PRIVACY POLICY

INFORMATION ON THE PROCESSING OF PERSONAL DATA

This information is provided pursuant to Articles 13, paragraph 1, and 14, paragraph 1, of the European General Data Protection Regulation (GDPR) no. 679/2016, to those who interact exclusively with this website and any third-level domains associated with it.
However, this information is not provided for third-party websites that may be consulted through links on the site.
This document contains all the information necessary to inform the interested party of the rules for processing and managing the data collected through the site.

HOLDER OF THE TREATMENT
The data controller is Arca Etichette SPA., PI IT04875560155, Via Edison, 119 – 20010 Marcallo (MI) ITALY.

DPO – DATA PROTECTION OFFICER
The data controller has appointed a DPO – Data Protection Officer who can be contacted at the following email address: dpo@arca.it

PROCESSED DATA
While browsing the site, various types of data may be collected, some of which will be acquired automatically, while others only with the interested party's consent.
Specifically, the data collected through the website are as follows:

Technical data
The technical data that will be processed are: IP (internet protocol) address, date and time of visit, browser used, the physical address of the device from which the connection is made (so-called MAC Address), the addresses of the requested resources, and cookies. The acquisition of technical data is implicit in the functioning of the website and never involves identifying the data subject.

• Cookie policy
  Cookies are small files that the website, or a third-party website, sends to the user's terminal, where they are stored before being retransmitted to the same websites when necessary. The website uses the following types of cookies: The website does not use profiling cookies, but only technical cookies. Technical cookies are anonymous cookies whose acquisition is necessary to allow the user to navigate the website and use all its features. Their presence also allows for faster and more efficient web browsing and use, for example, by facilitating certain procedures when making online purchases, when logging in to restricted areas, or when a website automatically recognizes the preferred language. Specifically, the technical cookies used are:
• Functionality or preference cookies: these allow the user to remember their pre-selected preferences, such as language or geographic location.
• Navigation cookies: These cookies ensure normal navigation and use of the website (for example, allowing you to make a purchase or authenticate yourself to access restricted areas).
• Technical cookies will be available for automatic deletion by the browser according to the methods established by the browser itself.
• Personal data
  We will process all the common data you provide when using the Site's services, such as your name, surname, email address, and any other personal information you provide us through the "contact us" section. We recommend that you do not enter sensitive information in this field.

LEGAL BASIS OF TREATMENT
The legal basis for processing the data subject's personal data is consent.

PURPOSE OF THE TREATMENT
The data collected will be used for the following purposes:
a. allow the interested party to request and receive information, written or verbal;
b. allow you to submit your application to work for the company;
c. allow the interested party to subscribe to the newsletter;
d. perform statistical analyses anonymously.

NATURE OF THE PROVISION
Providing personal data is optional. Failure to provide the requested personal data will prevent the interested party from using the services provided through the site, except for browsing.

PERIOD OF RETENTION OF PERSONAL DATA
The interested party's personal data will be retained for 5 years.

PLACE OF TREATMENT
The data subject's personal data is processed at the data controller's headquarters, but may be transferred for data security purposes to other parties appointed as data processors, located in Italy or elsewhere within the European Union. The data subject may contact the data controller for further information regarding this transfer and the responsible parties.

METHOD OF TREATMENT
Data processing occurs both through paper and electronic means. The data provided and any other data communicated to us and relating to third parties will be: a) processed lawfully and fairly; b) collected and recorded for specific, explicit, and legitimate purposes, and used in other processing operations compatible with those purposes; c) accurate or, in any case, corresponding to the information provided to us; d) relevant, complete, and not excessive in relation to the purposes for which they were collected or subsequently processed; e) retained in a form that permits identification of the data subject for a period of time no longer than is necessary for the purposes for which they were collected or subsequently processed.

SECURITY MEASURES
Specific and appropriate technical and organizational security measures are adopted pursuant to Art. 32 of the European Regulation to minimize the risk of destruction or loss of data, unlawful or incorrect use, unauthorized access, or processing that is unauthorized or inconsistent with the purposes for which it was collected.

COMMUNICATION AND DISSEMINATION OF PERSONAL DATA
The data provided by the interested party will be disclosed exclusively to qualified third parties and only when necessary to perform the requested services or to comply with legal obligations, ensuring the protection of the interested party's rights and in compliance with the European Regulation and the Privacy Code. These parties will be duly appointed as data controllers or processors, or to parties required to disclose the data by law or regulation. Specifically, your data may be disclosed to:

– persons, entities, or authorities to whom the communication of your personal data is mandatory by law or regulation;
– individuals, companies, or professional firms that provide assistance and consultancy to the Data Controller in accounting, administrative, tax, fiscal, and legal matters;
– individuals, companies, or professional firms that perform activities that are instrumental and/or necessary for the provision of the Services provided through the Site;
– natural persons authorized by Arca Etichette Spa who have undertaken to maintain confidentiality or have an appropriate legal obligation of confidentiality (e.g. employees and collaborators);
Your personal data will not be disclosed.

TRANSFER OF DATA ABROAD
In some cases (such as your use of social plugins provided by LinkedIn and Instagram), your personal data may be processed outside the European Economic Area. The transfer may occur both to third-party countries that ensure an adequate level of data protection based on an adequacy decision adopted by the European Commission, and to countries that do not ensure an adequate level of data protection. In this case, the transfer will only occur

a) after adopting appropriate guarantees (such as the stipulation of data transfer agreements that guarantee an adequate level of protection of your data)

b) if it is necessary for the conclusion of the contract or the fulfillment of contractual obligations between us.

RIGHTS
We remind you that you have the right at any time to:
– ask us to confirm whether or not personal data relating to you is being processed, and, if so, obtain access to such data, as well as all information relating to the processing;
– receive a copy of the personal data undergoing processing;
– rectify inaccurate data or integrate incomplete data;
– request the deletion of your personal data, where the conditions apply; 
– request the limitation of the processing of your personal data, where the conditions are met;
– request and obtain – where the legal basis for the processing is consent, and the processing is carried out by automated means – personal data in a structured, machine-readable format, including for the purpose of communicating such data to another data controller (so-called right to data portability);
– object at any time to the processing of personal data in the event of particular situations;
– withdraw consent to data processing at any time, limited to cases in which the processing is based on consent for one or more specific purposes. Processing carried out prior to the withdrawal of consent remains lawful.

For any information regarding data processing by Arca Etichette SPA, you can write to the following address: customerservice.etichette@arca.it or contact the DPO – Data Protection Officer at the following address dpo@arca.it

The interested party always has the right to lodge a complaint with the Italian Data Protection Authority ( http://www.garanteprivacy.it/home/diritti/come-agire-per-tutelare-i-nostri-dati-personali ).