases, the need to have the said personal data at our disposal in order to meet a legal obligation to which
the data controller is subject constitutes the legal basis legitimating the data processing.
d. In accordance with consent given by the data subject
(art. 6 paragraph 1 point a GDPR)
In the case of processing of your data for marketing purposes or to receive our newsletters, you are
entitled to give or withhold your consent by ticking the appropriate box in the special form used for indicating
expressions of will. Any consent given may be revoked at any time. However, this revocation of consent applies
only to the future and cannot be applied to previous processing of your data. You may, at any time, request the
list of consents given.
3) METHODS OF PROCESSING:
Your data will be processed using paper and electronic methods. Please be assured that we have
implemented all measures deemed necessary and/or appropriate in order to maintain the integrity of the data, and
to prevent their loss, even accidental, as well as unauthorised access to and use of the same.
4) RECIPIENTS OF PERSONAL DATA:
Your personal data will not be disseminated, only communicated to specific subjects. On the basis of their
roles and qualifications, internal and external staff members are entitled to process the data within the limits
of their competences and in accordance with the instructions given them by the data controller. The same data
may also be communicated to parties entitled to access them pursuant to legal provisions, rules and regulations,
to mail delivery companies, banks and credit institutions, law firms, insurance companies, IT support companies
(hardware, software, web, ICT in general), professional studios/companies providing accounting, fiscal and tax services,
freelance/casual collaborators, agents, inspectors, bodies/companies appointed by and/or in a collaboration
relationship with the undersigned, judicial authorities.
5) DATA TRANSFER:
Your personal data will be managed and stored on servers located within the European Union and will not be
transferred outside the European Union. It is nevertheless understood that the data controller retains the
right, if necessary, to choose to use servers located in other locations in Italy and/or the European Union
and/or non-EU countries. In such cases, the data controller guarantees, as of now, that any data transfer
outside the EU will take place in compliance with the applicable legal provisions, if necessary through
the stipulation of agreements designed to guarantee an adequate level of protection and/or through adoption
of the standard contractual clauses envisaged by the European Commission.
6) DATA STORAGE:
The data controller keeps and processes personal data for the time strictly necessary to fulfil the purposes
indicated, or for the period imposed by applicable civil and tax laws.
7) THE RIGHTS OF THE DATA SUBJECT:
Pursuant to articles 15 et seq. of Regulation (EU) 2016/679 (GDPR), data subjects may exercise their rights
by writing to the data controller at the address given above or by sending an e-mail to privacy@unitechpackaging.com.
Data subjects also have the right to lodge complaints with the supervisory authority in the member state
of their habitual residence.
8) WITHDRAWAL OF CONSENT:
with respect to art. 7 of GDPR 679/16 the data subject can withdraw at any time the consent given.
9) RIGHT TO LODGE A COMPLAINT:
the data subject can lodge a complaint to the State control authority of residence.
10) PROVISION OF DATA:
Where provision of your full personal data and the email address for the sending of the administrative
documents is compulsary in order to comply with legal requirements, rules and regulations, and thus determines
our ability to meet, correctly and effectively, our contractual obligations, your possible refusal to provide
the said data will make it impossible for us to enter into a contract with you; the consent, on the other hand,
to send advertising material, to conduct market research, to carry out promotional activities is optional.
11) AUTOMATED DECISION-MAKING PROCESSES:
The data controller does not process data using methods involving automated decision-making processes.