Privacy Policy
This notice describes how https://ramaplast.it (the "Site") processes the personal data of its users, pursuant to articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR").
Data controller
Ramaplast S.p.A., Strada dei Prati, 3/A, 15053 Castelnuovo Scrivia (AL), Italy, VAT no. IT01434370068.
Contact for any request about personal data: info@ramaplast.it.
Data processed, purposes and legal bases
The table shows, for each processing activity, which data is processed, the legal basis (art. 6 GDPR) and how long it is kept.
| Processing and purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Registration and reserved area. Creating the account, allowing access, saving favourite products and downloading catalogues. | First name, last name, email, phone (optional), password (stored in encrypted form), language, company, country, sector and type of business. | Performance of the service requested by the user (art. 6.1.b). | Until the account is deleted, which removes the profile, favourites and download history. |
| Quote requests. Answering requests sent from the reserved area. | Request details (product, quantity, notes) and profile data. | Pre-contractual measures requested by the user (art. 6.1.b). | The request is not stored by the Site: it is sent by email only to the staff in charge of handling it. If no business relationship follows it is deleted within 24 months of the last contact; if one does, it is kept for the duration of the relationship and the legal terms. |
| Contact form. Answering the requests for information sent by the user. | First name, last name, email, phone, receiving department, message and any attachment. | The user's request (art. 6.1.b) and legitimate interest in replying (art. 6.1.f). | The request is not stored by the Site: it is sent by email only to the staff in charge of replying. If no business relationship follows it is deleted within 24 months of the last contact; if one does, it is kept for the duration of the relationship and the legal terms. |
| Download history. Knowing which edition of each catalogue was downloaded by each registered user, knowing which catalogues and products are of interest and improving the contents of the Site. | User, date and document or product downloaded. | Legitimate interest of the Controller (art. 6.1.f). | Until the account is deleted, with no earlier time limit: it is needed to know which edition of each catalogue was downloaded. |
| Weekly sales report. Informing sales contacts of the activity of registered users (downloads and favourite products) to prepare possible commercial contacts relating to the products of interest. The report lists the actions taken; no scores or profiles are assigned and no automated decisions are made. | The registration data, excluding email and phone, and activity on the Site (downloads and favourite products, with the count of those in previous months). | Legitimate interest of the Controller (art. 6.1.f). Users can object at any time from their profile page. | Sales staff keep the report for 3 months from receipt, then delete it. |
| Newsletter. Sending informative and commercial communications about company and product news. | Email, first name, last name, company, language, user type, business type and sector. | Consent (art. 6.1.a), optional and revocable. | Until consent is withdrawn, using the unsubscribe link in every email or writing to the Controller. |
| Security and abuse prevention. Protecting forms from spam and bots, detecting abnormal access, notifying password changes. | IP address, browsing and device data, signals collected by Google reCAPTCHA, system logs. | Legitimate interest of the Controller in the security of the Site (art. 6.1.f). | For the time strictly necessary for the purpose. Technical server logs are kept for 60 days. |
| Statistics (Google Analytics 4). Analysing the use of the Site in aggregated form to improve it. | Usage data, browser and device information, session statistics, cookie identifiers. | Consent (art. 6.1.a), collected through the cookie banner. | As stated in the Cookie Policy. |
| Third-party content. Showing the map (Google Maps). | Usage data and technical identifiers, including the IP address. | Consent (art. 6.1.a), collected through the cookie banner. | Set by Google, see its privacy policy. |
| Consent register. Proving acceptance of the privacy policy and terms, consent to the newsletter, objection to the sales report and cookie choices. | User identifier or random browser identifier, type of choice, date, language and document version. The IP address is not recorded. | Duty to prove consent (arts. 5.2 and 7.1 GDPR) and legitimate interest (art. 6.1.f). | Cookie choices: 24 months from the choice. Other entries: for the time needed to prove the choice, within the limitation periods. They remain after the account is deleted, because the identifier is no longer linked to a person. |
| Legal obligations and defence of rights. Complying with legal obligations and requests from authorities, and protecting the Controller's rights in court. | The data strictly necessary among the above. | Legal obligation (art. 6.1.c) and legitimate interest (art. 6.1.f). | For the time required by law or by the duration of the dispute. |
Unless otherwise stated, the data requested in the forms is mandatory: if the user does not provide it, it may be impossible to provide the requested service. Optional data is marked as such. Users are responsible for any third-party personal data they enter in the Site.
Recipients of the data
Data is processed by authorised staff of the Controller (administration, sales, marketing, technical support) and by suppliers acting as data processors, including the hosting provider (OVHcloud), the newsletter service provider (Mailchimp, The Rocket Science Group LLC), Google (statistics, reCAPTCHA, maps; for reCAPTCHA Google acts as data processor under the Cloud Data Processing Addendum) and IT and email service providers. Data may be disclosed to public authorities where the law requires it. The updated list of processors is available on request to the Controller.
Transfers outside the European Economic Area
Some suppliers also process data in the United States: Mailchimp (The Rocket Science Group LLC, part of the Intuit group) and Google (Analytics, reCAPTCHA and Maps; the contract is with the European companies of the Google group, which rely on Google LLC). The transfer is based on the European Commission's adequacy decision of 10 July 2023 (EU-U.S. Data Privacy Framework), to which these suppliers adhere and, should that decision cease to apply, on the standard contractual clauses (Decision (EU) 2021/914) included in their respective data processing agreements. To obtain information or a copy of the safeguards, write to the Controller.
User rights
Within the limits set by law, the user has the right to:
- access their data and obtain a copy (art. 15);
- request rectification (art. 16) or erasure (art. 17);
- obtain restriction of processing (art. 18);
- receive their data in a structured format and transfer it to another controller (art. 20);
- object to processing based on legitimate interest (art. 21), including the sales report; objecting to direct marketing is always possible and free of charge;
- withdraw consent at any time, without affecting the lawfulness of the previous processing (art. 7.3);
- lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the authority of their own country.
To exercise these rights write to info@ramaplast.it. The request is free of charge and you will receive an answer within one month, extendable as provided by law. You can edit your profile data, delete your account and manage your objection to the sales report directly from your reserved area.
Cookies
The Site uses cookies and similar tools. For details and to change your choices see the Cookie Policy.
Changes to this notice
The Controller may change this notice at any time; the version in force and the date of the last change are shown on this page. If a change affects processing based on consent, the Controller collects consent again when necessary.
Last updated: 23 October 2026 · v1 · 221b9aee