Privacy Policy

PRIVACY POLICY ON THE PROCESSING OF PERSONAL DATA

of users consulting the website www.cartierecarrara.com Article 13 of Regulation (EU) 2016/679 Last updated: 05/2022

Premise

Pursuant to EU Regulation 2016/679 (hereinafter also “GDPR”) and national legislation (Legislative Decree 196/2003, as amended by Legislative Decree 101/2018), this page describes the methods of processing the personal data of users who consult the website accessible electronically at www.cartierecarrara.com (hereinafter also the “Site”).

This information does not concern other sites, pages, or online services reachable via hypertext links possibly published on the site, which, although referring to brands attributable to the business areas of Cartiere Carrara S.p.A. (who controls and is responsible for their content), are regulated separately.

Data Controller

The Data Controller of personal data relating to identified or identifiable natural persons who may be processed following consultation of the Site is Cartiere Carrara S.p.A. (hereinafter also “Cartiere Carrara” or the “Controller”), with registered office in Viale Spartaco Lavagnini, n. 41, 50129 Florence, and Executive Offices in Via Tazio Nuvolari, n. 18/A, 55061 Capannori (Lucca) – email: info@cartierecarrara.com – Certified Email (Pec): amministrazione@pec.cartierecarrara.com – Tel. +39 0583985101.

Data Protection Officer

The Data Protection Officer can be reached at the following address: Cartiere Carrara S.p.A. c.a. Data Protection Officer, Via Tazio Nuvolari, 18/A, 55061 Capannori (Lucca) – email: dpo@cartierecarrara.com

Purpose and Legal Basis of Processing. Personal Data Retention Period

Cartiere Carrara will process the personal data of users who consult the Site for the following purposes and on the following legal bases:

a) To respond to user requests for product information For this purpose, Cartiere Carrara will process the following personal data concerning the user: name, surname, email, telephone, city. The legal basis for this processing is the performance of pre-contractual measures adopted at the request of the data subject (Art. 6.1.b GDPR). The provision of personal data for this purpose is optional; however, given the purpose, failure to communicate personal data will prevent the Controller from responding to the user’s request. For this purpose, Cartiere Carrara will process the user’s personal data for the time strictly necessary for managing responses to information requests and, in any case, for no longer than 15 days from the last contact with the user, after which the data will be deleted.

b) To respond to product reports/feedback For this purpose, the Data Controller will process the following personal data: name, surname, email, telephone, city. The legal basis for this processing is the legitimate interest (Art. 6.1.f GDPR) of the Controller in managing product reports/feedback from users. It constitutes a legitimate interest of Cartiere Carrara to manage feedback from Site users in order to conduct the necessary checks on the reported products. This identified legitimate interest can be considered prevalent over the fundamental rights and freedoms of the data subject, also due to reasonable expectations. The user always has the right to object to the processing of their personal data for this purpose, at any time, for reasons related to their particular situation. To exercise this right, the user can write to dpo@cartierecarrara.com or to Cartiere Carrara S.p.A. – c.a. Data Protection Officer, Via Tazio Nuvolari, n. 18/A, 55012 Capannori (Lucca). The provision of personal data for this purpose is optional; however, given the purpose, failure to communicate personal data will prevent the Controller from managing the user’s reports. For this purpose, the Controller will process the user’s personal data for the time strictly necessary for managing reports and, in any case, for no longer than 2 months from the last contact with the user, after which they will be deleted, unless litigation occurs.

c) For the selection of candidates who submit their spontaneous application via the “Send your spontaneous application” form The data provided by the user when submitting their spontaneous application will be processed by Cartiere Carrara solely for the management of the selection process for new employees and/or collaborators. For this purpose, the Controller will process the following personal data: name, surname, email, data contained in the CV. The legal basis for the processing is the performance of pre-contractual measures adopted at the request of the data subject (Art. 6.1.b GDPR). The provision of personal data is optional, but given the purpose of the processing, failure to communicate such data will make it impossible for the Controller to manage the candidate’s selection process. For this purpose, candidates’ personal data will be kept for a maximum period of 24 months from the submission of the application or the last update of the curricular profile.

Method of Processing

In relation to the purposes described in the preceding paragraph, the processing of personal data is carried out using electronic tools, without the use of automated decision-making processes or profiling.

Type of Data Processed

In addition to what is indicated in the preceding paragraphs of this privacy policy, the personal data that may be processed through the Site are as follows:

Navigation Data The computer systems and software procedures used to operate the Site acquire, during their normal operation, some Personal Data whose transmission is implicit in the use of Internet communication protocols. This category includes IP addresses or domain names of the computers used by users connecting to the Site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and computer environment.

This data, necessary for the use of web services, is also processed for the purpose of:

  • Obtaining anonymous statistical information on the use of the Site.

  • Checking the correct functioning of the services offered.

Cookies “Cookies” are small text files that websites (so-called Publishers or “first parties”) visited by the user, or different sites or web servers (so-called “third parties”), place and store – directly, in the case of publishers, and indirectly, i.e. through them, in the case of “third parties” – within a terminal device (computer, tablet, smartphone, or any other device capable of storing information) at the user’s disposal.

Internet browsing software and the functioning of these devices, such as browsers, can store cookies and then transmit them back to the sites that generated them during a subsequent visit by the same user, thus keeping memory of their previous interaction with one or more websites.

Information encoded in cookies can include personal data, such as an IP address, a username, a unique identifier, or an email address, but can also contain non-personal data, such as language settings or information about the type of device a person is using to browse the site.

Cookies, therefore, can perform various important functions, including session monitoring, memorizing information on specific configurations concerning users accessing the server, facilitating the use of online content, etc.

Cookies can have different temporal characteristics and, therefore, be considered based on their duration (session or permanent), or from a subjective point of view (depending on whether the publisher acts independently or on behalf of “third parties”).

However, according to the Guidelines on cookies and other tracking tools of the Italian Data Protection Authority of June 10, 2021, the classification, which responds to the needs of personal protection and the rationale of the law, is based on two macro categories:

  • Technical cookies, used solely to carry out the transmission of a communication over an electronic communication network, or as strictly necessary for the provider of an information society service explicitly requested by the subscriber or user to provide such service. In other words, these are cookies essential for the functioning of the site or necessary to perform activities requested by the user. Technical cookies do not require the acquisition of consent. Analytics cookies are equivalent to technical cookies if they are used solely to produce aggregate statistics and in relation to a single site or a single mobile application; at least the fourth component of the IP address is masked for third-party analytics cookies; third parties refrain from combining such minimised analytics cookies with other processing (customer files or visit statistics on other sites, for example) or from transmitting them to further third parties. Under these conditions, the same rules apply to analytics cookies regarding consent as for technical cookies.

  • Profiling cookies, used to link specific actions or recurring behavioural patterns in the use of the offered functionalities to identified or identifiable subjects, for the purpose of grouping different profiles into homogeneous clusters of varying sizes, so that it is also possible to modulate the provision of the service in an increasingly personalised way, as well as to send targeted advertising messages, i.e., in line with the preferences expressed by the user during web browsing. In other words, these are cookies used to track the user’s browsing on the web and create profiles on their tastes, habits, choices, etc., as well as to transmit advertising messages to the user’s terminal in line with the preferences already expressed by the same user during online browsing. Profiling cookies can only be installed on the user’s terminal if the user has given their consent.

This Site uses technical and profiling cookies. With reference to profiling cookies, it is specified that, only with the user’s prior consent, the Site will process personal data to:

  • Allow the site to remember information that influences how the site behaves or appears.

  • Help website owners understand how visitors interact with the sites.

  • Monitor Site visitors with the intent of displaying relevant and engaging ads for individual users.

For any further information on cookies, as well as on the procedures for giving consent to the installation of cookies or for removing cookies – with the exception of technical ones – users are invited to consult the cookie policy present in the footer of the Site.

Recipients of Personal Data

The entities to whom the Controller communicates the data act as Processors designated pursuant to Art. 28 GDPR, or in the case of third parties used by the Processor, as sub-processors pursuant to Art. 28.4 GDPR, or as authorised individuals for processing in the case of individuals under the direct authority of the Controller.

In particular, the user’s personal data may be communicated by Cartiere Carrara to the categories of recipients indicated below:

  • Entities responsible for providing the Services (e.g., hosting providers or email platform providers).

  • Entities authorised to carry out technical maintenance.

  • Bodies or Authorities to whom the user’s personal data must be communicated by law or by orders of the authorities.

These entities are collectively referred to as “Recipients.” The complete list of Processors and sub-processors is available by sending a written request to the Controller at the following addresses: Cartiere Carrara S.p.A., Uffici Direzionali, Via Tazio Nuvolari, n. 18/A, 55061 Capannori (Lucca) – email: info@cartierecarrara.com – Certified Email (Pec): amministrazione@pec.cartierecarrara.com

Data Security

Both technical and organisational security measures have been implemented to protect users’ personal data from unauthorised access, disclosures, and/or alterations. These measures are periodically adapted in an attempt to always offer a high level of security. To this end, some information concerning users will be stored at the “Wind Tre Datacenter Spa” data center located in Via di Tor Cervara – Rome (Italy). The Controller does not transfer users’ personal data to foreign countries or international organisations.

Rights of Data Subjects

Data subjects have the right to obtain from the Controller, in the cases provided, access to their personal data, rectification, erasure, restriction of processing concerning them, data portability, as well as the right to object to processing (Articles 15 et seq. GDPR).

In essence, the user, at any time, free of charge, without particular burdens or formalities for the request, can:

  • Obtain confirmation of processing carried out by the Controller.

  • Access their personal data and know their origin, the purposes and scope of processing, the data of the entities to whom they are communicated, the data retention period or the criteria useful for determining it.

  • Update or rectify personal data so that they are always exact and accurate.

  • Delete their personal data from databases and/or archives, including backups, if, among other things, they are no longer necessary for the purposes of processing or if the processing is considered unlawful, and always if the conditions provided by law exist; and in any case if the processing is not justified by another equally legitimate reason.

  • Restrict the processing of personal data in certain circumstances. The data subject who has obtained the restriction will be informed by the Controller before said restriction is revoked.

The request to the Controller is submitted by contacting the Data Protection Officer at Cartiere Carrara (Cartiere Carrara S.p.A. – c.a. Data Protection Officer, Via Tazio Nuvolari, 18/A, 55061 Capannori (Lucca) – email: dpo@cartierecarrara.com).

Right to Object

The data subject has the right to object at any time, for reasons related to their particular situation, to the processing of personal data concerning them pursuant to Art. 6, paragraph 1, letters e) and f) GDPR, including profiling based on these provisions. The Data Controller refrains from further processing the personal data unless they demonstrate compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject or for the establishment, exercise, or defence of legal claims. The data subject can exercise their right to object by contacting the Data Protection Officer at Cartiere Carrara (Cartiere Carrara S.p.A. – c.a. Data Protection Officer, Via Tazio Nuvolari, 18/A, 55061 Capannori (Lucca) – email: dpo@cartierecarrara.com).

Right to Lodge a Complaint

The data subject who believes that the processing of their personal data carried out through this site violates the provisions of the GDPR, pursuant to Art. 77 of the GDPR and Arts. 140-bis to 143 of the Code on the protection of personal data, containing provisions for the adaptation of national law to the Regulation, has the right to lodge a complaint with the Garante per la protezione dei dati personali (Italian Data Protection Authority). The complainant may submit the act using the methods deemed most appropriate, as detailed on the official website of the Data Protection Authority.

Changes to this Privacy Policy

Please note that this Privacy Policy is subject to periodic modifications aimed at improving the protection of users’ personal data. In case of changes, we will update the “last updated” date to indicate when they came into effect. Users are advised to periodically check this Privacy Policy.

Polycyclic Plantations

In the area of Badia Pozzeveri, not far from our production hub in Capannori, we set up a series of continuous cycle plantations where trees and shrubs with different growth and cutting patterns coexist. They are constantly replanted after cutting, or grow back autonomously from shoots, thus guaranteeing constant natural coverage over time. From the eco-environmental standpoint, polycycle plantations requalify a flat area that used to have only residual agricultural value, improving the local habitat, regulating the absorption of rainwater, and conserving carbon stock in the soil.  

Natural polycyclic plantations are usually composed of an alternation of: 

  • Medium–long-cycle plants, cut at 15–40-year intervals from planting (hazelnut, cherry, oak, maple, ash, linden) for wood used as structural timber or for manufactured products.
  • Short-cycle plants, cut at 8–14-year intervals from planting (in particular poplar) for the production of paper or packaging.
  • Very short-cycle plants, cut at 6–7-year intervals from planting (e.g. plane) and used as firewood.
  • Shrubs that are not cut, and contribute to maintaining soil coverage.

 

This varied composition ensures that the different species are cut at different times, allowing any intervention to have a modest impact on the landscape and on the habitats created. Furthermore, the limited agricultural practices required by this management approach allow for preservation of the carbon stock in the soil, and avoid further aggravating global warming due to the massive repetition of tree cutting and replanting.

This type of planning and management of the woods – which includes the permanence of at least 30-40% of the trees after each cutting cycle – allows us to pair different productive species (namely those providing firewood, structural or construction timber, and wood for the production of cellulose) with the logic of permanent topsoil coverage and biodiversity protection.

The wood management method created by polycyclic plantations entails multiple benefits: productive, visual, bio-ecological benefits in terms of habitats for animal species (protecting local biodiversity), regulation of rainwater, and conservation of carbon stock in soil. All thanks to the limited cutting practices (and the permanence of a large part of the woods), which however supply local production chains, including those dedicated to poplar wood and to cellulose production for paper manufacturing.

Kilometroverde® - Lucca.

The Cartiere Carrara Group celebrates 150 years of history.

Kilometroverde® - Lucca.

The initiative was born in collaboration with Rete Clima, and consists of a 1-kilometre linear forestation project along the southern section of the A11 motorway between the exits of Lucca Est and Capannori, which runs along the company’s plants.
Trees and shrubs were planted on land that used to be bare, and a typical Tuscan forest was reconstituted to replace an existing, neo-formed woodland that had been of limited value for the forest and wider ecosystem. The area was repopulated with autochthonous species of trees and shrubs, reviving a forest type historically present in the Tuscan area but now significantly reduced due to agricultural activities and industrial sites that have developed on the land over time. This type of “linear plantation” is an innovative strategy for the area, intended to have a protective function and to mitigate local environmental impacts. Kilometroverde® Lucca will take on a triple function over time: physical and visual separation barrier between land and motorway; woodland (a true and proper green lung) able to capture the particulate pollutants produced by vehicular traffic (the well-known PM); and concrete tool for a strategy to develop natural continuity with existing sections of woods.
The positive impact of this intervention is not limited to the local territory: like all new forestation initiatives, Kilometroverde® – Lucca will allow us to increase the total absorption of CO2 and contribute to mitigating the effects of global warming.

Kilometroverde® – Lucca will be certified according to the PEFC standard for Sustainable Forest Management. .

The Cartiere Carrara Group celebrates 150 years of history.

With the acquisition of the Caldaroni Group, the Cartiere Carrara Group is born, paving the way for new growth and future goals.

The Carrara family’s activities are brought back together under the aegis of Cartiere Carrara S.p.A., thus unifying their resources and consolidating their position in the industry.

Mario Carrara’s branch of the family decides to resume the activities previously excluded from the 2002 transfer, starting from Cartiera Carma, of which it had always maintained exclusive ownership. With fresh new impetus, the family re-enters the professional and consumer tissue market.

The turn of the millennium brings new opportunities. Cartoinvest is sold to the multinational SCA.

Cartoinvest becomes the exclusive licensee of the Kleenex brand for Europe, thus confirming its leadership in the European tissue market.

The Cartoinvest Group is founded, and takes control of no less than twelve companies in Italy and in Europe, further strengthening their presence and influence in the industry.

The historical plant in Pietrabuona starts its first continuous machine for tissue paper, introducing remarkable technological innovations in the manufacturing process.

The Carrara family makes its debut in the paper manufacturing business, opening a paper mill in Pietrabuona to make straw paper.