1. Data Controller
We inform you that, pursuant to Art. 13 of the GDPR, Sofidel S.p.A., which can be reached at the address firstname.lastname@example.org will process the personal data which you provide by filling in the contact form on the site www.papernet.com and for the management of your request, as data controller (hereinafter, "Data Controller" or" Company").
2. Data Protection Officer
We inform you that the Company has appointed a Data Protection Officer (“DPO”), who is available for any information concerning the processing of your personal data and can be reached at email@example.com.
3. Types of data processed
The data processed by the Data Controller may include:
1) common data, such as, by way of example, personal details (name, surname, etc.) and contact details (mobile or landline telephone number, residential address, e-mail address, etc.) as well as any other information concerning you contained in the message sent to the Data Controller.
The personal data indicated above will be jointly defined below, for brevity, as "personal data".
4. Purpose and legal basis of data processing
Your personal data will be processed:
a. for the purposes of managing your message;
b. To meet any defence requirements;
c. To fulfil any legal obligations to which the Data Controller is subject.
The legal basis of the processing for purpose a. lies in Art. 6(1)(b) of the GDPR; for purpose b. in Art. 6(1)(f) and finally, for purpose c. in Art. 6(1)(c) of the GDPR.
The provision of your personal data for the purposes indicated above is optional but in its absence it will not be possible to follow up your request
5. Personal data processing methods
Your personal data will be processed by means of computer, manual and/or telematic tools and/or instruments, using a logic strictly related to the purpose of the processing and in any case guaranteeing the confidentiality and security of the data and compliance with the specific obligations laid down by law.
6. Recipients of personal data
Your data may be shared with:
1. Subjects who typically act as data processors pursuant to Art. 28 of the GDPR;
2. Persons in charge of processing pursuant to Art. 29 of the GDPR;
3. Subjects, entities or authorities, independent data controllers, to whom it is compulsory to communicate your personal data pursuant to the provisions of law or orders by the authorities.
The above common data may be accessed by the other companies in the Sofidel Group for the same purposes as above and/or for administrative and accounting purposes pursuant to Art. 6(1)(f) and recitals 47 and 48 of the GDPR.
The updated and complete list of processors can be requested from the Data Controller at the above addresses.
7. Transfer of data outside the EU
With regard to the possible transfer of personal data to third countries, the Company informs you that the processing will take place according to one of the methods permitted by current law, such as the data subject’s consent, the adoption of Standard Clauses approved by the European Commission, the selection of parties participating in international programmes for the free movement of data (e.g. EU-USA).
8. Retention of personal data
Your personal data will be kept only for the time necessary for the purposes for which it was collected, in accordance with the principles of data minimisation and storage limitation referred to in Art. 5(1)(c) and (e) of the GDPR. Further information may be obtained, on request, from the Data Controller or the DPO using the above contact details.
9. Your privacy rights
You have the right to access your data at any time in accordance with Art. 15-22 of the GDPR. In particular, you may request the rectification, erasure or restriction of the processing of such data in the cases set out in Art. 18 of the GDPR, withdraw your consent, or obtain the portability of data relating to you in the cases laid down in Art. 20 of the GDPR.
You can object to the processing of your data under Art. 21 of the GDPR in which you give evidence of the reasons for your objection. The Data Controller reserves the right to evaluate your request, which will not be accepted if there are legitimate grounds for the processing which override your interests, rights and freedoms.
Requests must be addressed in writing to the Data Controller at the above addresses.
If you believe that the processing of your personal data performed by the Data Controller is in violation of the provisions of the GDPR, you have the right to lodge a complaint with the Data Protection Authority, as set out in Art. 77 of the Regulation itself, or to take appropriate legal action (Art. 79 of the GDPR).
DPO - Sofidel S.p.A e Soffass S.p.A:
+39 0583 268258