Privacy Policy

Dear User,

Sofidel S.p.A. respects your privacy and protects your personal data.

Please find the policy on the protection of personal data (for brevity, referred to as the ‘Regulation’ or ‘GDPR” bezeichnet) über die Verarbeitung Ihrer personenbezogenen Daten, die Sie beim Surfen auf unseren Websites und/oder bei der Nutzung der darin enthaltenen Dienste und/oder bei der Teilnahme an spezifischen Aktivitäten angeben.

The general rules of data processing, the rules on cookies and how it is always possible for you to withdraw your consent to certain processing of your personal data are described below.

Your personal data will be processed by Sofidel in accordance with the principles of law and the Regulation.

Please note that processing of personal data means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

1. DATA CONTROLLER AND DATA PROTECTION OFFICER

The Data Controller is Sofidel S.p.A., with registered office in Via G. Lazzareschi no. 23 – 55016 Porcari (LU), Italy (hereinafter, ‘Data Controller” oder „Sofidel“), der unter folgender E-Mail-Adresse erreichbar ist: gdpr.holding@sofidel.com.

The Data Controller has appointed a “Data Protection Officer” or “DPO“) ernannt, der unter folgender Adresse erreichbar ist dpo.holding@sofidel.com.

2. CATEGORIES AND TYPES OF PERSONAL DATA PROCESSED

Through the use of Sofidel’s websites, including www.nicky.eu, www.nicky.ie, www.nickytissue.co.uk, www.nicky.us, www.cosynel.be, www.kittensoft.com, www.letrefle.fr, www.nalyspapier.com/be, www.softis.de, www.sopalin.fr, www.regina.eu, www.regina.uk.com, www.sofidelshop.com, www.hakle.de (nachstehend der Kürze halber als „Websites” bezeichnet), bzw. Teilnahme an spezifischen Aktivitäten, kann der Datenverantwortliche die folgenden personenbezogenen Daten erfassen und verarbeiten:

a. Navigation data
We refer to all those parameters relating your operating system and the computer environment you are using, including IP address, location (country), computer domain names, URI (Uniform Resource Identifier) addresses of the resources requested on the Websites, time of the requests, method used to send requests to the server, size of the file obtained in response to a request, numerical code indicating the status of the response given by the server (successful, error, etc.), and so on. This information is collected by the Websites and enables them to operate correctly. We inform you that this personal data is used by the Data Controller solely in order to obtain anonymous statistical information on use of the Websites, and to check that they function correctly and identify any malfunctions and/or abuses. This personal data is deleted immediately after processing, unless it is necessary to identify those responsible in the event of suspected cybercrimes against the Websites or third parties.

b. Data voluntarily provided by the user
We refer to the personal data you voluntarily provide, such as the data you enter in the information collection forms on the Sites, the data you provide when participating in online and/or offline events and/or contests promoted by Sofidel, or when registering for Sofidel’s newsletter, such as your first name, last name, city and/or province of residence, email address and/or telephone number, as well as the personal data you may provide us with in requests for information sent to the email addresses of the Controller’s customer service department published on the Sites.

c. Data processed as a result of services rendered online
Without prejudice to any specific information that may be available in the various sections of the Websites, this document is also intended to cover the processing of the data you voluntarily provide in order to receive services provided online. For example, we refer to the registration service and access to your personal area, where your personal data such as personal details and contact details are processed.

d. Cookies
Click here for the cookie policy.

3. PURPOSE OF PROCESSING

Your personal data will be processed, if necessary with your consent, for the following purposes, where applicable: a) allow you to navigate the Sites (including the management of security profiles) and to provide the services requested by you such as participation in prize competitions, the drawing of a prize as per the competition rules duly published by the Data Controller on the relevant site; b) respond to requests submitted by you using the appropriate forms available on the Sites or through the customer service email addresses published on the Sites c) with your consent, to send you promotional and marketing communications,, including newsletters, promotional offers, commercial initiatives, advertising material, direct sales and market research, on the products and services of the Data Controller and/or Business Partners, as well as invitations to events and initiatives organised by the Data Controller or by companies in the Group, by automated means (SMS, mms, email, automated call systems without operator, use of social networks, push notifications, Whatsapp, fax) and otherwise (paper mail, telephone with operator) d) with your consent, to analyse your purchasing choices and behavioural preferences, in order to better structure personalised communications and commercial proposals, to carry out general analyses for the purposes of strategic orientation and commercial intelligence and, in general, for profiling activities; e) for evaluation and statistical monitoring purposes: this purpose implies an analysis of aggregate information that does not relate to identified or identifiable natural persons and which, therefore, does not constitute personal data and does not in any way allow the Data Controller to trace your identity; f) to comply with any obligations provided for by applicable laws, regulations or Community legislation, or to comply with requests from the authorities; g) in the event that it is necessary to ascertain, exercise or defend a right in court.

4. LEGAL BASIS AND MANDATORY OR OPTIONAL NATURE OF THE PROCESSING

Die Rechtsgrundlage für die Verarbeitung personenbezogener Daten für die Zwecke der Buchstaben a) und b) ist Art. 6 Abs. 1 Buchstabe b) DSGVO, da die Verarbeitung für die Erbringung der von Ihnen angeforderten Dienstleistungen erforderlich ist. Die Bereitstellung Ihrer personenbezogenen Daten für diese Zwecke ist fakultativ, aber eine Nichtbereitstellung würde es Ihnen unmöglich machen, die von Ihnen angeforderten Dienstleistungen in Anspruch zu nehmen. Die Verarbeitung für die unter den Buchstaben c) und d) beschriebenen Marketing- und Profilingzwecke beruht auf Ihrer Einwilligung gemäß Art. 6 Abs. 1 Buchstabe a). Ihre Zustimmung ist jederzeit widerrufbar. Die Angabe Ihrer personenbezogenen Daten für diese Zwecke ist daher völlig freiwillig und beeinträchtigt nicht die Nutzung der anderen von den Websites angebotenen Dienste. Wenn Sie der Verarbeitung Ihrer Daten zu Marketing- oder Profilingzwecken widersprechen möchten, können Sie sich jederzeit an den Datenverantwortlichen unter den im Abschnitt „Kontakt” dieses Informationsblatts angegebenen Kontaktdaten wenden. Abschließend sei darauf hingewiesen, dass die unter Buchstabe e) genannte Verarbeitung, da sie keine personenbezogenen Daten betrifft, nicht in den Anwendungsbereich der Rechtsvorschriften über den Schutz personenbezogener Daten fällt und daher vom Datenverantwortlichen frei durchgeführt werden kann. Bei dem unter f) genannten Zweck handelt es sich um eine rechtmäßige Verarbeitung personenbezogener Daten im Sinne von Art. 6 Abs. 1 Buchstabe c) DSGVO. Die Verarbeitung zu den unter g) genannten Zwecken beruht auf dem berechtigten Interesse des Datenverantwortlichen im Sinne von Art. 6 Abs. 1 Buchstabe e) DSGVO.

5. DATA PROCESSING METHODS

In relation to the aforementioned purposes and related legal bases, the processing of your personal data is performed by means of manual, computer and automated tools with logic strictly related to the purposes and in such a way as to ensure the security and confidentiality of the data, in addition to compliance with specific obligations under the law.

6. RECIPIENTS OF PERSONAL DATA

Your personal data may be shared, for the purposes indicated, with the following recipients:
• Personen, die typischerweise als Auftragsverarbeiter gemäß Artikel 28 DSGVO im Auftrag des Datenverantwortlichen handeln, im Einzelnen: Personen, die mit der Erbringung von Dienstleistungen betraut sind (z. B. Hosting-Provider oder Anbieter von E-Mail-Plattformen); Personen, die mit der technischen Wartung beauftragt sind (einschließlich der Wartung von Netzwerkausrüstung und elektronischen Kommunikationsnetzen), usw. Die vollständige Liste der Auftragsverarbeiter kann auf schriftliche Anfrage an den Datenverantwortlichen unter den im Abschnitt „Kontakte” dieser Datenschutzerklärung angegebenen Adressen eingesehen werden.
• Persons authorised by the Data Controller to process personal data necessary to carry out activities strictly related to the provision of services, who have undertaken to maintain confidentiality or are under an appropriate legal obligation to do so.
• Persons, entities or authorities to whom it is mandatory to communicate your personal data under provisions of law or orders from the authorities;

Your data may be accessible to the other companies of the Sofidel Group for the same purposes as above and/or for administrative-accounting purposes pursuant to Article 6.1.f) and Recitals 47 and 48 of the Regulation. It is understood that your personal data will not be disclosed to third parties for them to use for their own promotional purposes and will not be disseminated in any way.

7. TRANSFERS OF PERSONAL DATA

In general, your data will not be transferred outside the European Union. If some of the third parties referred to in Section 6 above are located in countries outside the European Union, the transfer of your personal data to such parties will be carried out alternatively on the basis of:

the presence of adequacy decisions issued by the European Commission;
dem vorherigen Abschluss spezieller Vereinbarungen zwischen Sofidel und diesen Einrichtungen, die angemessene Garantien für den Schutz Ihrer personenbezogenen Daten enthalten (so genannte „Standardvertragsklauseln”, wie sie von der Europäischen Kommission zur Verfügung gestellt werden);
in the absence of the above, your consent, which will be expressly requested on that occasion and prior to the transfer, subject to prior information on the level of protection of your personal data in the country of destination of the data transfer.

Weitere Informationen erhalten Sie, wenn Sie eine schriftliche Anfrage an den Datenverantwortlichen unter den im Abschnitt „Kontakt” dieser Mitteilung angegebenen Adressen richten.

8. RETENTION OF PERSONAL DATA

The personal data processed for the purposes referred to in sections a) and b) will be kept for the time strictly necessary to achieve those purposes.
For the purposes referred to in sections c) and d), your personal data will instead be processed for the time strictly necessary to achieve the purposes for which they were collected, respecting the principle of minimisation referred to in Article 5(1)(c) of the GDPR and, in any case, until your consent is revoked or for a maximum period of 60 months from the collection. Upon withdrawal of consent, the data processed for the purposes of points c) and d) above will be permanently deleted or anonymised. In general, the Data Controller reserves the right to retain your data for as long as necessary to comply with any legal obligation to which it is subject or to meet any defensive needs. This is without prejudice to the possibility for the Data Controller to retain your personal data for the period of time provided for and permitted by law to protect its interests (Art. 2947 of the Civil Code).
Weitere Informationen über den Zeitraum der Datenspeicherung und die Kriterien zur Festlegung dieses Zeitraums können durch eine schriftliche Anfrage an den Datenverantwortlichen unter den im Abschnitt „Kontakte” dieser Datenschutzerklärung angegebenen Kontaktdaten angefordert werden.

9. RIGHTS OF THE DATA SUBJECT

We hereby inform you that you are entitled to exercise the following rights in relation to the personal data that is the subject of this policy:
Right of access and rectification (article 15 and 16 of the EU Regulation);
Right to data deletion (Article 17 of the EU Regulation);
Right to restriction of processing (Article 18 of the EU Regulation);
Right to data portability (Article 20 of the EU Regulation);
Right to object(Article 21 of the EU Regulation);
Right to lodge a complaint with the Supervisory Authority (Data Protection Authority) (Article 77 of the EU Regulation);
Right to withdraw the consent given (Article 13 of the EU Regulation).

Darüber hinaus können Sie einen Antrag auf Widerspruch gegen die Verarbeitung Ihrer personenbezogenen Daten stellen, in dem Sie die Gründe für den Widerspruch darlegen. Wir informieren Sie außerdem darüber, dass Sie das Recht haben, jederzeit und ohne Angabe von Gründen dem Profiling und der Versendung von Direktwerbung durch automatisierte Mittel (z. B. SMS, MMS, E-Mail, automatische Anrufsysteme ohne Vermittlung, Nutzung sozialer Netzwerke, Push-Benachrichtigungen, Whatsapp, Fax) und nicht automatisierte Mittel (Papierpost, Telefon mit Vermittlung) zu widersprechen. Darüber hinaus kann dieses Recht, im Bezug auf Direktmarketing, auch teilweise ausgeübt werden, d. h. dass von Ihnen z. B. nur der Versand von Werbemitteilungen mit automatisierten Instrumenten abgelehnt wird. Anträge sind schriftlich an den Datenverantwortlichen unter den im Abschnitt „Kontakt” dieser Datenschutzerklärung angegebenen Adressen zu richten.
In any event, you are always entitled to lodge a complaint with the competent supervisory authority (Italian Data Protection Authority), pursuant to Article 77 of the Regulation, if you believe that the processing of your data is contrary to the legislation in force, or to take legal action pursuant to Article 79 of the Regulation.

10. CHANGES

The Data Controller reserves the right to modify or simply update the content, in part or in full, also as a result of changes in the applicable legislation. The Data Controller therefore invites you to check this section regularly to stay informed about the latest and most updated version of the privacy policy and thus be kept always up to date on the data collected and how the Data Controller uses it.

11. CONTACTS

To exercise the above rights or for any other request, please write to the Data Controller at gdpr.holding@sofidel.com.

You can also contact the Data Protection Officer at the Data Controller’s head office at the above address and/or via e-mail at dpo.holding@sofidel.com.

Contact form

Your opinion is important to us! Do you
have any questions or suggestions?
Get in touch with us.

Write an email to our
info.sofidelgermany@sofidel.com or
use our contact form.

Would you like to receive more invitations to participate in competitions, exclusive discounts and customised offers? By consenting to the processing of your data, you will receive many exclusive benefits: discount vouchers, participation in competitions, personalised communications, preview tests of new products and invitations to our events. You may cancel your registration at any time.
Read the Privacy Policy.

I CONSENT. Yes, I would like to receive special offers, discounts and to be informed of promotions and news (Article 3, c of the Privacy Policy).]

I CONSENT. Yes, I consent to the processing of my personal data for the purpose of analysing my purchasing choices and behavioural preferences, in order to receive commercial offers and personalised communications, and in general for profiling activities. (Article 3, d of the Privacy Policy)]

Read the Privacy Policy.