E-COMMERCE PRIVACY POLICY

E-COMMERCE PRIVACY POLICY

Pursuant to Art. 13 of the EU General Data Protection Regulation 679/2016 (the "Regulation")

 

  • Identity and contact details of the data controller

The data controller within the meaning of EU Regulation 679/2016 General Data Protection Regulation (the "Regulation") of the e-commerce of the Web site https://www.thepackstock.eu (the “Site”) is the company Berlin Packaging Iberia Slu. ("(“BP Iberia”, “we”, “our”") with registered office at in Carretera Córdoba Málaga, km 44, 14550 Montilla - Cordoba (España), tax code and VAT no. B96201801, tel. +34 955 67 50 06, e-mail privacy.eu@berlinpackaging.com .

 

  • Purpose of the processing of your data:

The data you are providing us by completing the purchase process on the Site are necessary for:

  • complete the sale of the products you have selected and fulfil the contract concluded with you, as well as exercise our related rights, including in court;
  • comply with legal obligations, regulations and EU legislation relating to your purchase (e.g. tax, accounting, anti-money laundering, anti-fraud);
  • to manage the services connected to your purchase also in the post-sales phase (e.g. customer service);
  • to send by e-mail commercial communications, advertising and promotional material for the direct sale of its products similar to those purchased by you, without your consent, in accordance with the Spanish Law on Information Society Services and Electronic Commerce 34/2002 ('LSSI') ('Soft Spam');

 

The legal basis for the processing of your data will be the execution of the sales contract established with you and of the related services and the fulfilment of the relative legal obligations pursuant to Article 6, paragraph 1, letters b) and c) of the Regulations.

 

  • Your consent

The processing of your data will take place without the need for your consent, pursuant to Article 6, paragraph 1, letters b) and c) of the Regulation. However, in order to receive commercial offers and discounts eventually related to your purchasing preferences, it will be necessary to give your consent to profiling during the activation of your account pursuant to Art. 6 letter a) of the Regulation. You will not be able to benefit from a dedicated discount without consenting to profiling, as we will not be authorised to screen your preferences.

 

  • Optional supply of personal data

We ask you to provide all the data requested as " mandatory " (generally indicated with *) because it is necessary for the management of your purchases and the services connected to them (e.g. delivery); if you do not fill in all or incompletely, your purchases cannot be completed. Failure to fill in the data indicated as 'optional' will have no consequences.

If you provide data of third parties (e.g. your family members, other customers or potential customers), you must ensure that these third parties are informed and have consented to the use of the data as described in this policy.

 

  • Method of processing your data

Your data will mainly be processed by computer in order to manage your purchases. In addition, the processing will be carried out in compliance with current legislation and, in any case, in such a way as to guarantee its security and confidentiality and to prevent its unauthorised disclosure or use, alteration or destruction.

 

Your data will not be disclosed or passed on to third parties for remuneration. In order to manage your purchases, the personal data entered in the fields of the online shop will be disclosed (limited to their respective sphere of competence) to persons authorised to process the data in the marketing, purchasing, finance and legal departments. The data may also be shared with our business partners as well as with companies that provide us with services [1] useful for managing your purchases and related services.

 

Your data may be processed not only by BP IBERIA but also by its European parent company Berlin Packaging Italy S.p.A. for specific marketing activities planned by the same.

 

  • Period of data retention

Your data will be processed for the time necessary for the management of your purchases and related services (e.g. Customer Service), as well as - limited to the necessary data - for the time required to comply with legal obligations regarding tax and accounting matters [2], after which the data will be deleted or made anonymous.

 

  • Transfer of data outside the European Union

 

To allow us to properly manage our Site and in particular our e-commerce service, your personal data may be transferred to countries outside the European Union where the parent company Berlin Packaging L.L.C. is located and where the servers hosting the group's CRM (customer relationship management) system are physically located.

 

The applicable legislation provides that your specific consent to the transfer to third countries is not required as the transfer is made on the basis of the adoption of adequate safeguards as per articles 46 and 47 of the Regulation, such as the adoption of standard contractual clauses approved by the European Commission and on the basis of the Data Privacy Framework Program ("DPF").

 

  • What are your rights

By means of a communication to be sent to mailto:privacy.eu@berlinpackaging.com you may at any time exercise your rights [3] as set out in Articles 15 to 22 of the Regulation, including knowing what data we are processing, how and for what purposes we use it, modify the data you have provided us with or delete it, ask us to restrict the use of your data, request to receive or transmit your data to another data controller.

 

  • To Whom You May Complain

We remind you that, if you consider that the processing of your personal data violates the provisions of the Regulation, you may always lodge a complaint with the Personal Data Protection Authority (www.aepdp.es), or, if different, with the Data Protection Authority of the Member State in which you habitually reside or work or of the place where the alleged violation occurred.

 

 

 

Footnotes:

[1] Your data provided for contractual purposes and for the execution of pre-contractual measures shall be stored for as long as necessary to fulfil the obligations towards you in connection with the business relationship and in any event no longer than ten (10) years after the conclusion of the contractual relationship.

 

Should you decide to proceed with purchases, you will have to create your customer account by registering in the My Account section, and your data will be processed as long as your account is active. You may close your account at any time and your request will be handled immediately or, in the case of a pending purchase order, immediately after it has been executed. Should your account remain inactive for three (3) years, BP IBERIA will contact you to find out whether you wish to maintain or close your account. If you do not wish to keep your account active, it will be closed and your data deleted.

 

Your purchase details will, however, be processed anonymously for analysis or promotional purposes.

 

Your bank details are only processed and stored securely by the operator of the payment service you have chosen (Paypal, Bank Transfer, Shopify Payments) for the time stipulated by national law.

 

[2] Your data may be processed by the company managing the Site only for the proper functioning of the Site. Furthermore, your personal data will be communicated, as external data processors, to:

 

  • payment management companies;
  • product shipping and delivery companies;
  • legal, tax and audit consultants
  • business partners
  • newsletter operator (only with your express consent)

 

[3] Articles 15 to 22 of the Regulation recognise specific rights including:

  • obtain confirmation as to whether or not personal data concerning you are being processed;
  • to obtain access to your personal data and to the information indicated in Article 15 of the Regulation
  • obtain the rectification of inaccurate personal data concerning you without undue delay or the integration of incomplete personal data
  • obtain the deletion of personal data concerning you without undue delay;
  • obtain the restriction of the processing of personal data concerning you;
  • to be informed of any rectification or erasure or restriction of processing of personal data concerning you;
  • receive or transmit to another data controller in a structured, commonly used and machine-readable format the personal data concerning you;
  • object at any time, on grounds relating to his/her particular situation, to the processing of personal data concerning him/her.