Article 13 of EU Regulation 679/2016
awPursuant to European Regulation No. 679/2016 (hereinafter the “Regulation”) and national legislation on the protection of personal data (hereinafter collectively the “Privacy Legislation”), Pack Srl invites you to carefully read this Privacy Policy, which contains important information regarding the protection of your Personal Data. The processing of your Personal Data will be based on the principles of fairness, lawfulness, transparency, purpose and storage limitation, data minimization, accuracy, integrity, and confidentiality, in accordance with the provisions of the Regulation.
The Data Controller is Pack Srl (hereinafter “Data Controller”), parent company of Pack Espana S.L., with registered office at Via G. Marconi 45, 40122, Bologna (BO), in the person of its legal representative, Giacomo Gentili.
The following outlines the purposes of processing, the legal bases used, and the corresponding retention periods:
| Purpose | Legal Basis | Retention |
|---|---|---|
| Service Provision and Demos: provision of the service in accordance with the Terms and Conditions. | Performance of a contract or pre-contractual measures (Art. 6.1.b GDPR). | For the duration of the contractual relationship and in any case no longer than 10 years following termination. |
| Tax compliance: management of invoicing and legal obligations. | Legal obligation (Art. 6.1.c GDPR). | 10 years as required by civil and tax law. |
| Marketing and Newsletters: sending commercial and promotional communications. | Consent of the data subject (Art. 6.1.a GDPR). | Until consent is withdrawn (or a maximum of 24 months).+2 |
| Profiling: analysis of consumption habits and choices. | Specific consent (Art. 6.1.a GDPR).+1 | 12 months from collection, unless consent is revoked earlier.+2 |
| Statistical analysis: improvement of services through anonymized data. | Legitimate interest of the Data Controller (Art. 6.1.f GDPR). | Processing in anonymous form; the data does not allow for identification. |
Providing data for contractual and billing purposes is necessary; failure to provide it prevents the provision of the service. For marketing and profiling purposes, providing data is optional. Whether data provision is mandatory or optional will be indicated on a case-by-case basis using symbols (e.g., “*”) placed next to the information whose provision is mandatory to achieve the respective purpose.
Data is processed using electronic and manual tools, ensuring maximum security. It may be accessible to qualified employees of Pack Srl or third parties appointed as Data Processors. Data is not disclosed to third parties unrelated to the activities of Pack Srl. Personal data will be processed in accordance with the provisions of current privacy regulations, both using electronic and automated means and manually, using methods strictly related to the purposes of the processing, through databases, electronic platforms managed by Pack Srl or by third parties (appointed as Data Processors), the integrated IT systems of Pack Srl and the aforementioned third parties, and/or websites owned or used by Pack Srl. Personal data will be processed in a manner that ensures maximum security and confidentiality and only by persons trained and authorized to process such data. The Data Controller adopts appropriate technical and organizational measures to ensure a level of security appropriate to the risk associated with the processing. Personal data is processed primarily at the Data Controller’s premises and at the locations where the Data Processors are situated.
Processing takes place primarily at the Data Controller’s premises within the EU. In the event of a transfer to non-EU countries, the Data Controller ensures that adequate safeguards (such as Standard Contractual Clauses) are in place.