Privacy Policy

PRIVACY NOTICE -DATA TREATMENT - REGULATION (EU) 2016/679

Zambelli Packaging S.r.l., as the Controller of your personal data, issues this privacy notice regarding the processing of personal data—either directly provided by you or obtained from third parties—in compliance with Regulation (EU) 2016/679 on the protection of individuals and other entities concerning the processing of personal data, hereinafter referred to as GDPR. The data collected will be processed in accordance with principles of fairness, legality, and transparency, safeguarding your confidentiality and rights.

DATA CONTROLLER

The Data Controller, pursuant to current legislation, is Zambelli Packaging S.r.l., CF/VAT 04212281200, with its registered office at Via Ferrara 35-41, San Pietro Casale (BO), Italy, phone: +39 051 66 61 782, represented by its legal representative, Andrea Alessandrini.
The Controller has appointed an Internal Data Processing Manager, Fabrizio Pasi, born in Bologna on October 29, 1978 – Tax Code: PSAFRZ78R29A944U.

INFORMATION ON THE PROCESSING OF PERSONAL DATA

The term "Processing of Personal Data" refers to any operation or set of operations performed with or without the aid of electronic or authorized means concerning the collection, recording, organization, storage, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, deletion, and destruction of data related to public or private entities.

TYPES OF PERSONAL DATA PROCESSED

The personal data required by the Controller to achieve its purposes includes, but is not limited to:

• Browsing Data
  The website of Zambelli Packaging S.r.l. collects certain personal data implicitly transmitted by the use of Internet communication protocols. These data pertain to the user's operating system and IT environment and include: browser information, IP address, date and time of access, and URL.
• Data Provided by the User
  These are data voluntarily entered by the user in specific fields on the website, such as name, surname, phone or mobile number, residence address, email address, tax code/VAT number, company name, industry, application field, comments, and requests, as well as any other necessary data, in accordance with the principle of data minimization outlined in Article 5(c) of the GDPR.
• Cookies
  Regarding cookies processed by the Controller, please refer to the relevant cookie policy.

For further inquiries or requests related to this privacy notice, please contact the Controller directly.

PURPOSE AND LEGAL BASIS FOR DATA PROCESSING
Your personal data, collected through various forms (information request forms, contact forms, report forms, forms for print customization), will be processed for the following purposes:

• To respond to your request and contact you using the details provided in the completed form, in compliance with Article 6, paragraph 1, letter (b) of the GDPR.
• To manage orders, purchases, sales, and product deliveries, including monitoring, customer service management, returns, and repairs.
• For administrative and accounting management and related obligations (issuance of receipts, invoices, payment arrangements), as well as for the protection of creditor positions and legal defense, if necessary.
• To conduct studies, statistical research, surveys, and market analysis related to the products and services of Zambelli Packaging S.r.l.
• To send advertising communications to the contact details provided by the user during a contract or product/service sale, regarding similar offers and services, with the user having the right to object to such communications, pursuant to Recital 47 of the GDPR and Article 130 of the Italian Privacy Code.
• For direct marketing activities via email, postal mail, SMS, social networks, including the promotion of products and services, the distribution of flyers and informational/promotional materials, and the sending of newsletters and commercial communications about offers and services.
• For profiling activities, including behavior analysis for promotional purposes, assessing user satisfaction levels, and creating profiles to provide targeted and personalized services tailored to customer needs.

Providing data for the purposes outlined above is optional; you may choose not to consent or withdraw your consent at any time.

METHODS OF PROCESSING
Data processing is primarily carried out using electronic and IT tools, enabling data storage on both digital media and any other suitable format. Processing is implemented with appropriate technical and organizational measures to ensure the security, integrity, and confidentiality of the collected data, minimizing the risk of unauthorized or unlawful processing, loss, destruction, alteration, or unauthorized disclosure, in compliance with Articles 5 and 32 of the GDPR.

DATA RECIPIENTS
To perform specific activities and achieve the Controller’s purposes, some or all of the data may be disclosed to or shared with other entities. These entities are categorized as follows:

• Third parties (as defined by Article 4(10) of the GDPR: natural or legal persons, public authorities, services, or other bodies other than the data subject, the Controller, the Processor, and persons authorized to process personal data under the direct authority of the Controller or Processor). This category includes:
• Entities (e.g., administrative, supervisory, regulatory, or judicial authorities) to whom the disclosure of data is required by law, regulations, or European Union legislation.
• Companies and independent professionals, including those operating as associations, that perform activities and services distinct from those of the Controller and act as autonomous controllers.
• Banking institutions for the management of payments and collections.
• External processors (as defined by Article 4(8) of the GDPR: a natural or legal person, public authority, service, or other body processing personal data on behalf of the Controller). This category includes:
• Entities tasked with performing specific services on behalf of the Controller or complementary activities, such as tax, accounting, or legal consultancy.
• External service providers, such as IT, web, transportation, delivery, or other services required to fulfill the Controller’s purposes, including digital marketing services (e.g., NUR S.r.l., BREVO).

These recipients are committed to protecting your personal data and processing it in compliance with the applicable personal data protection laws.

Additionally, employees and collaborators of Zambelli Packaging S.r.l. (e.g., administrative, secretarial, and marketing personnel), temporary workers, interns, consultants, and employees of external companies designated as data processors may access your data within the scope of their assigned duties.

DATA RETENTION PERIOD
In accordance with the principles outlined in Article 5 of the GDPR, your data will be retained by the Controller for no longer than necessary to achieve the purposes for which it was collected and processed.

Personal data may be retained for longer periods provided that it is processed solely for purposes of public interest, scientific or historical research, or statistical purposes, in compliance with Articles 5 and 89 of the GDPR.

If a contract has been concluded with the data subject, or in the execution of pre-contractual measures, the data will be retained for the duration of the contractual relationship and the fulfillment of related obligations. Retention will end upon the expiration or termination of the contract, though data may still be kept for an additional period if necessary to ensure proper execution of the contract, specific contractual obligations, or to handle potential disputes.

Customer data processed for marketing and profiling purposes will be retained from the time consent is provided until it is withdrawn. Once consent is revoked, the data will no longer be processed for marketing or profiling purposes, although it may still be retained to handle potential claims and/or legal actions.

Data transmitted to service providers will be processed by them only for the time strictly necessary to fulfill their assigned tasks.

In any case, users will have the opportunity to withdraw their consent for data processing at any time as described above.

RIGHTS OF THE DATA SUBJECT
The GDPR grants the data subject a series of rights, including the right to:

• Access their personal data, upon confirmation that their data is being processed by the Controller.
• Request the update, rectification, or integration of their personal data.
• Obtain the deletion, anonymization, or blocking of data processed in violation of the law or when retention is unnecessary for the purposes for which it was collected.
• Restrict the processing of their personal data under certain conditions.
• Receive their personal data provided to the Controller in a structured, commonly used, and machine-readable format, and to transmit such data to another Controller.
• Object to the processing of personal data for reasons related to their particular situation.
• Object to the processing of personal data for purposes such as sending advertising materials, direct sales, market research, or commercial communications.
• Receive personal data concerning them in a structured, commonly used, and machine-readable format, and transmit it to another Controller.
• Withdraw consent to data processing at any time.
• Not be subjected to automated decision-making processes.

Requests should be addressed to the Data Controller, who commits to facilitating the exercise of the data subjects’ rights as much as possible. You can contact the Controller at the following email address: zambelli@zambelli.it.

COMPLAINT
Zambelli Packaging S.r.l. informs you of your right to lodge a complaint or report with the Italian Data Protection Authority ("Garante per la protezione dei dati personali").

UPDATES
The Site's Privacy Policy may be periodically updated. Any substantial changes will be published at this address, and users are responsible for regularly checking this website to stay informed about the current or modified terms.