Privacy Policy

Last updated: 19 October 2026

1. Introduction

IMPIANTI NOVOPAC SRL (“Novopac”, “we”, “us” or “our”) is committed to protecting the privacy and personal data of visitors and users of its website, https://novopac.it (the “Website”).

This Privacy Policy explains how we collect, use, store, protect and process personal data when you visit our Website, contact us or interact with our online services.

We process personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, or “GDPR”), applicable Italian data protection legislation, including Legislative Decree No. 196/2003 as amended, and other applicable privacy and electronic communications regulations.

2. Data Controller

The Data Controller responsible for processing personal data collected through this Website is:

IMPIANTI NOVOPAC SRL

  • Registered office: Via dell’Automobile, 41, Zona Ind. D3, 15121 Alessandria (AL), Italy
  • Italian Tax Code and VAT Number: 00962900064
  • Telephone: +39 0131 242111
  • Email: info@novopac.it
  • Website: https://novopac.it

For any questions concerning this Privacy Policy or the processing of your personal data, you may contact us at info@novopac.it.

3. Categories of Personal Data Collected

We collect and process personal data that you voluntarily provide or that is generated when you interact with our Website.

3.1 Data provided through the contact form

When you complete and submit our contact form, we may collect the following information:

  • Name: to identify and address you.
  • Company (optional): to identify the organization you represent.
  • Email address: to respond to your inquiry.
  • Country: to understand your geographical location and direct your inquiry appropriately.
  • Message: to understand and respond to your request, question or business inquiry.

We request only the information reasonably necessary to manage your communication.

Please do not include sensitive personal data, such as health information, religious beliefs or other special categories of personal data, in the message field unless strictly necessary.

3.2 Technical and browsing data

When you access the Website, certain technical information may be processed automatically by our hosting infrastructure and related technical services.

Such information may include:

  • IP address.
  • Browser type and version.
  • Device and operating system information.
  • Date and time of access.
  • Requested pages and resources.
  • Referring website addresses.
  • Technical connection data.
  • Server logs and diagnostic information.

This information is processed primarily to ensure the proper functioning, security, maintenance and performance of the Website.

3.3 Website analytics data

We use Google Analytics to understand how visitors interact with our Website and to improve its content, usability and performance.

Depending on the applicable settings and the consent provided, analytics information may include:

  • Pages visited.
  • Approximate geographical location.
  • Session duration.
  • Website interactions and navigation patterns.
  • Device and browser characteristics.
  • Traffic sources.
  • Aggregated usage statistics.

Google Analytics 4 does not log or store individual IP addresses.

Analytics technologies are managed in accordance with applicable consent requirements, as further explained in Section 7.

4. Purposes and Legal Bases for Processing

We process personal data only for specified, legitimate purposes and where an appropriate legal basis exists under Article 6 of the GDPR.

4.1 Responding to contact requests

Purpose: To receive, review and respond to inquiries submitted through our contact form, including requests for product information, technical information, commercial communications and potential business cooperation.

Legal basis:

  • Article 6(1)(b) GDPR, where processing is necessary to take steps at your request before entering into a contract.
  • Article 6(1)(f) GDPR, where processing is necessary for our legitimate interest in managing ordinary business correspondence and responding to general inquiries.

Our legitimate interest is to maintain effective communication with visitors, customers and prospective business partners.

4.2 Website operation and security

Purpose: To operate, maintain, protect and troubleshoot the Website, prevent unauthorized access, detect malicious activities and ensure technical reliability.

Legal basis: Article 6(1)(f) GDPR — our legitimate interest in maintaining a secure and functional Website.

Where specific processing is required by applicable law, Article 6(1)(c) GDPR may also apply.

4.3 Website analytics and performance improvement

Purpose: To analyze Website traffic, understand visitor interactions and improve Website content, navigation and performance.

Legal basis: Article 6(1)(a) GDPR — your consent, where required for the use of analytics cookies and related tracking technologies.

You may refuse or withdraw your consent at any time through the Website’s cookie preference management tools.

4.4 Compliance with legal obligations

Purpose: To comply with applicable legal requirements, respond to lawful requests from competent authorities and meet applicable regulatory obligations.

Legal basis: Article 6(1)(c) GDPR — compliance with a legal obligation.

4.5 Establishment, exercise or defense of legal claims

Purpose: To protect our legal rights, manage disputes and establish, exercise or defend legal claims where necessary.

Legal basis: Article 6(1)(f) GDPR — our legitimate interest in protecting our legal rights and interests.

5. Nature of Data Provision

Providing personal data through our contact form is voluntary.

However, certain fields, including your name, email address, country and message, are required to submit the form and allow us to process your inquiry.

Failure to provide the required information may prevent us from receiving or responding to your request.

Providing your company name is optional.

Providing personal data through the contact form does not create a contractual obligation or automatically subscribe you to marketing communications.

6. How We Process and Protect Personal Data

Personal data may be processed using electronic and computerized systems by personnel authorized to perform relevant activities.

We adopt appropriate technical and organizational measures designed to protect personal data against unauthorized access, accidental loss, destruction, alteration, disclosure and unlawful processing.

Such measures may include, as appropriate:

  • Secure access controls and authentication procedures.
  • Restricted access to personal data.
  • Website and server security measures.
  • Software updates and maintenance.
  • Data backup and recovery procedures.
  • Secure communication protocols.
  • Monitoring and prevention of unauthorized access.

These measures are reviewed and adapted where appropriate, taking into account the nature of the processing and the associated risks.

Although we take reasonable steps to safeguard personal information, no method of transmission or electronic storage can guarantee absolute security.

7. Cookies and Similar Technologies

Our Website uses cookies and similar technologies to support its operation and, subject to applicable consent requirements, analyze Website usage.

Cookies are small text files stored on your device when you visit a website.

Cookies may be classified as:

Strictly necessary cookies: Required for essential Website functionality, security and the management of privacy preferences. These cookies generally do not require consent where they are strictly necessary for the requested service.

Analytics cookies: Used to collect information about how visitors interact with the Website and help us improve its performance.

We use Complianz to manage cookie information and user consent preferences.

Where consent is required, non-essential analytics cookies and related tracking technologies are subject to your consent choices.

You can accept, reject or modify your preferences using the cookie banner or the cookie preference management tool available on the Website.

You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.

For detailed information about the cookies used, their purposes, providers and retention periods, please refer to our separate Cookie Policy, available on the Website.

8. Google Analytics

Our Website uses Google Analytics, a web analytics service provided by Google.

Google Analytics helps us understand how visitors use the Website by providing statistical information about traffic, interactions and Website performance.

Google Analytics 4 does not log or store individual IP addresses. IP-related information may be processed temporarily by Google for purposes such as deriving approximate geographical information.

Google Analytics may use cookies and other identifiers to measure Website interactions, depending on the applicable configuration and your consent preferences.

The information collected may be processed by Google in accordance with its applicable data processing terms and privacy documentation.

We use Google Analytics for Website measurement and improvement purposes.

Where required by applicable law, analytics tracking is subject to your prior consent, which can be managed through the Complianz consent management system.

For further information about Google’s data processing practices, please visit:

https://policies.google.com/privacy

You may also consult Google’s information about Analytics:

https://support.google.com/analytics/

9. Recipients and Categories of Data Recipients

Personal data may be accessed or processed by the following categories of recipients, where necessary for the purposes described in this Privacy Policy:

  • Authorized personnel of IMPIANTI NOVOPAC SRL.
  • Website hosting and infrastructure providers.
  • IT maintenance and technical support providers.
  • Email and communication service providers.
  • Website analytics service providers, including Google.
  • Professional advisers, where necessary for legal or compliance purposes.
  • Public authorities or competent bodies where disclosure is required by law.

External service providers acting as data processors are required, where applicable, to process personal data in accordance with Article 28 GDPR and appropriate contractual obligations.

We do not sell personal data collected through the Website.

We do not disclose contact form information to third parties for their independent marketing purposes.

10. International Data Transfers

Certain third-party service providers used in connection with the Website, including Google, may process or access personal data outside the European Economic Area (EEA).

Where personal data is transferred to countries outside the EEA, such transfers must comply with Chapter V of the GDPR.

Depending on the recipient, destination and applicable circumstances, lawful transfer mechanisms may include:

  • An adequacy decision adopted by the European Commission under Article 45 GDPR.
  • Standard Contractual Clauses approved by the European Commission under Article 46 GDPR.
  • Other appropriate safeguards or lawful transfer mechanisms recognized under the GDPR.

Where relevant, transfers to certified organizations in the United States may rely on the EU–US Data Privacy Framework, provided the recipient is covered by a valid applicable certification and the relevant adequacy decision.

Where necessary, supplementary safeguards will be considered in accordance with applicable data protection requirements.

You may contact us at info@novopac.it to request further information about applicable international data transfer safeguards.

11. Personal Data Retention

We retain personal data only for as long as reasonably necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law.

Retention periods are determined according to the nature of the information, the purpose of processing, applicable legal obligations and the need to establish, exercise or defend legal claims.

In particular:

Contact form inquiries: Personal data submitted through the contact form is retained for the period necessary to manage and respond to the inquiry and any related follow-up communications. Where correspondence develops into a business or contractual relationship, relevant information may be retained for the applicable contractual or legal retention period.

Technical and security logs: Technical data is retained for the period necessary for security, maintenance, troubleshooting and the investigation of potential incidents, subject to applicable retention policies.

Google Analytics data: Analytics information is retained in accordance with the retention settings configured in the relevant Google Analytics property and Google’s applicable data processing terms.

Legal and contractual records: Where personal data forms part of records subject to statutory retention requirements, it may be retained for the applicable period required by law.

Once personal data is no longer necessary for the relevant purposes, it will be deleted, anonymized or otherwise handled in accordance with applicable legal requirements.

12. Rights of Data Subjects

Under the GDPR, you may exercise the following rights, subject to the conditions and limitations established by applicable law:

Right of access (Article 15): You may request confirmation of whether we process your personal data and obtain access to that information.

Right to rectification (Article 16): You may request correction of inaccurate personal data or completion of incomplete information.

Right to erasure (Article 17): You may request deletion of your personal data where the legal requirements are met.

Right to restriction of processing (Article 18): You may request that processing be restricted in certain circumstances.

Right to data portability (Article 20): Where applicable, you may request to receive personal data you have provided in a structured, commonly used and machine-readable format and transmit it to another controller.

Right to object (Article 21): You may object to processing based on legitimate interests, subject to the conditions established by the GDPR.

Right to withdraw consent (Article 7): Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Rights relating to automated decision-making (Article 22): You have rights concerning decisions based solely on automated processing, including profiling, where the relevant legal conditions apply.

To exercise any of these rights, please contact:

info@novopac.it

We will respond to your request without undue delay and generally within one month of receipt, in accordance with Article 12 GDPR.

Where permitted by law, this period may be extended by a further two months depending on the complexity and number of requests. In such cases, we will inform you of the extension and the reasons for it.

We may request additional information where reasonably necessary to verify your identity.

13. Right to Lodge a Complaint

If you believe that the processing of your personal data infringes applicable data protection legislation, you have the right to lodge a complaint with a competent supervisory authority.

In Italy, the competent supervisory authority is:

Garante per la Protezione dei Dati Personali

Website: https://www.garanteprivacy.it

Email: garante@gpdp.it

You may also lodge a complaint with the competent supervisory authority in the EU Member State of your habitual residence, place of work or place of the alleged infringement, where applicable.

We encourage you to contact us first at info@novopac.it so that we can address any concerns regarding the processing of your personal data.

14. Automated Decision-Making and Profiling

We do not use personal data submitted through the Website’s contact form to make decisions based solely on automated processing that produce legal effects or similarly significant effects on individuals within the meaning of Article 22 GDPR.

Website analytics may involve statistical analysis of visitor interactions, but we do not use contact form submissions for automated individual decision-making.

15. Marketing Communications

Submitting a contact form inquiry does not automatically enroll you in a newsletter or marketing mailing list.

We do not use contact form submissions to send unsolicited promotional newsletters.

If additional marketing services or subscription features are introduced in the future, we will provide the relevant privacy information and obtain consent where required by applicable law.

Ordinary communications necessary to respond to your inquiry or manage a requested business relationship are not treated as newsletter subscriptions.

16. Links to Third-Party Websites

Our Website may contain links to third-party websites or external resources.

These websites are operated independently and may have their own privacy policies and data processing practices.

We are not responsible for the privacy practices or content of third-party websites.

We recommend reviewing the privacy policies of any external websites before providing personal information.

17. Children’s Privacy

Our Website is intended primarily for businesses, professionals and individuals seeking information about our products and services.

It is not specifically directed at children.

We do not knowingly collect personal data from children through the Website for marketing or profiling purposes.

If we become aware that personal data relating to a child has been collected unlawfully, we will take appropriate measures in accordance with applicable legislation.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our Website, data processing activities, service providers or applicable legal requirements.

Any updated version will be published on this page, together with the revised “Last updated” date.

Where required by law, we will provide additional notice or obtain renewed consent before implementing material changes affecting the processing of personal data.

We encourage visitors to review this Privacy Policy periodically.

19. Contact Information

For any questions, requests or concerns regarding this Privacy Policy or the processing of your personal data, please contact:

IMPIANTI NOVOPAC SRL

Via dell’Automobile, 41
Zona Ind. D3
15121 Alessandria (AL)
Italy

Telephone: +39 0131 242111
Email: info@novopac.it
Website: https://novopac.it

Italian Tax Code and VAT Number: 00962900064

Last updated: 19 October 2026