Privacy & Cookie Policy

The data provided to Astraplast s.r.l. through the web address www.wintag.it (hereinafter Wintag) will be processed in compliance with the applicable privacy regulations, which are based on EU Regulation 2016/679 (GDPR).

The purpose of this Privacy Policy is to inform you about the processing of your personal data in the simplest and most detailed way possible. This privacy policy applies only to this website and not to third-party websites that users may visit via links.

Data Processed

Navigation Data

Our systems and/or those of third-party companies with which we have entered into direct or indirect cooperation agreements may record various connection data relating to your browsing session: IP address, date and time of access, URL of the viewed resource, any originating web page (referrer), and the browser and operating system used. Such data can allow, only following any investigations by judicial authorities, the identification of the holder of the Internet connection. Under no circumstances can our staff independently identify visitors through such navigation data, and in no case will a link be made with other data possibly in our or third parties' possession.

Cookies

Our systems and/or those of third-party companies with which we have entered into direct or indirect cooperation agreements may transmit various types of cookies with different purposes to the user's device. For more information about cookies and their use by Wintag and third-party companies, please visit the dedicated cookie section at the bottom of this privacy notice.

Voluntarily Provided Data

In order to access certain services or features, users may be asked to fill in forms (such as contact forms) that require the provision of personal data. The collection of such data, where required, is a prerequisite for accessing the services offered on our website. Data sent by e-mail to contact any member of our staff is also considered "voluntarily provided data".

Purposes of Processing

We use navigation data, cookies and data voluntarily provided by users solely for the purposes for which they were collected. In some cases, such data may be communicated, processed and/or stored through third-party companies; please refer to the relevant section of this privacy notice for a list of these companies.

Log Files and Similar

For technical and security reasons and in order to comply with specific legal obligations, user connection data is recorded in text files stored on our server in order to monitor the correct functioning of the website and protect our systems from possible cyberattacks.

Website Access Statistics

We use an open-source analytics service (Matomo) solely for statistical purposes to measure website traffic. In order to protect users' privacy, we have activated IP address anonymisation, which prevents the service from recording this personal data in its system. The analytics system is managed by IKIweb Internet Media S.r.l. through its own servers located within the European Union.

Contact Forms

Personal data voluntarily provided through the relevant forms is used to process specific user requests automatically and/or manually (for example, to respond to contact requests submitted through the forms).

Third-Party Widgets

Some pages of the website may contain tools provided by third parties such as maps, videos, content taken from social networks and other remote functionalities. Such tools may interact with the user's system by recording connection data and/or by sending cookies. For the purposes of such processing, please refer to the privacy policies of the respective providers.

Legal Basis for Processing

For certain processing activities, the data subject's consent is not required. In particular, there is no possibility to give or withhold consent regarding the recording of log files, the measurement of website access statistics, and the sending of cookies strictly necessary for the technical and/or commercial operation of the website. In all these cases, there is a legitimate interest on the part of Wintag in the proper functioning of its online activity.

In all other circumstances, processing is based on the consent of the data subject, who is free to give or withhold it. The data subject's consent is essential for marketing purposes such as the sending of commercial information by e-mail or the acceptance of profiling cookies.

Data Subject's Consent

In all cases where consent is required for processing, it must be informed, free and unconditional. However, failure to provide data may result in the inability to obtain certain services or features.

For the validity of consent, the data subject must be at least 18 years of age. The use of all our services that involve voluntary data processing is therefore precluded to those who have not reached this age limit.

Processing Methods

Most of the data processed is handled using IT tools in a predominantly automated manner, with techniques and measures to minimise human intervention as much as possible. Manual access by authorised operators is provided only for the management of contact requests and in special and limited cases, usually at the request of the data subject directly or to comply with specific legal obligations.

Data Storage

• The data we process directly is stored within our systems hosted by Serverplan S.r.l., Via G. Leopardi, 22 – 03043 Cassino (FR) Italy – REA 156549 – VAT 02495250603.
• Analytics data is stored at the systems of IKIweb Internet Media S.r.l., Via Varzi 6, 21052 Busto Arsizio (VA) – VAT 02848390122.

Authorised Persons

Access to our systems is permitted, in addition to our own staff, to staff appointed by IKIweb Internet Media S.r.l. for the purpose of carrying out IT system update and maintenance tasks entrusted to them.

Security Measures

Appropriate security measures are observed to prevent data loss, tampering, unlawful use and unauthorised access. In order to ensure the confidentiality of communications to and from our IT systems, we have implemented the SSL protocol on all pages of the website.

Duration of Processing

Data is processed for the time necessary to provide the service requested by the user, or as required by the purposes described in this document. The user may at any time request the interruption of specific processing activities or the complete deletion of their data.

Some data may be retained even after deletion for the period required to fulfil legal obligations, provided it is not necessary to retain it longer to assert or defend a right or to comply with further legal obligations or authority orders.

Data Controller

The data controller is Astraplast s.r.l., registered at Via Milazzo 4, Fagnano Olona (VA), represented by director Mr Luigi Castiglioni. To request information regarding the processing of personal data, you may use the form on the contacts page.

Data Subject's Rights

The individuals to whom the above-mentioned personal data refers have the right to exercise their rights in accordance with the procedures and limits provided for by the applicable privacy regulations. In particular, the data subject is entitled to the following rights:

• Access: the data subject has the right to ask whether or not processing of data concerning them is taking place and, if so, to know such data.
• Rectification: the data subject may ask to rectify or supplement the data provided to us or in our possession, if inaccurate.
• Erasure: the data subject may ask for their data to be erased where it is no longer necessary for the purposes for which it was collected, upon withdrawal of consent, upon objection to processing, in the event of unlawful processing, or where there is a legal obligation to erase.
• Restriction: the data subject may request restriction of the processing of their personal data when one of the conditions set out in Art. 18 GDPR applies.
• Objection: the data subject may at any time object to the processing of their data carried out on the basis of our legitimate interest, unless there are our compelling legitimate grounds that override theirs.
• Portability: the data subject may ask to receive their data, or to have it transferred to another controller they designate, in a structured, commonly used and machine-readable format.

Furthermore, pursuant to Art. 7(3) GDPR, we inform you that you may at any time exercise your right to withdraw consent, without affecting the lawfulness of processing based on consent given beforehand.

To exercise these rights, report issues or request clarifications regarding the processing of your personal data, you may use the form available on the contacts page. If you believe you have not received an adequate and timely response to your privacy requests, you have the right to contact the competent authority.

Third-Party Companies

As mentioned several times within this privacy notice, the operation of this website also depends on the activity of third-party companies with which we have entered into direct or indirect cooperation agreements.

• Google, as a technology partner for various services such as maps, videos, etc.
  https://policies.google.com/technologies/partner-sites
• IKIweb Internet Media S.r.l., as a technology partner for maintenance and update of systems
  https://www.ikiweb.it/privacy/
• ServerPlan S.r.l., as hosting provider
  https://www.serverplan.com/about-us/privacy

---

General Information on Cookies

When you access this website, our system or one of our partners' systems may set or read cookies and/or other types of identifiers relating to the browser and/or device you are using.

A cookie is a small text file stored on the computer of the person viewing a website in order to record some information about the visit and to create a system for recognising the user on subsequent visits.

Purposes of Cookie Use

Wintag or its partners may use cookies or other types of identifiers for a number of reasons, including:

• to perform statistical analyses (analytics) regarding the use of the website and/or the services incorporated therein;
• to offer content relevant to the interests of visitors (only third-party cookies).

First-Party Cookies

Wintag does NOT use first-party profiling cookies: the only cookies generated and managed directly by this website are so-called technical cookies (which are used solely to correctly provide the services offered to the public). We also use a cookie to track the user's consent to the use of cookies.

List of Third-Party Cookies

• Google
  • How Google uses information from sites or apps that use its services
    https://policies.google.com/technologies/partner-sites

Disabling Cookies

It is important to note that rejecting all cookies could prevent you from using Wintag services that require you to log in with a username and password to access restricted areas.

Below are instructions for the most common browsers to carry out a personalised cookie configuration:

• Chrome
  https://support.google.com/chrome/answer/95647?hl=en
• Firefox
  https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
• Edge
  https://privacy.microsoft.com/en-us/windows-10-microsoft-edge-and-privacy
• Safari
  https://support.apple.com/en-gb/guide/safari/sfri11471/mac
• Opera
  https://www.opera.com/help/tutorials/security/cookies/