Privacy Policy
Pursuant to and in accordance with Article 13 of the European Regulation 2016/679 on the protection of personal data (“GDPR”), we inform you that your personal data will be processed using electronic and manual tools, in Italy (and/or abroad).
This policy, drafted based on the principle of transparency and all the elements required by the GDPR, is divided into sections, each pertaining to a specific topic.
Data Controller
The Data Controller is POLISTAMP INFISSI S.R.L., with registered office in Località Sala 8/A, Pratovecchio (AR), VAT Number: 02078060510, email: info@polistamp.com.
Categories of data processed
Personal data
Pursuant to Article 4 of the applicable European Regulation, for which we provide a definition below: "‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person."
Browsing data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of computers used by users who connect to the site, URI (Uniform Resource Identifier) notation addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to the user's operating system and computer environment. This data is used solely for the purpose of obtaining anonymous statistical information on the use of the site and for checking its correct functioning.
Pursuant to Article 4, point 2, we also provide the definition of "Processing" of personal data: "any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction."
Cookies
Based on the new European regulation (GDPR), cookies are considered equivalent to personal data. For further details, please refer to the cookie policy of this site at the link: CookiesPolicy.
Legal basis for processing
Personal data processing by the Data Controller or its Data Processor as referred to in points 1 and 1.a:
Following your express and explicit consent.
Compliance with legal obligations.
Fulfillment of administrative obligations, such as tax and accounting requirements.
Purposes
The aforementioned data are processed within the site for the following purposes:
- Navigation within the website.
- Utilization of the services requested by you within this platform.
- Conclusion of a contract requested by you.
- Fulfillment of a prevailing legitimate interest of the Data Controller, its Data Processor, and/or any authorized personnel.
- Management of your requests submitted via the forms on the site.
- Protection of public interests
- Protecting the platform from fraudulent and/or malicious attacks.
- Protecting against any infringement of the fundamental rights and freedoms of others.
- Implementing security measures against hacking attempts.
Specific consent is required in relation to point 4.e. Below is a description regarding any form present on this site:
Here, the user may contact POLISTAMP INFISSI S.R.L. by providing their first name, last name, email address, phone number, and their request message. The same form is present on every product page on the site. In addition to being saved in our databases, the data is forwarded to and stored in the following email inboxes: info@polistamp.com and privacy@polistamp.com.
Need for specific consent
Specific consent is required if data such as email addresses and phone numbers are collected for marketing communications and/or to offer commercial proposals via email or by calling the reference number, or for the specific completion of the forms described in point 4.
Archiving and Retention Period
Your personal data stored in paper format are collected and kept at the registered office of the Data Controller.
Your data in electronic format are stored within our databases and in our email inboxes.
We also inform you that the site uses hosting space provided by the company ServerPlan S.r.l., with registered office in Via G. Leopardi 22, 03043 Cassino (FR).
Your data will be used for the purposes referred to in point 4 and will be kept for a minimum and reasonable period necessary to achieve such purposes, without prejudice to different obligations imposed by mandatory legal regulations.
Withdrawal of consent
Your data will be retained unless consent is withdrawn by the data subject; this may be done at any time without prejudice to the processing operations requested prior to the withdrawal.
To submit a withdrawal request, you, as the data subject, may refer to the contact details provided in this policy under point 1.
Pursuant to Article 7 of the GDPR, the withdrawal of consent must be as easy to grant as the consent for the data processing itself. This triggers the right to the erasure of data held in our archives (both electronic and paper), except where it is necessary to retain data related to corporate administrative and tax activities or to comply with legal obligations.
Minors
Personal data of minors under the age of 16 will not be processed by the Data Controller or any authorized personnel without the prior authorization of the holder of parental responsibility or their legal guardian.
Where will your data be processed?
Your personal data will be processed by the Data Controller within the territory of the European Union.
Should it become necessary, for technical and/or operational reasons, to avail ourselves of entities located outside the European Union, we hereby inform you that such entities will be appointed as Data Processors (EU Representative) pursuant to and in accordance with Article 28 of the GDPR. The transfer of your personal data to such entities, limited to the performance of specific processing activities, will be regulated in compliance with the provisions of the GDPR, and you will be notified via email at the address saved on our servers, along with the relevant consent acceptance form.
Every necessary precaution will be taken to ensure the total protection of your personal data, basing such transfer on the assessment of appropriate safeguards, including, by way of example, adequacy decisions concerning the recipient third countries expressed by the European Commission, or appropriate safeguards provided by the third-party recipient pursuant to Article 46 of the GDPR.
In any case, you may request further details from the Data Controller if your personal data have been processed outside the European Union, by requesting evidence of the specific safeguards adopted.
What are your rights?
Please note that you may exercise the rights granted to you under the GDPR (Articles 15–22 and Article 77), including the right to obtain:
- confirmation as to whether or not personal data concerning you are being processed, and access to such data together with the following information: the purposes of the processing, the categories of personal data concerned, the recipients and/or categories of recipients to whom the data have been or will be disclosed, and the data retention period (Article 15);
- the rectification of inaccurate personal data concerning you and/or the completion of incomplete personal data, including by providing a supplementary statement (Article 16);
- the erasure of your personal data where they are no longer relevant or necessary, are inadequate in relation to the purposes for which they are processed, where you have withdrawn your consent, or where the data have been processed unlawfully. This right is subject to the exceptions set out in Article 17(3), including where processing is necessary for the protection of individuals, reasons of public interest, freedom of expression, or the exercise or defence of the rights and freedoms of others (Articles 17 and 19);
- the restriction of processing in the cases provided for by the applicable data protection legislation (Article 18);
- data portability, including the right to receive the personal data concerning you that you have provided to the Data Controller and/or to request the direct transmission of such data to another controller in a commonly used, machine-readable format (Article 20);
- to object, at any time, on grounds relating to your particular situation, to the processing of your personal data in accordance with the applicable data protection legislation, as well as to object to processing for direct marketing and profiling purposes (Article 21).
You may exercise your rights by contacting us at **[info@polistamp.com](mailto:info@polistamp.com)** and attaching a copy of your identity document.
In any case, you always have the right to lodge a complaint with the competent supervisory authority (the Italian Data Protection Authority – *Garante per la Protezione dei Dati Personali*), pursuant to Article 77 of the GDPR, if you believe that the processing of your personal data infringes the applicable data protection legislation.
