Privacy Policy

PRIVACY POLICY

User privacy of the site www.auroflex.it

EU Regulation 679/2016 (“GDPR”)

1. 8 February 2023 

AUROFLEX S.R.L. ("Auroflex" or the "Controller") is committed to the protection of the Personal Data entrusted to it. Therefore, their management and their security are guaranteed with the utmost care, in accordance with the requirements of the privacy legislation pursuant to EU Regulation 679/2016 (GDPR)

This disclosure illustrates who we are, for what purposes we may use your data, how we manage them, to whom they may be disclosed (for example user companies, accommodation facilities, public bodies, etc.), where they may be transferred and what your data are. rights.

 Foreword

 Auroflex S.r.l., Via Giovanni de Carlis n. 7, 91011, Alcamo (TP), P.IVA 01809530817 (hereinafter also "Auroflex"), is a company operating in the sector of creation, production and marketing of labels and prints (hereinafter, in general, "Labels" or individually "Label") and has developed this service also through a dedicated e-commerce platform available on the website www.auroflex.it (hereinafter also the "Site"). The Site allows users of the Site (hereinafter "Customers" or individually "Customer") to view, create and purchase Labels on demand, based on a proprietary digital solution of Auroflex. In particular, Auroflex has created sophisticated software for creating the Label made available on the Site (hereinafter the "Configurator") thanks to which it is possible for the user to independently select the pre-configured Label model, the type of paper on which the Label is printed, the Label characteristics, the number of label prints to be made, and other variable settings that may be made available by Auroflex in the Configurator (the adjustment and configuration activities of the Label and their number to be printed carried out autonomously by the Customer through the Configurator, are hereinafter also referred to as "Autonomous Customization"), as well as viewing the label on a reproduction of a bottle or other support in order to evaluate how it may appear indicatively in the reality. In addition to the above, in order to be able to conclude the sale of the Label, dedicated consultancy will be required between the Customer and the Designer who created the Label model chosen by the Customer (the "Designer"). In this dedicated consultancy, the Customer and the Designer will define other essential graphic aspects for the creation and printing of the Label, including the denominations to be included in the Label, the colour, other graphic settings or solutions suitable for the specific needs of the Customer, etc. . (the label adjustment activities carried out by the Customer through the Designer, are hereinafter also referred to as "Customization through Consulting").

This privacy policy refers to the users of the website www.auorflex.it, the Configurator, the Clients and all those who interact with the Site, including to create, print and purchase the Labels (hereinafter collectively referred to as the "Users" or "User").

 Should the User directly provide third parties, including Creatives, with information of a personal nature without using the Site or the communication methods provided on the Site, Auroflex will not be responsible for this further and independent processing. 

Auroflex will acquire personal data relating to Site Users and buyers of Auroflex products and services and will process them in compliance with the law on personal data processing, with particular reference to the GDPR and Legislative Decree 196/2003 and subsequent amendments and additions.

 

Who will process my data? 

Your data will be processed, as Data Controller, by: 

AUROFLEX SRL.

Via Giovanni de Carlis no. 7

91011, Alcamo (TP)

Email: privacy@auroflex.it 

The list of external managers for the processing of personal data is available at the headquarters of the owner or upon request by contacting him at the addresses above.

 

2. Why do you need my data? 

The Data Controller will use user data exclusively for the following purposes: 

1. a) Purposes related to the management of the contractual relationship for the sale of Auroflex products or services on the basis of the General Conditions of Sale or contracts stipulated on a case-by-case basis with Users. In this context, Personal Data will be processed for the following purposes: establishment, management and termination of the contractual relationship with Auroflex; fulfillment of accounting and tax obligations; fulfillment of legal obligations (for example: anti-terrorism checks); anti-money laundering controls; tax and accounting checks; dispute management; provision, support, updating and information regarding the products sold and the services offered and the functions available.

 b) Marketing purposes where the user has given express consent to this effect. 

Auroflex will carry out the treatment:

 

- with reference to letter a) above, regardless of the user's consent, because it is necessary for any contractual obligations (Article 6.1 (b) GDPR); to fulfill legal obligations, to which Auroflex is subject (6.1 (c) GDPR); because the processing is necessary to pursue a legitimate interest, e.g. anti-money laundering checks, post-contractual customer relationship management, etc. (art. 6.1 (f) GDPR).

 

- with reference to letter b) above, only and exclusively in the presence of a valid free and informed consent of the User (art. 6.1 (a) GDPR).

 

It follows that the provision of personal data is necessary or mandatory for the purposes indicated in letter a) above and can be carried out even in the absence of your consent, however, only if there is a contractual agreement between Auroflex and the User.

 

Any partial or total failure to provide data for the purposes referred to in letter a) above will result in the partial or total impossibility of achieving the aforementioned purposes. The extent and adequacy of the Data provided will be assessed from time to time, in order to determine the consequent decisions and avoid the processing of Data exceeding the purposes pursued.

 

Consent for the purposes referred to in letter b) above is not mandatory and failure to provide such consent by the User does not prevent Auroflex from supplying any products and services agreed with the user

 

3. How will you use my data?

 

Auroflex aims to protect its customers' data, basing their treatment on principles of correctness, lawfulness and transparency. We therefore inform you that your personal data will be processed, through the use of tools and procedures suitable for guaranteeing maximum security and confidentiality, through archives and paper supports, with the aid of digital supports, IT and telematic means. The communications referred to in point 2) above may take place in traditional ways (e.g., paper mail, telephone calls with an operator), automated (e.g., telephone calls without an operator) and similar (e.g.: fax, e-mail, sms, mms, messaging services such as whatsapp, messenger, telegram etc.).

 

However, you are given the right to exercise the right to object which, in the absence of your indication to the contrary, will refer to both traditional and digital or automated communications.

We will not use your personal data for different and additional purposes to those described in this information, except by informing you in advance and, where necessary, obtaining your consent.

 

4. How long will you keep my information?

 

Your personal data will be stored, starting from their receipt/update, for a period congruous with respect to the processing purposes indicated above.

Below is the duration of the different treatments: 

Type

Documents and related data of a civil, accounting and fiscal nature as required by the laws in force and in particular relating to the treatments referred to in letter a)

Duration of treatment

Over 10 years starting from the termination of the contractual relationship 

Type

Personal data processed for Marketing Purposes Stored in compliance with the principle of proportionality and minimization

 Duration of treatment

Until the specific consent is revoked by the data subject for ancillary and secondary marketing treatments (including communication to third parties for same purposes), and therefore the retention times in this case are linked to the choice of the interested party to proceed with the revocation.

 Type

Personal data relating to a professional application at Auroflex 1

Duration of treatment

2 months from the date of receipt.

 

5. Will you share my information with others?

 

Your Data may be communicated to Auroflex partners for the management of existing contracts with you, and to third parties, (including debt collection companies, professionals, public bodies, auditing or supervisory bodies), to fulfill obligations deriving from the law, regulations, community regulations or for aspects concerning the management and execution of the contractual relationship.

Your personal data will not be communicated to third parties for marketing purposes unless you have expressly consented to such communication and have not received adequate information on the matter.

For all the purposes indicated in this disclosure, your data may also be communicated abroad, within the European Union, in compliance with the rights and guarantees established by current legislation. If the data must be transferred to a subject located in a third country located outside the European Union, this can only be done after verifying that the country in question guarantees an "adequate" level of protection and in compliance with current legislation also in the light of the judgment of the European Court of Justice in the case Facebook Ireland Ltd, Maximillian Schrems, n. C-311/18.

The Data will also be processed by adequately trained internal resources of the Auroflex offices, who operate as personnel authorized to process the Data in accordance with art. 29 GDPR.

Access to archived data may be made by public authorities, in the cases and methods provided for by applicable laws.

Your personal data are not subject to disclosure.

For the sending of service communications, or periodic mass communications, also of a commercial and promotional nature, the email address of the interested party is inserted in a list of contacts through the service offered by third-party suppliers. The list of these suppliers is available on site or upon request at privacy@auroflex.it

 

6. What are my rights?

At any time, you will have the right to ask:

1. a) access to your personal data;
2. b) their correction in case of inaccuracy of the same;
3. c) cancellation;
4. d) the limitation of their treatment.

 

You will also have:

the right to object to their treatment:

- if processed for the pursuit of a legitimate interest of Auroflex except in cases of law;

- if processed for direct marketing purposes;

the right to their portability, i.e. to receive the personal data you provide in a structured, commonly used and machine-readable format.

 

We will take charge of your request with the utmost commitment to guarantee the effective exercise of your rights. Finally, you will have the right to lodge a complaint with the national supervisory authority (Privacy Guarantor).

  

7. Can I revoke my consent after giving it?

Yes, you can revoke your consent at any time, without this being able, however:

- prejudice the lawfulness of the treatment based on the consent given before the revocation;

- prejudice further processing of the same data based on other legal bases (for example, contractual obligations or legal obligations to which Auroflex is subject).

 

8. I still have questions…

For further information on this information or on any privacy issue, or if you wish to exercise your rights or withdraw your consent, you can contact privacy@auroflex.it directly or visit the website of the Privacy Guarantor www.garanteprivacy.it.

 Summary information on the other rights of the interested party.

The GDPR grants the interested party a series of rights which, according to the WP 260 Transparency Guidelines, it is mandatory to summarize their main content within the information. These rights are summarized and summarized below:

 Right of access (only to own personal data): right to obtain confirmation from the data controller as to whether or not personal data concerning the data subject is being processed and, in this case, to obtain access to personal data and to be informed about the purposes of the treatment; on the categories of personal data in question; on the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if recipients of third countries or international organizations; when possible, on the envisaged retention period of personal data or, if this is not possible, on the criteria used to determine this period; if the data have not been collected from the interested party, the right to receive all available information on their origin; right to receive information on the existence of an automated decision-making process, including profiling and significant information on the logic used, as well as the importance and expected consequences of such treatment for the interested party.

 Right of rectification and integration: The interested party has the right to obtain from the data controller the rectification of inaccurate personal data concerning him without unjustified delay. Taking into account the purposes of the processing, the interested party has the right to obtain the integration of incomplete personal data, also by providing a supplementary declaration. The data controller communicates any corrections to each of the recipients to whom the personal data have been transmitted, unless this proves impossible or involves a disproportionate effort. The data controller communicates these recipients to the interested party if the interested party requests it.

 Right to cancellation: the interested party has the right to obtain from the data controller the cancellation of personal data concerning him without unjustified delay (and where the specific reasons of Article 17 paragraph 3 of the GDPR do not exist which, on the contrary, relieve the holder from the obligation of cancellation) if the personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed; or if the interested party withdraws the consent and there is no other legal basis for the processing; or if the interested party opposes the processing for marketing or profiling purposes, also by revoking the consent; if the personal data have been processed unlawfully or concern information collected from minors, in violation of art. 8 of the GDPR. The data controller communicates any cancellations to each of the recipients to whom the personal data have been transmitted, unless this proves impossible or involves a disproportionate effort. The data controller communicates these recipients to the interested party if the interested party requests it.

 Right to limitation of treatment: the interested party has the right to obtain from the data controller the limitation of treatment (i.e., pursuant to the definition of "limitation of treatment" provided by article 4 of the GDPR: "the marking of personal data stored with the aim of limiting their processing in the future”) when one of the following hypotheses occurs: the interested party disputes the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data; the processing is unlawful and the interested party opposes the cancellation of personal data and instead requests that their use be limited; although the data controller no longer needs it for processing purposes, personal data are necessary for the data subject to ascertain, exercise or defend a right in court; the interested party has opposed the marketing treatment, pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party. If the treatment is limited, such personal data are processed, except for conservation, only with the consent of the interested party or for the assessment, exercise or defense of a right in court or to protect the rights of a other natural or legal person or for reasons of significant public interest The interested party who has obtained the limitation of treatment is informed by the data controller before said limitation is revoked. The data controller communicates any limitations to each of the recipients to whom the personal data have been transmitted, unless this proves impossible or involves a disproportionate effort. The data controller communicates these recipients to the interested party if the interested party requests it.

 Right to object: the interested party has the right to object at any time, for reasons connected with his particular situation, to the processing of personal data concerning him carried out by the owner or for th