Privacy & Cookie Policy

Website Privacy Policy

This Privacy Policy governs Users’ access to and use of the services offered on the Website, in their capacity as data subjects whose personal data is subject to protection, in accordance with EU Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, as well as the applicable legislation on the protection of personal data.

Data controller

Ivoplast s.r.l.
C.F. /P.IVA 00378930283
Via Commerciale n. 60
CAP 35010 Villa del Conte – Fraz. Abbazia Pisani (PD)
e-mail privacy@ivoplast.com

In line with its mission and values, Ivoplast s.r.l. is committed to protecting the personal data of every individual, respecting the identity and dignity of every human being and the fundamental freedoms guaranteed by the Constitution, in accordance with EU Regulation 2016/679 (“ EU Regulation”) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“Personal Data”).

Our policy

Personal Data protection is based on compliance with the principles set forth in this document, which the Data Controller undertakes to disseminate, respect, and enforce among its shareholders, employees, and collaborators, as well as recipients or third parties with whom it collaborates as part of its business and mission.

The Data Controller is committed to ensuring that the Personal Data Protection Policy, and all its consequences, is understood, implemented, and supported by all internal and external stakeholders involved in its activities, taking into account its specific circumstances, investment opportunities, and, above all, its values.

In particular, Ivoplast s.r.l. undertakes to:

communicate and disseminate its personal data protection policy;
listen to and pay attention to all its stakeholders—shareholders, employees, collaborators, investors, promoters, beneficiaries, customers, suppliers, consultants—taking due account of their concerns regarding the processing of personal data and providing prompt feedback;
Process personal data: lawfully, fairly, and transparently, in accordance with constitutional principles and applicable legislation, in particular the new EU Regulation, and only for the time strictly necessary for the intended purposes, including those required to comply with legal obligations;
Collect personal data limited to that which is essential to carry out the activities (relevant and limited personal data);
Process personal data according to the principles of transparency and only for the specific purposes expressed in its privacy policies;
Adopt processes for updating and rectifying processed personal data to ensure that the personal data is, to the extent possible, accurate and up-to-date;
Store and protect the personal data in its possession using the best available preservation techniques, including by using service contracts with suppliers that provide sufficient guarantees regarding the security of processing and guarantee the protection of the rights of the data subject;
Ensure the continuous updating of personal data protection measures. This commitment. will be constantly monitored within the framework of the accountability principle by consistently implementing appropriate technical and organizational measures and suitable corporate policies to ensure and be able to demonstrate that processing is carried out in accordance with the EU Regulation, taking into account the state of the art, the nature of the personal data stored, and the risks to which they are exposed.
Make the methods of processing and storing Personal Data clear, transparent, and relevant, in order to ensure adequate security.
Provide training and information to its members and staff, based on their roles, regarding the principles of lawfulness and fairness to which this Personal Data Protection Policy and the processing of personal data must conform, as well as compliance with the safeguards adopted.
Foster the development of a sense of responsibility and awareness throughout the organization regarding personal data, viewed as the property of individual data subjects.
Ensure compliance with applicable laws and regulations regarding the protection of personal data, updating the management of personal data protection where necessary.
Prevent and minimize, within the limits of available company resources, the impact of potential violations or unlawful and/or harmful processing of personal data;
Promote the inclusion of personal data protection in the continuous improvement plan that the organization pursues with its management systems.

This Personal Data Protection Policy will be brought to the attention of all internal staff, partners, and collaborators, including through specific awareness-raising meetings.

Why this policy and who is it aimed at?

This policy is intended for users of the website www.ivoplast.com (“Website”) and for all individuals concerned by the processing of their personal data by the Data Controller in the course of its business activities (“Data Subject” or “User”).

Access to certain sections of the Website and/or any requests for information or services by users may be subject to the provision of Personal Data, the processing of which will be carried out in accordance with the EU Regulation.

For the use of specific services by the User, specific information notices will be provided on a case-by-case basis and, where necessary, specific consent to the processing of Personal Data will be requested.

This privacy notice applies solely to this Website and not to other websites accessed by users via links that may be included on this Website.

Definitions

The term “personal data” refers to the definition contained in Article 4, point 1) of the EU Regulation, namely “any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person” (“Personal Data”).

The EU Regulation requires that, before processing Personal Data—which, according to the definition contained in the EU Regulation, means “any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction” (“Processing”)—the data subject must be informed of the reasons and purposes for which such data is requested and how it will be used.

Personal Data may be disclosed to specific recipients of such Personal Data. The EU Regulation defines a recipient of Personal Data as “a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not” (hereinafter the “Recipients”).

Personal Data may also be disclosed to specific entities considered by the EU Regulation as “persons authorized to process Personal Data, under the direct authority of the Data Controller or the Data Processor” (hereinafter the “Authorized Persons”).

Moreover, pursuant to the EU Regulation, “public authorities which may receive Personal Data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as Recipients.”

In this regard, this document aims to provide, in a simple and intuitive manner, all the useful and necessary information so that the User can provide Personal Data in an informed and informed manner and, at any time, request and obtain clarification and/or corrections.

Data Categories and Processing

Browsing data

The computer systems and software procedures used to operate this portal acquire, during their normal operation and solely for the duration of the connection, certain personal data whose transmission occurs implicitly when using Internet communication protocols. This information is not collected for the purpose of associating it with identified data subjects, but, by its very nature, could, through processing and association with data held by third parties, allow users to be identified (e.g., IP addresses), the domain names of the terminals used, the URI (Uniform Resource Identifier) addresses of requesters, the time of requests, etc. This data, deleted immediately after processing, is used solely for the purpose of obtaining anonymous statistical information on site usage and to verify its proper functioning. Web contact data is not retained for more than seven days, except in the event of cybercrime against the sites. No data deriving from the service will be communicated or disseminated.

For further information, the interested party can read the cookies policy.

Contact information provided by the User

The optional, explicit, and voluntary submission of Personal Data to access services and make requests via email entails the subsequent acquisition by the Data Controller of the sender’s address or any other personal data, which will be processed to respond to the request or to provide the service, as well as to perform all related activities and comply with legal obligations (for example, tax matters). Failure to provide such data, or the partial or incorrect provision of such data, would make it impossible not only to use the requested services but also, in some cases, to comply with regulatory obligations.

To use the services offered or make requests, it may be necessary to register by completing a specific registration or initial contact form (“Form”).

Provision of the personal data indicated in the aforementioned form is mandatory to complete the registration process only for data marked with an asterisk (*); therefore, failure to provide such data, or the partial or incorrect provision of such data, will invalidate your registration and therefore prevent you from using the services.

Pursuant to Articles 12 and 13 of the EU Regulation, the website forms may contain information for specific purposes related to the User’s use of those parts of the website.

The processing will be carried out using both manual and computerized and electronic means in compliance with applicable regulations and the principles of fairness, lawfulness, transparency, relevance, completeness and proportionality, data minimization and accuracy. The processing will be carried out using organizational and processing methods strictly related to the purposes pursued and, in any case, in a manner that guarantees the security, integrity, and confidentiality of the data processed, in compliance with the organizational, physical, and logical measures required by applicable legislation. These measures will be implemented and enhanced from time to time, including in relation to technological developments, to ensure the confidentiality, availability, and integrity of the data processed.

Purpose of the processing and legal bases of the processing

The User’s browsing data is used solely to obtain statistical information on the use of the Site. Regarding data provided directly by the User to use the Data Controller’s services or to make requests via email, they are collected and processed, within the limits of the information provided in the relevant sections, in order to respond to requests received. The processing of Personal Data provided by completing the initial contact form (“Form”) and in subsequent processing phases related to Project selection is carried out for the purposes of: managing contact requests and offering a service throughout all phases, including contractual ones, or providing technical material.

The legal basis for the processing, pursuant to Art. 6 of the EU Regulation, can be identified as: pre-contractual and contractual obligations in the context of the performance of a contract; legal obligations to which the Data Controller is subject; the need to pursue a legitimate interest (e.g., right of defense) of the Data Controller.

Automated decisions

The Data Controller declares that it does not adopt decisions that could influence the Data Subject based solely on the automated processing of their personal data. All decision-making processes associated with the processing purposes described above are carried out with human intervention.

Who processes and communicates personal data?

Personal Data may be disclosed to specific entities considered Recipients or to Persons Authorized to process such Personal Data under the authority of the Data Controller. Accordingly, in order to properly carry out all the Processing activities necessary to achieve the purposes set out in this Policy, the following Recipients may be required to process Personal Data:

Employees and/or collaborators of the Data Controller performing functions involved in the Data Controller’s activities, who have received adequate instructions regarding the security and proper use of your personal data.
Third parties who perform part of the Processing activities and/or activities related and instrumental thereto on behalf of the Data Controller, such as individuals, companies, associations, or professional firms based in European
Union countries, who have been entrusted with the performance of services, including Website maintenance and other assistance and/or consulting activities on behalf of the Data Controller. The third parties mentioned above essentially fall into the following categories: (a) parties with whom the Data Controller has entered into collaboration and service provision agreements; (b) parties operating in the Sector; (c) credit institutions involved in the provision of Services; (d) Consultants;
Public authorities or public bodies for the fulfillment of legal obligations to which the Data Controller is subject, and any other public body entitled to request data, in the cases provided for by law.
Where required by law or to prevent or suppress the commission of a crime, Personal Data may be disclosed to public bodies or judicial authorities.

It is understood that the data processed will be exclusively that necessary to achieve the specific purpose; therefore, data managed by third parties will be limited to that specific purpose.

Personal Data will not be disclosed.

International transfers of personal data

Personal Data will be processed by the Data Controller within the European Union.

In the event that, for technical and/or operational reasons, it becomes necessary to use entities located outside the European Union, the transfer of your Personal Data, limited to the performance of specific Processing activities, will be regulated in accordance with the provisions of Chapter V of the EU Regulation. All necessary precautions will therefore be taken to ensure the full protection of your Personal Data, basing such transfer on: (i) adequacy decisions of the recipient third-party countries expressed by the European Commission; (ii) adequate guarantees expressed by the recipient third-party pursuant to Article 46 of the EU Regulation; and (iii) the adoption of binding corporate rules.

Retention period

One of the principles applicable to the Processing of your Personal Data concerns the limitation of the retention period. In light of this principle, Users’ Personal Data will be processed by the Data Controller only to the extent necessary to achieve the purposes of this Policy. Browsing data will be retained in accordance with the terms set out in the Cookie Policy.

Personal Data collected in the “contact form” will be processed for the minimum period of time necessary, i.e., until the termination of any pre-contractual and contractual relationships with the Data Controller, taking into account legal statutes of limitations and fiscal or other retention obligations established by law or EU Regulation, for which the principle of non-excess will apply (Article 6, letter f).

Commercial communications and revocation of consent

If the data provided is used by the Data Controller to send informational materials relating to the activities and products offered by the Data Controller, such communications may be made via email, telephone, or by sending advertising material to the Data Subject’s home address. However, specific consent may be required for this purpose.

Failure to provide consent for this purpose would only result in the impossibility of carrying out commercial communications.

The data provided for the aforementioned purposes will be retained for a period appropriate and relevant to the intended purpose and, in any case, until consent is revoked. As provided for by the EU Regulation, if the Data Subject has given consent to the Processing of Personal Data for one or more purposes for which it was requested, he or she may, at any time, revoke it in whole or in part, without affecting the lawfulness of the Processing based on consent before its revocation.

The methods for withdrawing consent are very simple and intuitive: simply contact the Data Controller using the contact details provided in this Policy.

In addition to the above, and for simplicity’s sake, if the Data Subject receives emails published by the Data Controller that are no longer of interest, simply click the unsubscribe button at the bottom of the email to stop receiving any further communications, including through other contact channels for which consent was obtained (SMS, mail, fax, phone calls, social media).

The rights of the interested party and their exercise

As provided for in Article 15 of the EU Regulation, the Data Subject may access his/her Personal Data, request its rectification and updating if incomplete or incorrect, request its deletion if its collection was in violation of a law or EU Regulation, and object to the Processing for legitimate and specific reasons.

In particular, the rights you may exercise at any time against the Data Controller are the following:

Right of access: the right, pursuant to Article 15, paragraph 1 of the EU Regulation, to obtain from the Data Controller confirmation as to whether or not Personal Data concerning him/her is being Processed, and, where that is the case, access to such Personal Data and the following information: a) the purposes of the Processing; b) the categories of Personal Data concerned; c) the Recipients or categories of Recipients to whom the Personal Data have been or will be disclosed, in particular recipients in third countries or international organizations; d) where possible, the envisaged period for which the Personal Data will be stored, or, if not possible, the criteria used to determine that period; e) the existence of the right to request from the Data Controller rectification or erasure of Personal Data, restriction of Processing of Personal Data concerning the Data Subject, or to object to such Processing; f) the right to lodge a complaint with a supervisory authority; g) where the Personal Data is not collected from the Data Subject, any available information regarding its source; h) the existence of automated decision-making, including profiling, referred to in Article 22, paragraphs 1 and 4, of the EU Regulation and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such Processing for the Data Subject.

Right to rectification: pursuant to Article 16 of the EU Regulation, the right to rectification of your Personal Data that is inaccurate. Furthermore, taking into account the purposes of the Processing, you may have your Personal Data completed if it is incomplete, including by providing a supplementary statement.

Right to erasure: pursuant to Article 17, paragraph 1 of the EU Regulation, you may obtain the erasure of your Personal Data without undue delay, and the Data Controller shall be obliged to erase your Personal Data if even one of the following grounds applies: a) the Personal Data is no longer necessary in relation to the purposes for which it was collected or otherwise processed; b) you have withdrawn the consent on which the Processing of your Personal Data is based and there is no other legal basis for the Processing; c) you have objected to the Processing pursuant to Article 21, paragraph 1 or 2 of the EU Regulation and there are no overriding legitimate grounds for the Processing of your Personal Data; d) your Personal Data has been unlawfully processed; e) it is necessary to erase your Personal Data to comply with a legal obligation under EU or national law. In some cases, as provided for in Article 17, paragraph 3 of the EU Regulation, the Data Controller is entitled not to erase your Personal Data if their Processing is necessary, for example, to comply with a legal obligation, for reasons of public interest, for archiving purposes in the public interest or for statistical purposes, or for the establishment, exercise, or defense of legal claims.

Right to restriction of processing: you may obtain restriction of Processing, pursuant to Article 18 of the EU Regulation, if one of the following applies: a) you have contested the accuracy of the Personal Data (the restriction will continue for the period necessary for the Data Controller to verify the accuracy of the Personal Data); b) the Processing is unlawful but you have opposed the erasure of the Personal Data and requested the restriction of its use instead; c) although the Data Controller no longer needs the Personal Data for the purposes of the Processing, the Personal Data is required for the establishment, exercise, or defense of legal claims; d) you have objected to the Processing pursuant to Article 21, paragraph 1, of the EU Regulation and are awaiting verification whether the legitimate grounds of the Data Controller override those of the Data Subject. If Processing is restricted, the Personal Data will be processed (and we will inform you before such restriction is lifted), except for storage, only with your consent or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of substantial public interest.

Right to data portability: the Data Subject may, at any time,

This Cookie Policy was last updated on January 8, 2025 and applies to citizens and legal permanent residents of the European Economic Area and Switzerland.

1. Introduction
Our website, https://www.ivoplast.com (hereinafter: “the website”) uses cookies and other related technologies (for convenience, all technologies are referred to as “cookies”). Cookies are also placed by third parties we have engaged. In the document below, we inform you about the use of cookies on our website.

2. What are cookies?
Cookies are small simple files sent along with pages of this website and stored by your browser on the hard drive of your computer or other device. The information collected may be returned to our servers or to the servers of the relevant third parties during your next visit.

3. What are scripts?
A script is a piece of code used to make our website function correctly and interactively. This code is executed on our servers or on your device.

4. What is a web beacon?
A web beacon (or pixel tag) is a small, invisible piece of text or image on a website that is used to monitor website traffic. To do this, various data about you is stored using web beacons.

5. Cookies
5.1 Technical or functional cookies

Some cookies ensure that the website functions properly and that your preferences are remembered. By placing functional cookies, we make it easier for you to visit our website. This way, you do not need to repeatedly enter the same information when visiting our website; for example, the items remain in your shopping cart until you have paid. We may place these cookies without your consent.

5.2 Marketing/tracking cookies

Marketing/tracking cookies are cookies or any other form of local storage used to create user profiles to display advertising or to track you across this or different websites for similar marketing purposes.

5.3 Social Media

We have included content on our website to promote web pages (e.g., “like,” “pin”) or share them (e.g., “tweet”) on social networks. This content is embedded with third-party code and places cookies. This content may store and process certain data for personalized advertising.

Please read the privacy policies of these social networks (which may change regularly) to find out what they do with your (personal) data that they process using these cookies. The data obtained is anonymized to the extent possible.

6. Cookies Placed
WordPress
Functional

Google Analytics
Statistics

7. Consent
When you visit our website for the first time, we will show you a pop-up with an explanation of cookies. As soon as you click on “Save preferences”, you consent to us using the categories of cookies and plugins described in this pop-up and cookie statement. You can disable cookies via your browser, but please note that our website may no longer function properly.

8. Enabling/disabling and deleting cookies
You can use your browser to automatically or manually delete cookies. You can also specify that certain cookies may not be placed. Another option is to adjust your browser settings so that you receive a message each time a cookie is placed. For more information about these options, please consult the instructions in the Help section of your browser.

Please note that our website may not function properly if all cookies are disabled. If you delete cookies in your browser, they will be placed again after you have given your consent when you visit our website again.

9. Your rights in relation to personal data
You have the following rights in relation to your personal data:

You have the right to know when your personal data is needed, what happens to it, and how long it will be retained.
Right of access: You have the right to access the personal data we hold about you.
Right to rectification: You have the right to complete, correct, delete, or block your personal data whenever you wish.
If you give us consent to process your data, you have the right to withdraw this consent and delete your personal data.
Right to data portability: You have the right to request all your data from the controller and transfer it to another controller.
Right to object: You have the right to object to the processing of your data. We will respect this choice unless there are compelling reasons for processing it.
To exercise these rights, please contact us. Please see the contact details at the bottom of this Cookie Policy. If you have a complaint about how we handle your data, we would like to hear from you, but you also have the right to lodge a complaint with the supervisory authority (the Data Protection Authority).

10. Contact Details
For questions and/or comments regarding the Cookie Policy and this statement, please contact us using the following contact details:
Email: info@ivoplast.com
Phone number: +39 049 9325022