Legal notice
Privacy & Cookie Policy
This policy explains how Green Plast S.r.l. collects and processes the personal data of users who browse this website or use its contact forms, in accordance with Regulation (EU) 2016/679 (the “GDPR”) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.
Last updated:
1. Data Controller
The data controller is:
- Company name
- Green Plast S.r.l.
- Registered office
- Via Circonvallazione Cavallara 1, 46040 Solferino (MN), Italy
- VAT / Tax code
- 01620230209
- Company register (R.E.A.)
- MN 170893
- Phone
- +39 0376 893408
- Privacy e-mail
- privacy@greenplastsrl.com
The Controller has not appointed a Data Protection Officer (DPO), as the legal conditions requiring one do not apply. Any request concerning data processing may be addressed directly to the Controller at the contacts above.
2. Technical management of the website (Processor)
The development and technical maintenance of the website are entrusted, as an external data processor pursuant to Art. 28 GDPR, to:
- Company name
- Enterprise Srl
- Registered office
- Via Arnoldo Bellini 7, 25077 Roè Volciano (BS), Italy
- VAT / Tax code
- 03959590989
- info@nebu.it
- Certified e-mail (PEC)
- enterprisesas@certificazioneposta.it
- Phone
- +39 0365 599293
3. Hosting
The website is hosted by Vercel Inc., with content delivered through a datacenter located in the European Union (Frankfurt, Germany). Vercel acts as an external data processor for hosting, security and content-delivery activities.
4. Types of data processed
- Navigation data — in the course of their normal operation, the IT systems and software running the website acquire certain data whose transmission is implicit in the use of Internet communication protocols (e.g. IP addresses, browser and device type, pages visited, access times). Such data are used for security and aggregated statistical purposes.
- Data provided voluntarily — the identity and contact data (e.g. name, e-mail, phone, company, message content) that the user enters in the “Contacts” and “Work with us” forms, including any attached CVs. Form submission is handled through the Usebasin (Basin) service and protected by the Google reCAPTCHA v3 anti-spam service, subject to Google’s Privacy Policy and Terms of Service.
- Cookies and identifiers — information stored on or associated with the user’s device, as described in the Cookie Policy under section 6.
5. Purposes and legal bases
Personal data are processed for the purposes and on the legal bases set out below:
| Purpose | Legal basis | Reference |
|---|---|---|
| Responding to contact and quote requests sent via the website forms | Pre-contractual measures at the data subject’s request and legitimate interest | Art. 6(1)(b) and 6(1)(f) GDPR |
| Handling job applications sent via “Work with us” | Pre-contractual measures at the data subject’s request | Art. 6(1)(b) GDPR |
| Operation, security and abuse prevention of the website | Legitimate interest of the Controller | Art. 6(1)(f) GDPR |
| Statistical and navigation analysis via cookies | Consent of the data subject | Art. 6(1)(a) GDPR |
| Compliance with legal, accounting and tax obligations | Legal obligation | Art. 6(1)(c) GDPR |
Providing the data requested by the forms is optional, but refusing to do so makes it impossible to act on the user’s request.
7. Recipients and external processors
Data are neither disclosed nor sold to third parties for marketing purposes. They may be processed, for the purposes stated above only, by the following parties appointed as external processors or acting as independent controllers for their respective activities:
- Vercel Inc. — hosting and content delivery;
- Enterprise Srl — website development and technical maintenance;
- Basin (Forward Email LLC) — form submission handling;
- Google Ireland Ltd / Google LLC — statistics (Google Analytics, Tag Manager) and form anti-spam protection (reCAPTCHA);
- Microsoft Corporation — usability analysis (Microsoft Clarity);
- Cloudflare, Inc. — DNS services and network security.
8. Transfers of data outside the EU
Some providers (in particular Google and Microsoft) are based in the United States. Any transfers of data outside the European Economic Area take place in compliance with Art. 44 et seq. GDPR, on the basis of those providers’ adherence to the EU-U.S. Data Privacy Framework and/or the signing of the Standard Contractual Clauses adopted by the European Commission (Art. 46 GDPR). The website is hosted on a datacenter located within the European Union.
9. Data retention period
- Data provided through the forms are kept for as long as necessary to handle the request and manage any resulting relationship, and thereafter for the period required by legal obligations.
- CVs received via “Work with us” are kept for a maximum of 24 months, unless otherwise indicated by the candidate.
- Data collected through statistics cookies are kept for the duration shown in the table under section 6.
- Navigation data are kept only for as long as strictly necessary for security and aggregated statistical purposes.
10. Rights of the data subject
As a data subject, you have the right to exercise at any time, within the limits of Art. 15-22 GDPR:
- the right of access to your personal data;
- the right to rectification and erasure (“right to be forgotten”);
- the right to restriction of processing;
- the right to object to processing based on legitimate interest;
- the right to data portability;
- the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Requests may be sent to the Controller at privacy@greenplastsrl.com. You also have the right to lodge a complaint with the competent supervisory authority, the Italian Data Protection Authority (Piazza Venezia 11, 00187 Rome).
11. Data relating to minors
The website is aimed at a professional (B2B) audience and is not intended for minors under the age of 16. We do not knowingly collect personal data of minors. If a parent or guardian believes that a minor has provided personal data, they may contact us to have it removed.
12. Changes to this policy
The Controller reserves the right to amend or update this policy to reflect new legal requirements or changes to its services. Changes will be published on this page together with the last-updated date. Please review this page periodically.