Privacy Policy

Types of Data Collected

Among the types of Personal Data that the website www.kozziplast.com collects, either directly or through third parties, are: email, first name, last name, Usage Data, Cookies, phone number, address, company name, country, city, billing address, and various other types of Data.

Complete details about each type of Personal Data collected are provided in the dedicated sections of this privacy policy or through specific explanatory texts displayed before the Data is collected.

Personal Data may be provided freely by the User or, in the case of Usage Data, collected automatically when using www.kozziplast.com.

Unless specified otherwise, all Data requested by www.kozziplast.com is mandatory, and failure to provide such Data may make it impossible for www.kozziplast.com to provide its Services. In cases where www.kozziplast.com specifically states that some Data is not mandatory, users are free to withhold such Data without any consequence for the availability or functioning of the Service.

Users who have doubts about which Personal Data is mandatory are encouraged to contact the Owner.

Any use of cookies – or other tracking tools – by www.kozziplast.com or by the owners of third-party services used by www.kozziplast.com will serve the purpose of providing the Services requested by the User, in addition to the other purposes described in this document and in the Cookie Policy.

Users are responsible for any Personal Data of third parties obtained, published, or shared through this Service (www.kozziplast.com) and confirm that they have the authorization from those third parties to provide the Data to the Owner.

Mode and Location of Data Processing

Processing Method

The Owner will take appropriate security measures to prevent unauthorized access, disclosure, alteration, or unauthorized destruction of Data.

The Owner is committed to implementing adequate physical, electronic, and managerial processes to safeguard and help prevent unauthorized access to personal information and to preserve Data security. These processes consider the sensitivity of the information collected, processed, and stored, as well as the current state of technology. The Owner follows generally accepted industry standards to protect personal information submitted both during transmission and after receipt, including the use of electronic safes and tokenization services from third-party service providers. However, no method of transmission over the Internet or mobile device, or method of online storage, can be considered 100% secure. Therefore, while the Owner may use commercially accepted means to protect personal information, it cannot guarantee its absolute security and subsequent use in a manner inconsistent with this Privacy Policy.

The Owner does not assume any responsibility for information disclosed as a result of transmission errors, unauthorized third-party access, or other causes outside of its direct control. Users are advised to act responsibly, as they also play an important role in protecting their information. Users should not share their username, password, or any other sensitive information related to their account with anyone. If the Owner receives instructions with a username and password, it will always assume that those instructions were previously altered.

Data processing is carried out using computers and/or qualified IT tools, following organizational procedures and means strictly related to the indicated purposes. In addition to the Owner, in some cases, the Data may be accessed by certain types of personnel involved with the operation of www.kozziplast.com (administration, sales, marketing, legal administration) or external parties (such as third-party technical service providers, hosting companies, IT companies, communication agencies) who may be appointed, when necessary, as Data Processors by the Owner. The updated list of these parties can be requested from the Owner at any time.

Legal Basis for Processing

The Owner may process Personal Data related to the User if one of the following conditions applies:

The users have given their consent for one or more specific purposes; Note: According to some legislations, the Owner may have permission to process Personal Data UNTIL the User objects to this action (“opt-out”),without relying on consent or any other legal basis. However, this does not apply when Personal Data processing is subject to European data protection laws.

The provision of Data is necessary for the performance of a contract with the User and/or any pre-contractual obligations of the same.

Processing is necessary to comply with a legal obligation to which the Owner is subject.

Processing is related to a task carried out in the public interest or in the exercise of an official authority vested in the Owner.

Processing is necessary for the purpose of legitimate interests pursued by the Owner or a third party.

In any case, the Owner will gladly cooperate to clarify the legal basis that applies to the processing, especially if the provision of Data is a legal or contractual requirement, or if it is necessary to enter into a contract.

Location

The data is processed at the operational headquarters of the Owners, and in any other locations where the parties involved in the processing are located.

Depending on the location of the User, data transfers may involve the transfer of the User's Data to a country other than their own. To learn more about the location of processing for such transferred Data, users can check the section containing details about the processing of Personal Data.

Users also have the right to be informed about the legal basis for transfers of Data to countries outside the European Union or to any international organizations governed by international public law or formed by two or more countries, such as the UN, and about the security measures taken by the Owner to protect their Data.

If such transfers occur, users can learn more by checking the relevant sections of this document or by asking the Owner using the contact information provided in the contact section.

Retention Period

Personal Data will be processed and stored for as long as necessary for the purposes for which it was collected.

Therefore:

• Personal Data collected for the purposes related to the execution of a contract between the Owner and the User will be kept until the contract is fully performed.
• Personal Data collected for the purposes related to the legitimate interests of the Owner will be kept for as long as necessary to fulfill those purposes. Users can obtain specific information about the legitimate interests pursued by the Owner within the relevant sections of this document or by contacting the Owner.

Once the retention period expires, Personal Data will be deleted. Therefore, the right to access, the right to delete, the right to correct, and the right to data portability cannot be enforced after the retention period has expired.

The Owner may have permission to retain Personal Data for a longer period if the User has given their consent for such processing, as long as that consent has not been withdrawn. Furthermore, the Owner may be required to retain Personal Data for a longer period whenever obligated to do so for the fulfillment of a legal obligation or to comply with a mandate from an authority.

Purposes of Processing

The Data related to the User is collected to allow the Owner to provide their Services, as well as for the following purposes:

Access to third-party service accounts

Contacting the User

Viewing content from external platforms

Traffic optimization and distribution

Tag management

Anti-spam protection

Remarketing and behavioral targeting

Registration and authentication

Contact management and messaging

Interaction with live chat platforms

Interaction with social networks and external platforms

Interaction with data collection platforms and other third parties

Heat mapping and session recording

Payment processing

Data transfer outside the EU

Statistics

Users may obtain additional detailed information about such processing purposes and about the specific Personal Data used for each purpose in the respective sections of this document.

Detailed Information on the Processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

Contacting the User

Mailing List or Newsletters (www.kozziplast.com)
By subscribing to the newsletter or marketing communications, the User's email address will be added to the contact list of those who may receive email messages containing commercial or promotional information about www.kozziplast.com. The email address may also be added to this list as a result of signing up for this service (www.kozziplast.com) or after making a purchase, with the User's consent.

Personal Data Collected: email and full name.

Contact Form (www.kozziplast.com)

By filling out the contact form with their details, users authorize www.kozziplast.com to use this information to respond to requests for information, quotes, or any other type of request as indicated by the form's title.

Personal Data Collected: email, full name, and phone number.

Job Applicants (www.kozziplast.com)

If the User's information is submitted through the www.kozziplast.com Service when applying for a position at the institution, the information will be used to consider the application. The Owner may retain this information indefinitely. This information may be shared with other companies to assess the User's qualifications for the position in question or other available positions, as well as third-party operators contracted to collect, maintain, and analyze job application submissions.

Statistics

The services in this section enable the Owner to monitor and analyze web traffic and may be used to track User  behavior.

Google Analytics (Google Inc.)

Google Analytics is a web analytics service provided by Google Inc. ("Google"). Google uses the collected data to track and examine the use of this service (www.kozziplast.com) to prepare reports on activities and share them with other Google services.

Google may use the collected data to contextualize and personalize ads on its own advertising network.

Personal Data Collected: Cookie and Usage Data.

Processing Location: USA – Privacy Policy – Opt Out. Privacy Shield participant.

Contact Management and Message Sending

These types of services allow for the management of the database of email, phone, or other contact information to communicate with the User.

These services can also be used to collect data regarding the date and time the User viewed the email. They may also be used to collect information about when the User interacted with the received email, such as when the User clicked on links included in the email.

Subscription of Newsletters

E-goi, Portuguese Plataform – an online marketing platform designed to manage contacts and create and manage marketing campaigns, which may include sending emails, postal messages and other mailings.

We collect from you only your email which will be available in our database to send it. 

MailChimp (The Rocket Science Group, LLC.)

MailChimp is an email address management and message-sending service provided by The Rocket Science Group, LLC.

Collected Personal Data: name and email.

Processing location: USA – Privacy Policy. Privacy Shield participant.

Tag Management

This type of service helps the Owner manage the tags or scripts required by www.kozziplast.com in a centralized manner. As a result, User Data flows through these services and there is a possibility of Data retention.

Google Tag Manager (Google LLC)

Google Tag Manager is a management service provided by Google LLC.

Collected Personal Data: Cookies and Usage Data.

Processing location: USA – Privacy Policy. Privacy Shield participant.

Interaction with Social Media Networks and External Platforms

These types of services allow interaction with social networks or other external platforms directly from the pages of this service (www.kozziplast.com). The interaction and information obtained by www.kozziplast.com are always subject to the User’s privacy settings on each social network. If a service that allows interaction with social networks is installed, it may collect traffic data from the pages where the service is installed, even when Users do not use them.

• Facebook;
• Instagram
• Linkedin
• Pinterest

ShareThis (ShareThis Inc.)

ShareThis is a service provided by ShareThis Inc. that displays a widget allowing interaction with social networks and external platforms, as well as sharing content from www.kozziplast.com.

Depending on the configuration, this service may display widgets belonging to third parties, such as social network managers where interactions are shared. In this case, the third parties providing the widget will also be informed about interactions and the Use of Data on the pages where this service is installed.

Collected Personal Data: Cookies and Usage Data.

Processing location: USA – Privacy Policy.

Payment Processing

Payment processing services allow www.kozziplast.com to process payments via credit card, bank transfer, or other means.

To ensure greater security, www.kozziplast.com only provides the necessary information to execute the transaction to the financial intermediaries processing the transaction.

Some of these services may also enable scheduled messages to be sent to the User of www.kozziplast.com, such as email-based invoices and other notifications.

PayPal (PayPal Inc.)

PayPal is a payment service provided by PayPal Inc., allowing users to make online payments.

Collected Personal Data: Various types of Data as specified in the service's privacy policy.

Processing location: See PayPal's Privacy Policy.

Anti-Spam Protection

These types of services analyze the traffic of this service (www.kozziplast.com),potentially containing Users' Personal Data, to filter out parts of the traffic, messages, and content recognized as SPAM.

Google reCAPTCHA (Google Inc.)

Google reCAPTCHA is a SPAM protection service provided by Google Inc.

The use of reCAPTCHA is subject to Google's privacy policy and terms of use.

Collected Personal Data: Cookies and Usage Data.

Processing location: USA – Privacy Policy. Participates in the Privacy Shield.

Registration and Authentication

By registering or authenticating, the User allows this service (www.kozziplast.com) to identify them and grant access to dedicated services.

Depending on the description below, registration and authentication services may be provided by third parties. In such cases, www.kozziplast.com may access certain Data stored by these third-party services for registration or identification purposes.

The Owner uses the information collected from and about the User for various purposes, including:

• Processing and responding to requests;
• Understanding user actions (visited services, preferred features, usage patterns, etc.),improving content and service features (e.g., personalizing content based on observed interests),processing and completing transactions, and making special offers;
• Managing the provided Services and diagnosing technical problems;
• Sending communications requested by the User and of interest to them;
• Generating and reviewing reports, conducting research on service usage and usage patterns;
• Providing customer support;
• Sending information and notifications about the User's account;
• Fulfilling obligations and defending rights under any contracts between the User and Indústria Transformadora de Plásticos, S.A., including payments and collections.

Direct Registration (www.kozziplast.com)

The User registers by filling out the registration form and providing Personal Data directly to www.kozziplast.com.

Collected Personal Data: City, date of birth, email, address, billing address, full name, phone number, country.

Data Transfer Outside the EU

The Owner is authorized to transfer Personal Data collected within the EU to third countries (i.e., any country outside the EU) only in accordance with a specific legal basis. Any such Data transfers will be based on one of the legal grounds described below. Users may contact the Owner to determine which legal basis applies to a specific service.

Data Transfer Abroad Based on Consent (www.kozziplast.com)

If this is the legal basis, Users' Personal Data will be transferred from the EU to third countries only if the User has explicitly authorized the transfer after being informed of the possible risks due to the absence of an adequacy decision and appropriate safeguards.

In such cases, the Owner will properly inform Users and obtain their explicit consent via the www.kozziplast.com service.

Collected Personal Data: Various types of Data.

Viewing Content from External Platforms

These services allow Users to view and interact with content hosted on external platforms directly from the pages of this service (www.kozziplast.com). If such a service is installed, it may collect web traffic data from the pages where it is present, even if Users do not use it.

Google Fonts (Google Inc.)

Google Fonts is a font visualization service provided by Google Inc., allowing www.kozziplast.com to incorporate this type of content into its pages.

Collected Personal Data: Usage Data and various types of Data as specified in the service’s privacy policy.

Processing location: USA – Privacy Policy. Participates in the Privacy Shield.

Google Maps Widget (Google Inc.)

Google Maps is a map visualization service provided by Google Inc., allowing www.kozziplast.com to incorporate this type of content into its pages.

Collected Personal Data:

Cookies and Usage Data.

Processing Location: USA – Privacy Policy. Participates in the Privacy Shield.

Users' Rights

Users may exercise specific rights regarding their Data processed by the Owner.

In particular, users have the right to:

Withdraw their consent at any time.
Users have the right to withdraw consent in cases where they have previously given consent for the processing of their Personal Data.

Object to data processing.
Users have the right to object to the processing of their Data if the processing is carried out on a legal basis other than their consent. Additional details are provided in the specific section below.

Access their Data.
Users have the right to know if their Data is being processed by the Owner, obtain disclosures about specific aspects of its processing, and receive a copy of the Data being processed.

Verify and request rectification.
Users have the right to verify the accuracy of their Data and request updates or corrections.

Restrict data processing.
Under certain circumstances, users have the right to restrict the processing of their Data for any purpose other than storage.

Request data deletion or removal.
Under certain circumstances, users have the right to request the deletion of their Personal Data from the Owner.

Receive their Data and have it transferred to another controller.
Users have the right to receive their Data in a structured, commonly used, and machine-readable format. If technically feasible, they can also request its transfer to another controller without any obstacles. This right applies if the Data is processed by automated means and is based on the User’s consent, a contract in which the User is a party, or pre-contractual obligations under the same agreement.

File a complaint.

Users have the right to lodge a complaint with the competent Data Protection Authority.

Details on the Right to Object to Processing

If Personal Data is processed for a public interest, in the exercise of an official authorization granted to the Owner, or for the legitimate interests pursued by the Owner, users may object to such processing by providing a reason related to their particular situation to justify the objection.

However, users should be aware that if their Personal Data is processed for direct marketing purposes, they can object at any time without providing any justification. Users may refer to the relevant sections of this document.

How to Exercise These Rights

Any requests to exercise user rights can be directed to the Owner using the contact details provided in this document. These requests are free of charge and will be handled by the Owner as soon as possible, and in all cases, within a period of less than one month.