Data Controller and Data Processor

The Data Controller for the processing of Users' personal data is L.M.P. Lavorazione Materie Plastiche Srl - Società a Socio Unico with Registered and Administrative Offices at Via dell'Orto, 19 - 21047 Saronno (Va), P. I.V.A. 02850040128, e-mail: info@lmpsaronno.com, hereinafter the Data Controller.

Data collection - Website

Data are collected and used to enable website navigation and for statistical purposes. Data is anonymized for the sole purpose of tracking visits and usage of our website. This data is used to improve user experience and optimize our content. No personally identifiable information is collected in this process. We use a single cookie that is required for page translation functionality. This cookie does not track user behavior or preferences and is only used to provide language translation services.

Type of data processed and legal basis

Navigation data

The computer systems and software procedures used to operate the website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is collected anonymously and cannot be associated with identified Data Subjects. This category of data includes IP addresses or domain names of the computers used by Users who connect to the site, addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used in submitting the request to the server, the response given by the server (e.g. successful, error, etc.) and other parameters related to the User's computer environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its proper functioning; they are deleted after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site. The legal basis for the processing of such data is the consent provided when the User consults the site.

Data voluntarily provided by the User through modalities different from the website.

Regarding personal data provided and/or acquired through modalities different from the website constitute legal basis:

• The performance of obligations referring to a contract entered into with the Data Subject and/or the execution of pre-contractual measures;
• The fulfillment of a legal obligation to which the Data Controller is subject;
• The legitimate interest of the Data Controller or of third parties to whom the data are disclosed, in the only cases provided for by applicable European and national legislation;
• The vital interests of the data subject or third parties;
• The acquisition of informed consent for specific purposes for which it is, precisely, necessary that free consent be given, by means of an unambiguous statement or positive action. In this case, the consent given must be able to be revoked at any time in the manner specified by the Data Controller - for example, consent to the use of images, the sending of commercial communications, etc., through data acquired on occasions other than the Web site (e.g., events, meetings, etc.).

Moreover, the Data Controller may legitimately collect Personal Data without its involvement by drawing on sources provided by third parties, in accordance with the legal bases described. If the Data Controller has collected Personal Data in this way, the User may request specific information from the Data Controller regarding the sources and, in any case, the Data Controller will take care to indicate this in the notice that, for various reasons and where due, it will issue to the Data Subject for the specific case. It is, however, always possible to request the Data Controller to clarify the specific legal basis referring to each treatment.

Optional provision of data

Apart from that specified for navigation data, the User is free to provide personal data to request the services offered by the Owner. Failure to provide them may result in the inability to provide the requested service.

Storage Period.

Data are processed and stored for the time required by the purposes for which they were collected. Specifically:

• Personal data collected for purposes related to the performance of a contract between the Data Controller and the User will be retained until the performance of that contract is completed;
• Personal data collected for purposes related to the legitimate interest of the Data Controller will be retained until such interest is satisfied;
• Personal data collected for purposes attributable to the vital interest of the Data Subject or third parties will be retained until such purpose is fulfilled;
• Personal data collected on the basis of consent given by the Data Subject will be retained until the consent is revoked by the Data Subject.

The above, unless the data is used for a longer period in compliance with a legal obligation or by order of an authority. At the end of the retention period, the data shall be deleted.

Rights of the interested parties (Art. 11 and 12 European Regulation D. Lgs. 679/2016)

The subjects to whom the personal data refer have the right to obtain, at any time, confirmation of the existence or non-existence of the same data and to know its content and origin, verify its accuracy or request its integration or updating, or rectification.

In particular, according to:

• Art. 15 c. 3 Right of access - The User has the right to access and receive a copy of the personal data being processed. This right may also be allowed by direct, remote and secure consultation of their personal data;
• Art.16 Right to rectification - Taking into account the purposes of the processing, the Data Subject has the right to obtain the integration of incomplete personal data, including by providing consistent statements;
• Art. 17 Right to cancellation - The User has the right to obtain from the Data Controller the cancellation of the personal data concerning him/her, in the cases provided for in letters a) - f) and with the exceptions referred to in c. 3, including the obligation on the part of the Data Controller to inform of the request for cancellation other data controllers who process the personal data cancelled, to include any link, copy or reproduction (c.2);
• Art. 18 Right to limitation of processing - The User has the right to obtain the limitation of processing when the hypotheses referred to in letters a) - b) occur;
• Art. 20 Right to data portability - The User has the right to data portability for the data provided;
• Art. 21 Right to object - The User has the right to object, at any time, for reasons related to his or her particular situation, to the processing of personal data concerning him or her under Article 6(1)(e) or (f), including profiling on the basis of these provisions.

In addition, this is without prejudice to the right to lodge a complaint with the supervisory authority, also with reference to Articles 141-144 of Legislative Decree 101/2018. In order to exercise your rights, you can contact the Controller using the contact information above. Further information in relation to the processing of personal data may be requested at any time from the Data Controller using the contact details.