Information provided pursuant to Art. 13 of European Regulation no. 2016/679 (GDPR)
1. WHY THIS NOTICE
This page describes the processing of personal data carried out by the undersigned towards all forms of interested parties (hereinafter "interested parties", ex. Art. 4, c.1 of the GDPR), and with the intention of expressing the Company Policy adopted to guarantee the compliance and confidentiality in accordance with the provisions of GDPR 2016/679, Legislative Decree 196/2003, National provisions for this matter, Guidelines issued by the European Data Protection Board as well as Community Directives relating to the protection of personal data.
This is a disclosure made pursuant to art. 13 of EU Regulation 2016/679 to those who establish any form of relationship with the undersigned. The Privacy Policy of this website does not refer to other processing carried out or described following navigation of websites through links that may be present through this website
2. HOLDER OF THE TREATMENT
the Data Controller is the undersigned Company:
LABEL Spa
Via Ilariuzzi, 17/A
Loc. S.Pancrazio
43126 Parma
Tel: 39 0521 6752
Fax: +39 0521 675222
Email privacy@labelspa.it
PEC: amministrazione@pec.labelspa.it
- You can contact the Data Controller to exercise all the rights provided for by Articles 15 to 21 of the GDPR: right of access, rectification, cancellation, limitation, portability, opposition, as well as revoke a previously granted consent; in the event of failure to respond to their requests, the interested parties may lodge a complaint with the Supervisory Authority for the protection of personal data (pursuant to Article 13, par. 2, letter d of the GDPR).
- all data are processed in a lawful, correct and transparent manner towards the interested party, in compliance with the general principles provided for by Art. 5 of the GDPR;
- specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.
3. TYPES OF DATA
3.1 DATA FOR CONTACT REQUEST
The optional, explicit and voluntary sending of personal data necessary for the contact request through the form present on this site, or through any email addresses indicated on this site, involves the subsequent acquisition of data solely necessary to respond to the requests sent.
| Aims of treatment (art.13, par. 1, letter c), of the GDPR) | The personal data collected are used for the sole purpose of responding to requests sent, and communicating with the interested party in any subsequent phases. The communication of some data is mandatory and indicated by specific asterisks. |
| Categories of personal data | personal data (name, surname), contact details (e-mail address, telephone number), any other data/information included in the request. |
| Lawfulness of the processing (art.13, par. 1, letter c), of the GDPR) | The processing is carried out in order to perform an activity requested by the interested party (art. 6, par. 1, lett. b), of the GDPR). |
| Communication scope (art.13, par. 1, letter e) and f), of the GDPR) | The data are processed exclusively by authorized personnel, instructed in the processing and adequately trained. They may also be processed by other subjects, involved for purposes related to the processing itself (support for the management of the website; consulting firm): these subjects have the role of data controllers and have signed specific agreements with the Data Controller pursuant to art. 28, par. 3, GDPR. In any case, the personal data collected will not be communicated to third parties, or disseminated or transferred outside the European Union/European Economic Area. |
| Method of treatment (Recital 39, GDPR) | Personal data are processed lawfully, correctly and transparently, in compliance with the principles set forth in current legislation. The processing of personal data occurs through computerized and automated tools. Taking into account the nature and characteristics of the processing, the Data Controller has adopted technical and organizational security measures aimed at limiting or excluding the risks of data loss, possible illicit or incorrect use, or unauthorized access. |
| Data retention period (art.13, par. 2, letter a), of the GDPR) | Personal data is retained for the time necessary to manage the relationship with the applicant. |
| Nature of the provision (art.13, par. 2, letter e), of the GDPR) | The data are provided voluntarily by the interested parties. However, failure to provide them may jeopardize the management of the request and the sending of feedback. |
3.2 DATA OF CUSTOMER COMPANY REFERENTS, SUPPLIER COMPANY REFERENTS
The personal data communicated by the subjects indicated, or collected by the undersigned during the performance of the activities deriving from contractual relationships, derive from the needs of execution of the activities organized between the parties.
| Purpose and legal basis of the processing (art.13, par. 1, letter c), of the GDPR) | The data is collected and used in order to: conclude contractual/professional relationships, fulfill pre-contractual, contractual and fiscal obligations arising from existing relationships, as well as manage the necessary communications connected to them; fulfill the obligations established by law, by a regulation, by community legislation or by an order of the Authority; exercise a legitimate interest as well as a right of the Owner (for example: the right of defense in court, the protection of credit positions; ordinary internal needs of an operational, management and accounting nature). |
| Communication scope (art.13, par. 1, letter e, f), of the GDPR) | The data are processed exclusively by internal personnel, duly authorised and trained in processing (GDPR Art. 29) and will not be communicated to external parties, disseminated or transferred to non-EU countries. In different cases it will be specified in the relevant form. |
| Method of treatment (Recital 39 of the GDPR) | Personal data are processed with automated and paper-based tools. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access. |
| Data retention period (art.13, par. 2, letter a), of the GDPR) | Data is usually retained for short periods of time, strictly necessary for the fulfillment of contractual or regulatory obligations. |
| Contribution (art.13, par. 2, letter f), of the GDPR) | They are requested by the undersigned for the purposes indicated. |
| Lawfulness (art. 6 par. 1), of the GDPR) | The processing is necessary for the establishment of contractual relationships, and therefore consent is not required. |
3.3 DATA FOR SUBSCRIPTION TO THE INFORMATION NEWSLETTER
The personal data communicated by the interested parties through the voluntary insertion of contact data using a specific form online, are processed for purposes related to sending newsletters.
| Aims of treatment (art.13, par. 1, letter c), of the GDPR) | The personal data collected are used for the exclusive purpose of sending informative communications by sending newsletters via email to the addresses indicated |
| Categories of personal data | personal data (name, surname) where requested, contact details (email address) |
| Lawfulness of the processing (art.13, par. 1, letter c), of the GDPR) | The processing is optional for the sending of informative communications, therefore following the relative acceptance of the service, or expression of consent in the event that this faculty of choice is integrated in forms intended for other purposes. |
| Communication scope (art.13, par. 1, letter e) and f), of the GDPR) | The data are processed exclusively by authorized personnel, instructed in the processing and adequately trained. They may also be processed by other subjects, involved for purposes related to the processing itself (support for the management of the website; consulting firm): these subjects have the role of data controllers and have signed specific agreements with the Data Controller pursuant to art. 28, par. 3, GDPR. In any case, the personal data collected will not be communicated to third parties, or disseminated or transferred outside the European Union/European Economic Area. |
| Method of treatment (Recital 39, GDPR) | Personal data are processed lawfully, correctly and transparently, in compliance with the principles set forth in current legislation. The processing of personal data occurs through computerized and automated tools. Taking into account the nature and characteristics of the processing, the Data Controller has adopted technical and organizational security measures aimed at limiting or excluding the risks of data loss, possible illicit or incorrect use, or unauthorized access. |
| Data retention period (art.13, par. 2, letter a), of the GDPR) | The data is normally retained until the interested party revokes their consent. |
| Nature of the provision (art.13, par. 2, letter e), of the GDPR) | The data are provided voluntarily by the interested parties. However, failure to provide them may jeopardize the management of the request and the sending of feedback. |
3.4 DATA FOR REGISTRATION TO MY ACCOUNT LABEL
The personal data communicated by the interested parties during the compilation of specific form for the activation of account are processed for user registration purposes.
| Aims of treatment (art.13, par. 1, letter c), of the GDPR) | Personal data is requested from interested parties in order to follow up on account registration requests. |
| Categories of personal data | personal data (name, surname, company, city, country) contact details (email address) |
| Lawfulness of the processing (art.13, par. 1, letter c), of the GDPR) | The processing of personal data is carried out to satisfy the interested party's request to activate the service associated with the account (fulfilment of the contract or pre-contractual measures requested by the interested party, art. 6, par. 1, lett. b) of the GDPR). |
| Communication scope (art.13, par. 1, letter e) and f), of the GDPR) | The data are processed exclusively by authorized personnel, instructed in the processing and adequately trained. They may also be processed by other parties, involved by the Data Controller for purposes related to the processing itself (e.g.: support for the management of information systems; event organization companies; etc.). In some cases, these parties have the role of data controllers and have signed specific agreements with the Data Controller pursuant to art. 28, par. 3, GDPR. The data may be communicated to the competent authorities, in specific cases. In any case, the personal data will not be communicated to third parties, or disseminated or transferred outside the European Union/European Economic Area. |
| Method of treatment (Recital 39, GDPR) | Personal data are processed lawfully, correctly and transparently, in compliance with the principles set forth in current legislation. The relevant processing takes place through computerized and automated tools. Taking into account the nature and characteristics of the processing, the Data Controller has adopted technical and organizational security measures aimed at limiting or excluding the risks of data loss, possible illicit or incorrect use, or unauthorized access. |
| Data retention period (art.13, par. 2, letter a), of the GDPR) | The data is normally retained until the interested party revokes their consent. |
| Nature of the provision (art.13, par. 2, letter e), of the GDPR) | Providing data for the purposes indicated above is optional; however, failure to provide data may make it impossible to register and participate in the events organized. |
3.5 NAVIGATION DATA
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes IP addresses or domain names of computers used by users who connect to the site, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's computer environment.
| Aims of treatment (art.13, par. 1, letter c), of the GDPR) | This data is used for the sole purpose of obtaining statistical information on the use of the site and to check its correct functioning. The data could also be used to ascertain responsibility in the event of hypothetical computer crimes against the site (legitimate interests of the joint owners). |
| Lawfulness of the processing (art.13, par. 1, letter c), of the GDPR) | The processing is necessary for the pursuit of the legitimate interests of the Data Controller in the security of its information system, and in the evaluation of the use of the website and its functioning (art. 6, par. 1, lett. f), of the GDPR). |
| Communication scope (art.13, par. 1, letter e) and f), of the GDPR) | The data are processed exclusively by authorized personnel trained in processing and adequately trained. They may also be processed by other parties, involved by the Data Controller for purposes related to the processing itself (e.g.: support for the management of information systems; of this website). In some cases, these parties have the role of data controllers and have signed specific agreements with the Data Controller pursuant to art. 28, par. 3, GDPR. The data may be communicated to the competent authorities, in specific cases. In any case, personal data will not be communicated to third parties, or disseminated or transferred outside the European Union/European Economic Area. |
| Method of treatment (Recital 39, GDPR) | Personal data are processed lawfully, correctly and transparently, in compliance with the principles set forth in current legislation. The relevant processing takes place through computerized and automated tools. Taking into account the nature and characteristics of the processing, the owner has adopted technical and organizational security measures aimed at limiting or excluding the risks of data loss, possible illicit or incorrect use, or unauthorized access. |
| Data retention period (art.13, par. 2, letter a), of the GDPR) | The data are normally stored for the purposes indicated above, for short periods of time, with the exception of any extensions connected to investigative activities. |
| Nature of the provision (art.13, par. 2, letter e), of the GDPR) | The provision of data is implicit in accessing and browsing the website. |
3.6 COOKIE
For more general information on cookies and how to enable and disable them, please see the document Cookie Policy
4. RIGHTS OF THE INTERESTED PARTY (GDPR art. 15-22)
At any time, the interested party may exercise the right to:
- ask for confirmation of the existence or otherwise of your personal data.
- obtain information on the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, where possible, the retention period.
- obtain the rectification and deletion of data.
- obtain treatment limitation.
- obtain data portability, i.e. receive them from a data controller, in a structured, commonly used and machine-readable format, and transmit them to another data controller without hindrance.
- object to the processing at any time and also in the case of processing for direct marketing purposes.
- oppose an automated decision-making process concerning individuals, including profiling.
- lodge a complaint with the Italian Data Protection Authority.
Requests should be addressed to the Data Controller by writing to the reference email address for the treatments described.
Every effort will be made to make the features of this site as interoperable as possible with the automatic privacy control mechanisms available in some products used by users.
This information document is updated as of 04/06/2025