MECPLAST must process personal data as part of its day-to-day business. We care about your privacy, and we strive for high levels of security in our work with data protection. It is important to us that everyone affected is confident about the methods we use to process personal data. Our data protection policy outlines, among other things, which types of personal data we process and the respective storage periods. More information about your rights can be found in the policy.
At MECPLAST, we care about your personal privacy. We strive to maintain a high level of security in our work with data protection. This policy describes how we gather and use personal data and how we work to protect this data using both technological and organizational safeguards. “Personal data” refers to all types of data that can be linked to you as a living, natural person. The policy also describes your rights with regard to how we process your personal data and how you can exercise these rights.
MECPLAST processes personal data in accordance with the General Data Protection Regulation (Regulation No. 2016/679 of the European Parliament and of the Council, also called “GDPR”).
Personal data controller
The personal data controller is MECPLAST SRL, via Giotto 3, 33044 Manzano (UD)-Italy. For information about the processing of personal data for employees at MECPLAST, please send an e-mail to firstname.lastname@example.org. The personal data we process depends on your relationship with us. We gather the information directly from you, from our partners and suppliers or from publicly available registers. This data may also be gathered via digital channels, for example when you visit one our website or use a mobile app.
In some cases, we gather personal data from you, but the data refers to someone else. In such situations, we assume that the person who provides us with the personal data of other people has their consent or in some other way has a valid reason for providing us with this information. We will inform concerned persons about our personal data processing policy during our first contact with them.
Legal basis and purpose for processing personal data
MECPLAST processes personal data for several different purposes. The primary purposes are so that we can:
Process orders, purchases, customer service matters and communication with visitors, exhibitors and organizers
Document, evaluate, develop and market our operations
Fulfill our commitments as partners and a member of society
Stop fraud and prevent crime
Marketing mailings from us always offer the possibility of “opting out” of future similar mailings. All processing of personal data that MECPLAST carries out can be justified based on one or several of the following legal grounds:
Compliance with a legal obligation, Contractual necessity, Legitimate interest, Consent.
Storage periods and safeguards
To protect your personal data from loss, damage or unauthorized processing, MECPLAST constantly works to maintain and improve a number of different safeguards. This applies to physical protection (for example of persons, IT infrastructure and buildings), information security (for example against infringement of IT systems, virus attacks and through back-ups) and organizational protection (for example that only those who need it in their daily work have access to your personal data). We store your personal data as long as it is necessary to fulfill the purposes described above. The data is then erased or anonymized in a secure manner, so it can no longer be linked to you. Unless agreed otherwise, and if the law does not require us to keep the data longer, the storage periods set out below apply. If you would like us to terminate the storage of your personal data earlier than this, you may request that we do so. See the section entitled “Your rights”.
Transfer of personal data to others
MECPLAST will never sell your data to a third party if we have not received your consent to do so. However, we may turn over your personal data to the following categories of recipients:
Authorities, Another company in the Group, Another personal data controller,
Processor, Exhibitors at trade fairs – lead track, Transfer of personal data to countries outside the EU/EEA.
According to GDPR, if you are listed in a register you have a number of rights. If you would like to exercise these rights, write us at email@example.com , we will respond as soon as possible. If we, regardless of the reason, cannot fulfill your request, we will explain why.
Right of access to your personal data: You are entitled to obtain confirmation as to whether MECPLAST is processing your personal data and in such a case obtain a summary of the personal data in question. Most of MECPLAST’s systems use email addresses as identifiers, and we will therefore normally deliver the copy of the data digitally to your email address.
Right to rectification: MECPLAST strives to ensure that all data processed by us is accurate. If you discover inaccuracies in your data, you may request that we rectify the inaccurate data. We will then rectify the error.
Right to data portability: If you would like to receive your personal data from MECPLAST in order to be able to use it elsewhere, you are entitled in some cases to receive the data in a structured, commonly used and machine-readable format and transmit it to another controller. However, this assumes that the transfer is technically feasible, that the other party accepts the formats we provide and that this can occur with reasonable effort on our part. Given the limited volume of personal data that MECPLAST processes, it will almost always be easier for you to provide the other party with your personal data. Please also note that this right is limited to data that is processed with your consent or to fulfill contractual obligations with you and that it only applies to the personal data you have submitted yourself.
Right to restriction of processing: If you would like MECPLAST to process your personal data only for limited purposes, you can request a restriction of processing. This applies, for example, if you consider the information to be inaccurate, that our processing is unlawful, that we no longer need the data for the purpose of the processing, or when you have objected to processing on the grounds of legitimate interests pending the verification of whether our interest overrides your interest. We will then mark the data to ensure that it does not become subject to additional processing and cannot be changed.
Right to erasure (“right to be forgotten”) :If you would like us to cease all processing of your personal data, you may request erasure in some cases. We will then erase all data that can be linked to you as a person. When the erasure is completed, you will receive a confirmation via email, after which we will also delete the sent email.
Please note that an erasure means that we will remove all information about you, including information that you at one point requested to be forgotten.
If you think we have made a mistake
If you consider MECPLAST’s processing of your personal data to be in conflict with applicable legislation, or that we have processed a request from you improperly when you wanted to exercise your rights in accordance with the above, you may report this to the Italian Data Protection Authority (Privacy Protection Authority).