PaperPlane » Privacy Policy

Privacy Policy

INFORMATION PURSUANT TO ART. 13 OF EU REGULATION 2016/679

A. The Data Controller

Pursuant to Art. 13 of EU Regulation 2016/679 (GDPR), PaperPlane s.r.l., with registered office in via Augusto Anfossi 36, 20135 Milan (MI), email: info@paperplanefactory.com, is the Data Controller of your personal data. The Controller informs you that the data provided by you in relation to existing legal relationships (user/data subject) will be processed in compliance with the aforementioned legislation. Said processing will take place lawfully and according to the principles set out in Art. 5 of EU Regulation 2016/679. Further communications may be made known at a later time, including verbally.

B. Data subject to processing

The data voluntarily provided by you for any requests in the contact form are:

     

  • First name, last name, telephone number (optional), email address;

    •  

  • Personal data provided through a CV.

In addition to this, there is navigation data: the computer systems and software procedures responsible for the functioning of this website, which could acquire your personal data during their normal operation, the transmission of which is implicit in the use of Internet communication protocols.

C. Purposes of processing

The purposes of the processing of your personal data are as follows:

     

  1. website functionality;

    2.  

  2. responding to requests for information or quotes via contact forms;

    3.  

  3. recruitment and personnel selection, both current and future, for the Company;

    4.  

  4. subject to consent, marketing activities and commercial communication, via newsletters, regarding the services provided by the Controller.

D. Duration of processing

Personal data related to the indicated purposes will be kept for the time necessary to carry out the indicated purposes. In particular, data provided for the purpose referred to in point 1 of paragraph C are correlated to the timing provided for cookies and detailed in the cookie policy; for the purpose referred to in point 3 of paragraph C, the data will be processed for the following 12 months from the date of acquisition; for purpose No. 4 of paragraph C, they will be processed for a maximum period of 2 two years. It is possible to withdraw consent to this processing at any time.

E. Nature of data provision

The provision of data is optional in relation to the indicated purposes; refusal to communicate the data will prevent the Controller from fulfilling the requests made. The processing provided for purpose 1 (within the limits of the cookies that require it) and 4 of paragraph C, in particular, requires express consent.

F. Data processing methods

The data will be processed and stored exclusively for the purposes indicated above using both paper and electronic supports, inserted into relevant databases and processed with tools suitable to guarantee the integrity, security, and confidentiality of the data itself, in accordance with the provisions of EU Regulation 2016/679. All appropriate technical and organizational measures will be adopted to ensure a level of data protection in compliance with the provisions of EU Regulation 2016/679. Access will be allowed only to persons authorized in writing to process personal data. Data may also be communicated to and/or collected from third parties (as in the case of data acquisition from processing centers or other companies). These parties will be appropriately designated as Data Processors and will be involved in the fulfillments required by the existing legal relationship, as well as by specific legal obligations.

G. Social platforms

The website may offer access gates to so-called Social Network services and platforms. The terms of use and Privacy policies applicable to each of these social communication media, published on the respective sites, govern the information provided.

H. Communication to third parties and/or dissemination of data

For the purposes indicated, the Company informs you that your data may be communicated to external subjects, should this become necessary to fulfill an obligation provided for by law as well as to fulfill your specific requests.

The recipients of the data subject’s personal data communications can also be identified in the following categories of recipients:

     

  • entities, professionals, suppliers, including IT platforms or other designated structures, for the execution of processing related to the fulfillment of the purposes indicated for the performance of the Controller’s activity.

The collected data will not be disseminated in any way.

I. Intent to transfer data abroad

Data may be transferred to third countries (non-EU members). Such transfers will be implemented in compliance with adequate guarantees (Art. 46 of EU Regulation 2016/679), through adherence to standard contractual clauses.

J. Rights under EU Regulation 2016/679

The data subject may, at any time, exercise the rights referred to in Art. 7, par. 3, and Artt. 15 et seq. of EU Regulation 2016/679:

     

  1. right of access to personal data;

    2.  

  2. right to obtain the rectification or erasure of the same or the restriction of processing;

    3.  

  3. right to object to processing;

    4.  

  4. right to data portability;

    5.  

  5. right to withdraw consent, where provided (withdrawal of consent does not affect the lawfulness of processing based on consent given before the withdrawal);

    6.  

  6. right to lodge a complaint with the supervisory authority (Data Protection Authority).

K. Identification details of the Data Controller

To exercise the rights illustrated above, the data subject may submit a request addressed to the Data Controller, Paperplane s.r.l., via Augusto Anfossi 36, 20135 Milan – Milan (MI) by sending an email to the address info@paperplanefactory.com.