Privacy Cookie Policy

PRIVACY POLICY

Pursuant to Article 13 Regulation (EU) 2016/679 (“GDPR”)

Through this document (privacy policy) Plastic Consult s.r.l. (VAT No. IT04441680156), hereinafter referred to as the “Data Controller” or “Controller,” aims to explain to users how their personal data is processed by the website www.plasticconsult.it (hereinafter “website” or “the website”)

1. DATA CONTROLLER

The Data Controller is: Plastic Consult S.r.l. (VAT No. IT04441680156), with registered office at Via Aniene No. 2 – 20151 Milan. Email: info@plasticconsult.it

2. PERSONAL INFORMATION COLLECTED BY THE WEBSITE

2.1 Content and information voluntarily provided by the User

2.1.1 Contact Information and Content: This refers to personal data that the User voluntarily provides to the website while using it, such as personal information and contact details. This data will be processed in response to requests that the User submits to the data controller to obtain information about products or services, via the dedicated forms on the website or the contact information provided on the website.

Users may provide personal data through the contact forms on the website, via email, or by registering for the e-commerce section.

2.1.2. Purchase data (e-commerce)

When using the e-commerce section of the Website, the following data is processed: customer identification information; data related to orders placed; information necessary for billing; and data related to shipping and delivery (downloads).

Data related to payment methods (e.g., credit card, PayPal) is processed exclusively by the relevant payment provider, acting as an independent data controller, in accordance with its own privacy policy. Data related to payment methods is neither transmitted through nor stored by the Data Controller.

2.1.3. Personal data collected from social media: The Website contains only links to the Data Controller’s social media profiles. The mere presence of these links does not entail any disclosure of personal data to the operators of the social media platforms. If the User voluntarily chooses to access social networks through these links, the processing of personal data will be carried out directly by the respective operators, as independent data controllers, in accordance with their respective privacy policies.

2.1.4. Special categories of data or sensitive data: This refers to special categories of personal data that reveal racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, as well as genetic data and biometric data intended to uniquely identify a natural person, data concerning a person’s health, sex life, or sexual orientation.

The website does not ask users to provide specific categories of personal data; however, please note that by entering the general information requested and described above, users may provide details from which their preferences or specific personal data could be indirectly inferred.

Such information will not be subject to specific or separate processing by the website. The Data Controller urges Users not to submit special categories of personal data through the website. If such data is voluntarily provided, it will be processed exclusively to the extent strictly necessary to fulfill the user’s request, in accordance with Article 9, paragraph 2, subparagraph (a), or, where applicable, the additional legal bases provided for by the GDPR.

2.2. Data and content collected automatically while browsing the website

2.2.1 Technical Information: The computer systems and software procedures used to operate this website may, during their normal operation, collect certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified users, but by its very nature, it could—through processing and association with data held by third parties—allow for the identification of users. This category includes IP addresses or domain names used by users connecting to the website, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained, etc.

2.2.2. Usage Data: Data regarding the use of the website may be collected only to the extent necessary for proper technical operation, system security, the diagnosis of any anomalies, and the generation of security logs.

2.2.3. Cookies and Similar Technologies

This website uses:

• technical cookies, which are necessary for the proper functioning of the website, for navigation, and for the provision of the services requested by the User;
• Third-party analytics cookies, installed via Google Analytics, used to collect aggregated statistical information about the use of the Site, such as the number of visitors, pages viewed, time spent on the Site, approximate geographic location, and browsing patterns.

Technical cookies are installed automatically because they are necessary for the Website to function.

Third-party analytics cookies are installed only with the User’s prior consent via the consent management platform (CMP), pursuant to Article 122 of Legislative Decree 196/2003 and the Provision of the Italian Data Protection Authority dated June 10, 2021.

The Site does not use profiling cookies, remarketing tools, behavioral advertising, or other tracking systems designed to create profiles about the User.

For more information on the cookies used, their purposes, durations, and how to manage your consent, please refer to the Cookie Policy available on the Website.

2.2.4 Nature of Data Provision: The provision of personal data requested through the forms on the Website is optional. The provision of data necessary for the conclusion and performance of the contract is a contractual requirement; failure to provide such data will make it impossible to carry out the contractual relationship.

3. PURPOSE OF THE PROCESSING:

The personal data collected may be used to fulfill contractual and precontractual obligations and legal requirements, as well as for the following purposes:

1. Contact request management
2. E-commerce account registration and management
3. Order management, payment, shipping and after-sales service
4. Administrative, tax and accounting requirements
5. Fraud prevention and protection of Holder’s rights
6. To ensure the proper technical functioning of the website.
7. Statistical analysis of website usage via Google Analytics, subject to the user’s consent.
8. Sending newsletters, informational and promotional communications regarding the Data Controller’s products and services, subject to the data subject’s consent.

The Data Controller does not engage in user profiling, behavioral marketing, or remarketing.

4. LEGAL BASIS FOR DATA PROCESSING

5. METHODS OF DATA PROCESSING AND RECIPIENTS OF THE DATA

The processing of personal data is carried out by means of computer and/or telematic tools, with organizational methods and logic strictly related to the stated purposes.

The data may be disclosed, within the limits of the purposes indicated above, to the following categories of recipients:

• hosting provider;
• IT service providers;
• e-commerce platform operators;
• tax and administrative consultants;
• banks and payment service providers;
• Competent authorities in the cases provided for by law.
• web analytics service provider (Google Analytics);
• newsletter management service provider

These individuals, if necessary, will be appointed as Data Processors, as provided for in Article 28 of the European Data Protection Regulation No. 2016/679, by the Data Controller.

The updated list of Data Processors can be requested by email at info@plasticconsult.it

5.1 Interaction with social networks and external platforms

The Website contains only links to the Data Controller’s social media profiles. The mere presence of these links does not result in the transmission of personal data to the operators of the social media platforms.

If the User voluntarily decides to access the social network via the link provided on the Site, the processing of personal data will be carried out directly by LinkedIn as an independent data controller, in accordance with the relevant privacy policy available on the provider’s website.

The use of the Google Analytics service may involve the transfer of personal data to countries outside the EEA. Such transfers are carried out in accordance with Articles 44 et seq. of the GDPR, based on the safeguards provided by applicable law, including, where applicable, the provider’s adherence to the EU-U.S. Data Privacy Framework or the adoption of Standard Contractual Clauses (SCCs).

6. LOCATION

Personal data is processed at the Data Controller’s headquarters and by the service providers it uses, which are primarily located in the European Economic Area (EEA). If certain service providers are based in or use servers located in countries outside the EEA, data transfers will take place exclusively in accordance with Articles 44 et seq. of the GDPR, either through an adequacy decision by the European Commission, the adoption of Standard Contractual Clauses (SCCs), or another appropriate mechanism provided for by law.

The data subject may obtain a copy of the safeguards in place for the transfer of data to third countries by contacting the Data Controller at the contact information provided in this privacy notice.

For more information, please contact the Data Controller at the following email address info@plasticconsult.it

7. SECURITY MEASURES Data processing is carried out using methods and tools designed to ensure the security and confidentiality of personal data, as the Data Controller has implemented appropriate technical and organizational measures that guarantee—and allow for demonstration—that the processing is conducted in accordance with applicable regulations. The Data Controller implements appropriate technical and organizational measures, including authentication systems, backup procedures, protection against unauthorized access, and system updates, in accordance with Article 32 of the GDPR.

8. DATA RETENTION PERIOD

Personal data will be kept for the period of time necessary to fulfill the purposes for which they were collected.

In particular, personal data will be retained for as long as necessary, for compliance with applicable legal and regulatory obligations, as well as for own or third-party defensive purposes.

Personal data may be kept for a longer period if necessary to fulfill a legal obligation or by order of an authority.

For information on analytics cookies and their retention periods, please refer to the Cookie Policy.

9. AUTOMATED DECISION-MAKING PROCESSES

All personal data collected will not be subject to any automated decision-making process, including profiling, that may produce legal effects for or significantly affect the individual.

10. USER RIGHTS

Users may exercise certain rights under Articles 15-22 GDPR with respect to personal data processed by the Data Controller. In particular, the User has the right to:

1. Revoke consent at any time;
2. Object to the processing of their Personal Data;
3. Access their personal data;
4. verify and request rectification;
5. Obtain restriction of processing;
6. Obtain the deletion of their Personal Data;
7. Receive their personal data or have them transferred to another owner;
8. Propose complaints to the data protection supervisory authority and/or take legal action.

To exercise their rights, users may submit a request using the contact information for the Data Controller provided in the following section.

The user may also exercise the right to file a complaint with the Data Protection Authority pursuant to Article 77 of the GDPR, as well as the right to seek judicial remedy pursuant to Articles 78 and 79 of the GDPR.

Requests are processed by the Data Controller as quickly as possible, and in any case within 30 days.

The data subject may revoke their consent to receive the newsletter at any time by clicking the link provided in each communication or by contacting the Data Controller.

11. PRIVACY POLICY UPDATE

The Data Controller may modify or simply update this Privacy Policy, in whole or in part, by notifying Users.

Changes and updates will be binding as soon as they are published on the website. Users are therefore encouraged to read the Privacy Policy each time they visit the website.

If the user does not accept the changes made to the Privacy Policy, the user must stop using this website and may request that the Data Controller remove their Personal Data, as indicated above in the section titled “User Rights.”

Last updated: Milan, July 7, 2026