Policy

Disclosure on the processing of personal data Esinplast S.r.l., with head office in Monsano (Italy), Via S. Ubaldo 31/C-D-E, as the data controller pursuant to Art. 13 of Regulation (EU) 679/2016 (General Data Protection Regulation – hereinafter “GDPR”), provides the following information regarding the processing of personal data you – as the data subject – communicate to us.

Our policy

All people are entitled to the protection of personal data concerning them. Esinplast S.r.l., with head office in Monsano (Italy), Via S. Ubaldo 31/C-D-E, respects the right of its users to be informed regarding the collection of their personal data and the operations related to its processing. Your personal data will be processed in accordance with the principles of correctness, lawfulness, transparency and the protection of your privacy and rights. For further information on our privacy policy, please contact us at the following electronic mail address: esinplast@esinplast.it.

Who processes your personal data, for what purposes and how

Your personal data is collected and processed solely for the purposes strictly related to the use of the website, its services and the possible purchase of products online. In particular, your personal data can be processed for the following purposes: In the context of the registration processes on the website www.windowsimprove.com, we collect your personal data (for example: electronic mail address, postal address, sex, user ID, password) through the relative registration form so that you can access the reserved areas and/or receive newsletters, if requested; If there are specific processes for the purchase of products and/or services, we collect your personal data (for example: electronic mail address, vital data, postal address, credit card and bank details, telephone number) through the relevant order form; a) to provide assistance and customer care services;  b) for registration to the newsletter services;  c) to enter the master records into the IT databases of the data controllers;  d) for the accounting records;  e) to manage proceeds and payments;  f) to fulfil the obligations envisaged in the civil and tax legal provisions, regulations and European legislation. Your personal data will be processed mainly in electronic form and, in some cases, also in printed form, for example when the processing of your data is necessary to prevent fraud, by the data controller, data processor and subjects in charge of data processing, who or which will adopt any measure to safeguard the security and confidentiality of the data.  Sensitive data will be processed under the limitations envisaged in General Authorisation no. 5 of 2011 of the (Italian) Data Protection Authority. The personal data will be stored in the form that allows its identification for the time strictly necessary to fulfil the purposes for which it was collected and subsequently processed, and, nonetheless, within the terms of the law.  Your personal data will not be communicated to third parties for purposes not allowed by the law or without your express permission. Your personal data may only be communicated to third parties when strictly necessary to execute the contract, such as, for example, to online payment entities such as Paypal, to finalise remote electronic payment services via credit/debit card, whenever the customer decides to purchase a product or service. Moreover, your data may be communicated to the police or judicial authorities, in conformity to the law and following a formal request submitted by these subjects.

Nature of the data collection and consequences of refusal to confer data

Conferral of your personal data is compulsory for the purposes strictly related to the use of the website and its services, for purchasing products online (where relevant) and in order to fulfil legal obligations.  Communication of your personal data and, in particular, vital data, is necessary in order to stipulate the contract for the purchase of products or the supply of services rendered on the website on the customer’s request, or in order to fulfil obligations deriving from the law or regulations.  Your refusal to communicate any data necessary for these aims could imply the impossibility of executing the contract for the purchase of products and/or services and the impossibility of providing the services through this website. If products and/or services are purchased, failure to communicate your personal data may constitute – depending on the cases – a legitimate and justified reason for not executing the contract for the purchase of products and/or services.

Communication and dissemination of data

In order to execute the contract and for the purposes stated above, your personal data may be communicated to:  - all natural and legal persons (legal, administration and tax consulting firms, auditing firms, couriers and forwarders, data processing centres, etc.) whenever the data communication is necessary for the purposes illustrated above;  - banks, in order to manage proceeds and payments;  - our collaborators and employees specifically entrusted and within the context of their relative duties. The personal data collected will not be disseminated.

Security measures

We have adopted security measures in order to minimise the risk of destruction or loss – even accidental – of the data or unauthorised access to it, or processing of data deemed unlawful or not conforming to the collection purposes stated under our Privacy Policy.  However, Esinplast S.r.l., with head office in Monsano (Italy), Via S. Ubaldo 31/C-D-E, cannot guarantee its users that the measures adopted for the security of the website and the transmission of data and information limit or exclude any risk of unauthorised access to or dispersal of the data. We advise you to install adequate software in your computer to protect incoming and outgoing network traffic (e.g. updated anti-viruses) and to ensure that the Internet services provider has adopted adequate measures for the security of network data transmission (e.g. firewalls and spam filters).

Cookies

This website uses automatic data collection systems, such as cookies. Cookies are devices that are downloaded to the user’s hard disk; they do not contain comprehensible information but allow for associating users with their personal data (for example, data collected regarding IP addresses of users and other information relative to their permanence time on the website or preferences expressed during navigation) they release. Cookies are placed by our server and nobody can access the information they contain. This information and data are collected directly and automatically from the website as part of its operation. This information and data are then processed in anonymous and aggregate form for commercial purposes and to optimise the services according to the preferences of the website users.  For further details regarding the use of cookies, please consult our section dedicated to the Cookie Policy.

Rights of the data subject

In your position of data subject, you can exercise the rights stated under Art. 15 of the GDPR, more specifically: i. obtain confirmation of the existence or not of data concerning you, even if not yet recorded, and its communication in intelligible form; ii. obtain information on: a) the origin of the personal data; b) the purposes and methods of the data processing; c) the logic applied to data processing, if the latter is carried out with the aid of electronic means; d) the identification details of the data controller data processor and the representative designated pursuant to Art. 5, Par. 2, of the Privacy Code, and Art. 3, Par. 1, of the GDPR; e) the entities or categories of entities to whom or which the personal data can be communicated or who or which may get to know of it as designated representatives in the State’s territory, data processors or persons in charge of data processing. iii. obtain: a) the updating, rectification or, where interested therein, integration of the data; b) the erasure, anonymisation or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which it was collected or subsequently processed; c) the certification to the effect that the operations under letters a) and b) have been notified, also with regard to their contents, to the entities to whom or which the data was communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right to be safeguarded; iv. object, wholly or partly: a) on legitimate grounds, to the processing of personal data concerning you, even though it is relevant to the purpose of the collection; b) to the processing of personal data concerning you, when carried out for the purpose of sending advertising materials or direct selling or for undertaking market or commercial communication surveys, by means of automated calling systems without the intervention of an operator via e-mail and/or via traditional marketing means through telephone and/or postal mail. The data subject’s right to object, as stated under point b) above, for the purpose of direct marketing via automated means also extends to traditional marketing means and, nonetheless, the data subject remains entitled to exercise his/her right to object even partially. Therefore, the data subject may decide whether to receive communications through traditional means or only automated means, or through none of the two types of communication. Where applicable, the data subject can exercise the rights envisaged in Arts. 15–21 of the GDPR (right to rectification, right to erasure, right to restriction of processing, right to data portability, right to object), in addition to the right to file a claim with the Data Protection Authority. Right to erasure Pursuant to Art. 17 of Regulation 679/2016 – General Data Protection Regulation (the “GDPR”), you can request the erasure of all your personal data from the data controller by filling in the form on the website of the Data Protection Authority, which can be downloaded from the link (https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1089924), and sending it via e-mail to the address esinplast@esinplast.it.

How to exercise your rights

You can at any time exercise your rights by sending: - a registered letter with return receipt to Esinplast S.r.l.; - an e-mail to the address esinplast@esinplast.it.

Data controller, data processor and subjects in charge of processing

The Data Controller is Esinplast S.r.l., with registered office in Via S. Ubaldo 31/C/D/E Monsano (AN), Italy. The updated list of data processors and subjects in charge of data processing is kept at the registered office of the Data Controller.