Personal Data Processing Notice

Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR), Midiplast srl provides the following information on personal data processing carried out through www.midiplast.it.

Last update: 14/02/2026

1. Data Controller

The Data Controller is Midiplast srl, Via Sandro Pertini 32/34/36, 27010 Miradolo Terme (PV), Italy, VAT 02190570180, e-mail: info@midiplast.it.

2. Categories of personal data

The website may process the following categories:

  • browsing data (IP address, browser/device technical data, technical logs);
  • data voluntarily submitted through contact and product request forms (e.g. name, surname, company, e-mail, phone, message content);
  • data required for anti-spam protection via Google reCAPTCHA.

3. Purposes and legal basis

Data are processed for:

  • managing contact requests and commercial information requests (legal basis: pre-contractual measures requested by the data subject);
  • protecting the website against abuse and automated requests (legal basis: legitimate interest in system security);
  • complying with legal obligations and defending rights in legal proceedings (legal basis: legal obligation / legitimate interest).

4. Processing methods

Data are processed using electronic and organizational measures suitable to ensure security, integrity and confidentiality, by authorized personnel and appointed processors.

5. Data retention

Data are retained only for as long as necessary to achieve the stated purposes and, in any case:

  • contact/product request data: up to 24 months, unless longer retention is required for administrative or legal reasons;
  • technical/security logs: for periods consistent with security and operational continuity needs;
  • additional retention may apply when required by law or competent authority.

6. Recipients

Data may be processed by technical providers and partners supporting website and requested services (e.g. hosting, e-mail, anti-spam tools), appointed where required as Data Processors.

7. Transfers outside the EU

Some third-party services used by the website may involve transfers of data outside the EU (e.g. Google services). These transfers are carried out in accordance with GDPR safeguards.

8. Data subject rights

Data subjects may exercise rights under Articles 15-22 GDPR (access, rectification, erasure, restriction, objection, portability, withdrawal of consent where applicable) by writing to info@midiplast.it. Data subjects may also lodge a complaint with the competent data protection authority.

9. Third-party services actually used on this website

  • Google reCAPTCHA (spam/abuse protection on forms);
  • Google Maps (map display on contact page);
  • External social links (e.g. Facebook), activated only when the user clicks.

For more details on cookies, please read the Cookie Policy.