Privacy Policy


PlasticFinder S.r.l., with registered office in Via F. de Sanctis n. 74 – 20141 Milan (MI), VAT no. IT08987200964 and Tax Code no. 08987200964, as data controller of personal data processing (here-in-after "Data Controller"), informs you pursuant to the EU Regulation 2016/679 ("GDPR") and the national legislation on data protection currently in force that your data shall be processed according to the following modalities and for the following purposes:


  1. Scope of the processing


The Data Controller processes the Data subject's personal data (in particular, name, surname, e-mail address, telephone number, IP address, etc.) - hereinafter "Data" or "Personal Data") provided during navigation on the website (hereinafter "Website"), during use of the Platform provided by the Data Controller on the same Website and in the event of a request for contact sent to the Data Controller.


  1. Purposes and legal basis of the processing


Your Data shall be processed for the following purposes:

  1. without your prior consent, for the following Service Purposes:

A.1) the performance of contractual and/or pre-contractual obligations and commitments:

  • management of your request of contact;
  • management of your browsing on the Site;
  • management of the assignment of debt to factoring companies. The Platform allows the User to opt for the payment installment/deferments; in this case, his Personal data will be communicated to factoring companies, in order to allow the assignment of debt, according the contractual terms.

A.2) the fulfillment by the Data Controller of legal obligations:

  • compliance to the obligations provided by laws, regulations or imposed by the Authorities;

A.3) the pursuing of a lawful interest by the Data Controller, in particular:

  • management and maintenance of the Site;
  • prevention and identification of fraudulent activities or harmful damages for the Site;
  • exercises of the Data Controller's right.


  1. only by your prior consent, for marketing purposes: (see par. 13)
  • sending by the Data Controller of its communications and materials, bearing a promotional and/or advertisement content, also by means of automated emailing systems and/or faxes and/or sms and/or mms and/or other messaging and/or newsletter and/or multimedia services

Moreover, if you are already registered, the Data Controller may send to you to the email address you provided, even without your prior consent, advertisement communications relating the services of the Data Controller similar to the ones you have already availed of (so-called "Soft Spam"). Any sent email shall allow you, by clicking on the specific link, to refuse further mailing.


  1. Processing modalities

The processing of your Personal Data is made – electronically – by means of operations of collection, registration, organization, storage, consulting, processing, modification, selection, extraction, comparison, use, interconnection, access and communication, blocking, erasure and destruction of the Data.

In particular, the use of the platform provided by the data controller involves the processing of data in the following ways:


  1. Payment management


The Platform can use payment management services such as PayPal, QuiPago, Google Pay, Credimi, which allow the Platform to process payments by credit card, bank transfer or other means. The data used for payment are acquired directly from the operator of the payment service requested without being in any way processed by the Data Controller through the Platform. These services may include the scheduled sending of messages to the Data subject regarding the payment. For further information, we suggest that you check the privacy policy of the respective services.


  1. Management of e-mail communication


The Data Controller uses the Mailchimp and MailUp services to manage a database of email contacts, telephone contacts or any other type, in order to communicate with the Data subject.    

These services may also allow the Data Controller to collect data relating to the date and time of display of messages by the Data subject and its interactions with them, such as clicks on email attachments. For more information about this, we suggest that you check the privacy policy of the respective services (Mailchimp and MailUp).


  1. Hosting and back-end infrastructure


The Data Controller uses the services Amazon Web Services and ARUBA, which host data and files that allow the Platform to operate, providing an infrastructure to provide specific features of the Platform itself.         

These services use servers located geographically in different locations, making it difficult to determine the exact location where personal data is stored. For more information about this, we suggest that you check the privacy policy of the respective services.


  1. Advertising


The Data Controller uses the services Amazon Mobile Ads, Bing Ads, Google AdSense, RCS MediaGroup Pubblicità, Rai Pubblicità, Wiget Media and Zanox.      
For more information about this, we suggest that you check the privacy policies of the respective services.


F.   Data subject's device


The Platform may save the unique identification code of the devices with which the Data subject is logged in, for statistical purposes or to preserve the preferences expressed.


  1. On-line chat


The Data Controller uses the service of the web portal "" to allow the Data subject, while browsing the Website, to contact the Data Controller in real time. During the chat the communication of any personal data will not be requested. However, if the Data subject decides to provide his personal data of his own free will, they will be treated with the purposes and in the manner described in this statement. For more information about this, we suggest that you check the privacy policy of the service. 


  1. Storage of data


The Data Controller processes the Data for the time necessary to fulfill the above purposes and anyway for a maximum period of 10 years from the collection for Service Purposes; for a maximum period of 2 years from the collection for Marketing Purposes.


  1. Access to Data


Your Data may accessible for the above purposes to:

  • employees and/or collaborators of the Data Controller, in their quality of persons in charge of the data processing and/or internal data processors and/or system administrators;
  • third party companies or other subjects (e.g., IT service providers, suppliers, financing institutions, professionals, etc.) performing activities in outsourcing for the Data Controller, in their quality of external data processors.


  1. Communication of Data


Your Data may be communicated, even without your prior consent, for the above purposes, to controlling bodies, police authorities or judiciary that shall process them, upon their express request, as autonomous data controllers for institutional purposes and/or by law during the course of investigations and controls. Your Data may be also communicated to third parties (e.g., partners, professionals, agents, factoring companies, etc.) in their quality of autonomous data controllers for the performance of activities instrumental to the above purposes. 


  1. Transfer Extra -UE of Data


Your Data shall not be disseminated but they may be transferred for the above purposes to extra EU Countries. In order to ensure a proper level of protection of the Personal Data, the transfer shall occur on the basis of an adequacy decision approved by the EU Commission or on the basis of the implementation by the Data Controller of the Standard Contractual Clauses issued by the EU Commission.


  1. Provision of Data


The provision of Data is mandatory for the Service Purposes. In case you decided not to provide your Data, the Data Controller shall not be able to follow-up your requests relating the use of the Platform. The provision of Data for the further Marketing Purposes is discretionary for you and the lacking such provision does not prevent you from availing of the services of the Data Controller. In case you decided not to provide the Data, you will not be able to receive the initiatives of the Data Controller.


  1. Data subject's rights

The Data Controller hereby informs you that as data subject, and if no limitations provide by law occur, you are entitled to:

  • obtain confirmation over the existence or inexistence of Personal Data relating you, even if not yet registered, and their communication in a comprehensible way;
  • obtain the indication and, if necessary, the copy of the: a) source and category of the Personal Data; b) logic applied in case the processing is performed by means of electronic instruments; c) purposes and modalities of the processing; d) identification references of the Data Controller and the Data Processors; e) subjects or categories of subjects to whom Personal Data may be communicated or who may come to know, in particular if recipients are extra-EU countries or international organizations; e) period for which the Personal Data will be stored, or if that is not possible, the criteria used to determine that period; f) existence of an automated decision-making process and, in this case, information about the logic involved, the significance and consequences for the data subject; g) existence of adequate safeguards in case of transfer of Personal Data to an extra-EU country or international organization;
  • obtain, without undue delay, the update, the rectification or, whether you are interested, the integration of incomplete Data;
  • exercise the right of revocation of your consent any time, easily, with no impediments, by using, if possible, the same means used to provide your consent;
  • obtain the cancellation, the transformation into anonymous form or blocking of the Data: a) processed in breach of the law; b) no longer necessary in relation to the purposes for which the Data have been collected or subsequently processed; c) if you withdraw consent on which the processing is based and  there is no other legal ground for the processing; d) if you object to the processing and there are no overriding legitimate grounds for the processing; e) in compliance with a legal obligation; f) referred to children. The Data Controller may refuse to erase them when the processing is necessary: a) to exercise the right of freedom of expression and information; b) in compliance with a legal obligation, for the performance of a task carried out in the public interest or in the exercise of official authority; c) for reasons of public interest; d) to achieve purposes in the public interest, scientific or historical research purposes or statistical purposes; e) for making legal claims;
  • obtain the restriction of processing when: a) the accuracy of the Personal Data is contested; b) the processing is unlawful and the data subject opposes the erasure of the Personal Data; c) Data are required by you for your exercising of  legal claims; d) pending verification whether the legitimate grounds of the controller override those of the data subject;
  • receive the Personal Data concerning you in a structured, commonly used and machine-readable format and transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where the processing is carried out by automated means;
  • oppose, in whole or in part: a) for lawful grounds to the processing of Personal Data regarding you, even if pertaining the purpose of Data collection; b) to the processing of Personal Data that relates to you for the purpose of sending advertising material or of direct sale or for market researches or commercial communication, by means of automated call systems without the intervention of an operator, e-mail and/or traditional marketing methods by telephone and/or paper mail.
  • submit a data protection complaint to the competent supervisory authority.


In the mentioned cases, whether necessary, the Data Controller shall communicate any exercise of your rights to each third party to whom the Personal Data are communicated, except for specific cases (for example, if this proves impossible or involves disproportionate effort).


  1.  Modalities of exercise of rights


You shall be able to exercise your rights anytime:

  • By sending a registered letter with return receipt to the address of the Data Controller;
  • By sending an e-mail to;
  • By calling the following number +39 02 21118692.


  1. Minors

Minors of 16 years shall be able to use the Site only with the assistance of one parent or of the subject exercising the parental responsibility.


  1. Data Controller, Data Processors, Data Protection Officer


The Data Controller is:

  • PlasticFinder S.r.l., with registered office in Via F. de Sanctis n. 74 – 20141 Milan (MI), VAT no. IT089872009 and Tax Code no. 08987200964


The Data Processors are:

  • The Rocket Science Group LLC d/b/a Mailchimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA -  30308 USA
  • Inc., 187 East Warm Springs Rd, SB119, Las Vegas, NV, 89119.


The updated list of the data processors is kept at the office of the Data Controller in Via F. de Sanctis n. 74 – 20141 Milan (MI).


  1. Consent to the processing of data for marketing purposes


The Data Controller, only with the specific consent of the User, may send newsletters, commercial communications and/or advertising material on products or services offered by the Data Controller by e-mail, through the Mailchimp and/or MailUp service referred to in paragraph 3. B) of this information, paper mail, text messages and/or telephone contacts, for marketing purposes and in the manner provided for in the privacy policy.