Privacy & Cookie Policy

Information note pursuant to the Italian law D. Lgs. 196/2003 (“codice privacy”), to the EU Regulation 2016/679 (GDPR) and the Italian law D. Lgs. 101/2018 (GDPR).

1. Data controller

The data controller is Edipap S.r.l. with headquarter in Via Pordenone 13, 20132 Milan, Italy. You may contact the Data Controller at info@edipap.com.

2. Purpose of data processing

2.1 Data provided by the user

The personal data given by the user on a voluntary and explicit way, are used in order to give effect to any requests (for example when requesting information or clarification by calling the numbers listed on the site or by writing to e-mail addresses therein). The data collected are used to manage a contacts database to communicate with users. The personal data collected are: Name, Surname, Business contacts, and all other data written in the messages. Except for navigation data, necessary in order to initiate the computer and data protocols, the provision of personal data by the users is free and optional. But the absence of data will make it impossible to proceed to requests or that you want to forward

2.1.1 Website registration

The Data may be used by Edipap srl to meet your Website registration request and to provide you with related services, that is, the collection of data and information, and anonymous statistical analysis.
Providing your Data for the above purposes is mandatory and the legal basis consists of meeting a request provided by you and of complying with legal obligations. Any refusal by you to provide your Data will make it impossible for Edipap srl to meet your Website registration request and to use the related services. Edipap srl does not need your specific consent to achieve these purposes.
The Data collected by the Data Controller for this purposes will be stored for the period you are registered to our Website.

2.1.2 Request for information through the Website

Your Data may be used by Edipap srl to meet any request for information you have made by filling in the forms available on our Website.
Providing your Data for the purposes under this subparagraph is mandatory and the legal basis consists of meeting a request provided by you. Any refusal by you to provide your Data will make it impossible for Edipap srl to meet the request you have made through our Website. Edipap srl does not need your specific consent to achieve these purposes.
The Data collected by the Data Collector for these purposes may be stored for the period strictly required to meet your request and, in any case, will be cancelled 12 months after your request has been processed.

2.1.3 Marketing activities

Subject to your express consent, Edipap srl may also use your e-mail address and, if provided, your telephone number and address to send you commercial communications, including its newsletter. Edipap srl may also send you invitations to exhibitions and initiatives organised by it.
Providing your data to join commercial initiatives is optional and your refusal will not lead to any consequence regarding the performance of any further activities you may request (e.g. registration and ticket download), but it will prevent Edipap srl from keeping you updated and sending you invitations to its initiatives. The legal basis of the processing is your specific consent.
The Data collected by the Data Controller for the purposes specified in this subparagraph will be processed until you decide to withdraw your consent and/or obtain termination of the processing of your data, in compliance with the provisions of following paragraph 5.

2.2 Navigation data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the communication protocols of the Internet.
This information is not collected to be associated with users, but by their very nature could, through processing and association with data held by third parties, used to identify users.
This category of data includes IP addresses or domain names of computers used by users connecting to the site, URI (Uniform Resource Identifier) of requested resources, time of request, the method used to submit the request to the server, the file size obtained in response, the numerical code indicating the status of response from the server (successful, error, etc.) and other parameters regarding the operating system and computer environment.
The data collected in such a way could be used to ascertain responsibility in case of any computer crimes against the site.

2.3 Cookies

About cookies usage please refer to the following paragraphs specifically prepared by order of 8 May 2014 of the Italian DPA, i.e. the Italian Data Protection Authority.

2.4 Data collected by third parties software used by this website

2.4.1 Social network interaction

These services allow you to make interactions with social networks or any other external platforms directly from the pages of the Application. Interactions and the information gained from this application are in any case subject to the User’s privacy settings related to each social network.

2.4.2Statistics

Google Analytics is a web analytics service provided by Google Inc. Google uses Personal Information collected for the purpose of evaluating the use of this application, compile reports and share them with other services developed by Google. This site allows the Data Controller to monitor and analyse traffic data and are used to keep track of User behaviour.
Personal data collected: Cookie and data usage.
Place of treatment: US and Ireland – Privacy Policy. Company complying with the Privacy Shield.

Yandex.Metrica is a web analytics service provided by Yandex, LLC. Yandex uses Personal Information collected for the purpose of evaluating the use of this application, compile reports and share them with other services developed by Yandex. This site allows the Data Controller to monitor and analyse traffic data and are used to keep track of User behaviour.
Personal data collected: Cookie and data usage.
Place of treatment: Russia – Privacy Policy. You also have an option to opt-out from Yandex personalized advertisement. In order to do so, please, visit this page and untick the box “Consider my interests”.

2.4.3 Advertising, Remarketing and Behavioural targeting

This type of service allows this Application and its partners to inform, optimize and serve advertising based on past use of this Application by the User.
This activity is performed by tracking Usage Data and by using Cookies, information that is transferred to the partners that manage the remarketing and behavioral targeting activity.
In addition to any opt out offered by any of the services below, the User may opt out of a third-party service’s use of cookies by visiting the Network Advertising Initiative opt-out page.

Personal Data collected: Cookies; Usage Data.

Bing Ads (Microsoft Corporation) – Bing Ads is an advertising service provided by Microsoft Corporation.
Place of processing: United States – Privacy Policy

AdWords Remarketing and Google Ads – AdWords Remarketing and Google Ads are remarketing and behavioral targeting services provided by Google Inc. that connect the activity of this Application with the Adwords and Google Ads advertising network and the Doubleclick Cookie.
Place of processing: United States and Ireland – Privacy Policy

LinkedIn Ads – LinkedIn Marketing Solutions is an advertising service provided by LinkedIn Corporation.
Place of processing: United States – Privacy Policy

Yandex Direct – Yandex Advertising Network is an advertising service provided by YANDEX, LLC.
Place of processing: Russia – Privacy Policy

2.4.4 Displaying content from external platforms

Personal Data collected: Cookies; Usage Data.

YouTube is a video content visualization service provided by Google Inc. that allows this Application to incorporate content of this kind on its pages.
Place of processing: United States and Ireland – Privacy Policy.
Google Font is a typeface visualization service provided by Google Inc. that allows this Application to incorporate content of this kind on its pages.
Place of processing: United States and Ireland – Privacy Policy.
Google Maps is a geographic maps visualization service provided by Google Inc. that allows this Application to incorporate content of this kind on its pages.
Place of processing: United States and Ireland – Privacy Policy.
Google Photo is a photo hosting service provided by Google Inc. that allows this Application to incorporate content of this kind on its pages.
Place of processing: United States and Ireland – Privacy Policy.
Vimeo is a video content visualization service provided by Vimeo Inc. and Livestream LLC. that allows this Application to incorporate content of this kind on its pages.
Place of processing: United States – Privacy Policy.
Booking.com is a hotel booking service that allows this Application to incorporate promotional contents of hosting services on its pages.
Place of processing: the Netherlands – Privacy Policy.
Issuu is a service for publishing digital magazines online by Issuu Inc. that allows this Application to incorporate content of this kind on its pages.
Place of processing: United States – Privacy Policy.

3. Processing methods

We will process the Data for the purposes described in previous paragraph 2 using paper, computerised and electronic tools, and in a way to ensure their security and confidentiality in accordance with the provisions set out under article 32 GDPR (General Data Protection Regulation).

3.1 Place

The data are processed at the operational headquarters of the Data Controller and in any other place where the parties involved in the treatment are located. For more information, contact the owner.

3.2 Duration

The Data are kept for the time necessary to perform the service requested by you, or required by the objectives described in this document, and the User can always ask for discontinuation of treatment or deletion of data.

4. Communication and data disclosure

In order to achieve the purposes described in previous paragraph 2, Edipap srl may need to disclose your Data to third parties and, more specifically, to the following categories:

a) Authorities and supervisory and control bodies, and in general public or private subjects performing state duties;
b) Subjects that perform administrative and tax obligations on behalf of Edipap srl;
c) Subjects that provide services for managing the information system of Edipap srl and of the telecommunication networks;
d) Subjects used for various reasons by Edipap srl to organise the Event.

In some cases, the subjects listed above act in a completely autonomous manner as Data Controllers. In other cases, they act as Data Processors specifically appointed by the Data Controller.
Furthermore, in order to achieve the purposes referred to in paragraph 2, your Data will be processed by and become known to the Data Controller’s employees and associate workers, specifically appointed as persons in charge of data processing, depending on the different tasks assigned to each of them and on the instructions given to them.
Personal data processed by Edipap srl will not be disclosed.

5. Data subject’s rights

The interested party may exercise at any time, by contacting the data controller by sending an email to info@edipap.com, the rights under the Italian law as in Art. 7 of Legislative Decree no. 30 June 2003 n. 196, and EU Regulation 2016/679.

You have the right to obtain confirmation of the existence of personal data concerning him, even if not yet registered, and their communication in intelligible form. (Right of access and Right to data portability – articles 15 and 20 GDPR).
You have the right to obtain information (article 15 GDPR):
- origin of personal data;
- the purposes and methods of treatment;
- the logic applied in case of treatment with the help of electronic means;
- the identity of the owner, manager and the representative appointed;
- the subjects or categories of persons to whom the data may be communicated or who can learn about them as appointed representative in the State, managers or agents.
You have the right to obtain (article 16, 17 and 18 GDPR):
- updating, rectification or, when interested, integration of data;
- the cancellation, anonymization or blocking of data processed unlawfully, including data that need not be kept for the purposes for which the data were collected or subsequently processed;
- the attestation that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disclosed, except in the case where such fulfillment is it proves impossible or involves a use of means manifestly disproportionate to the protected right.
You have the right to object, in whole or in part (article 21 GDPR):
- for legitimate reasons to the processing of personal data, pertinent for collection purposes;
- to the processing of personal data for purposes of sending advertising materials or direct sales or for carrying out market research or commercial communication.
You have the right to lodge a complaint with the Data Protection Authority, Piazza di Montecitorio no. 121, 00186, Rome (RM)

Cookie Policy

Information note about cookies usage on www.cartaecartiere.com pursuant to articles 13, 122 of the Italian law D. Lgs. 196/2003 (“codice privacy”) and to the Provision dated 8 May 2014 by Italian Data Protection Authority ( related to the European Directive 2009/136 / EC).

What are cookies

A “cookie” is a small text file created on the user’s computer at the time when it accesses to a particular site, with the purpose of storing and transporting information. Cookies are sent from a web server (which is the computer that is running the website visited) to your browser (Internet Explorer, Mozilla Firefox, Google Chrome, etc.) and stored on the computer as well; those are then sent back to the website at the time of subsequent visits.
During navigation, the user could receive on his terminal also cookies of different sites (“third party” cookies), set directly from managers of such websites and used for the purposes and in the manner defined by these.
There exist different kind of cookies, classified by their features and usages, as better described in the following schema:

Session cookies / Permanent cookies: Session cookies are stored temporarily on your computer while you browse a site (e.g. to keep track of the chosen language). Session cookies are only stored for a short period and are deleted when the browser is closed.
Permanent cookies are, by contrast, stored on your computer for a long period of time, in accordance with the expiry date set when the cookie is created. Such cookies allow websites to store information for future visits to the site by a user, perhaps to avoid making the user enter his or her access details each time.
First-party cookies / Third-party cookies: First-party cookies are created by the websites themselves (the same domain as the one indicated in the browser’s address bar) and can only be read by those websites.
Third-party cookies are, by contrast, created by domains other than those indicated in the browser’s address bar, that is, by organisations that are not the owners’ of the website. Such cookies can be used, for example, to collect information for advertising purposes, to customize content and to track visits to the site.
Technical cookies / Profiling cookies: Technical cookies are essential for the proper functioning of a website or application. The absence of such cookies might cause improper functioning or no functioning at all.
Profiling cookies are designed to collect and store information about a visitor (e.g. the pages visited, any searches done etc.) to provide focused advertising that is more likely to be of interest

Cookies used on the websites of Edipap srl

Denomination	Function carried out by the cookie	First party or third party cookies	Description of the method to block the cookie
Technical session cookies	Expires with the session	First party cookie	Removal through the browser’s functions or purposely designed button
Technical cookie	Removes the banner notifying the use of cookies; expires after 6 months	First party cookie	Removal through the browser’s functions or purposely designed button
Language cookie (Technical)	Memorize user’s language preference; expires with the session	First party cookie	Removal through the browser’s functions or purposely designed button
Language cookie (Technical)	Memorize user’s language preference; expires after 12 months	First party cookie	Removal through the browser’s functions or purposely designed button
Authentication cookies (Technical)	Recognize user profile after login; expire with log out or after two days	First party cookie	Removal through the browser’s functions, logout or purposely designed button
“Remember me” cookie (Technical)	Simplify user login storing login session; expires after 14 days or with log out	First party cookie	Removal through the browser’s functions, logout or purposely designed button
Google Analytics	Anonymous statistics in the website’s navigation	Third party cookie	Removal through the browser’s functions or third party. More info.
Google Maps	Statistics on the use of maps embedded in the website	Third party cookie	Removal through the browser’s functions or third party.
YouTube	Statistics on the viewing of videos embedded in the website	Third party cookie	Removal through the browser’s functions or third party.
DoubleClick	Profiling – Display advertising banners based on users’s behaviours	Third party cookie	Removal through the browser’s functions or third party. More info.
Google Retargeting	Profiling – Display advertising banners based on users’s behaviours	Third party cookie	Removal through the browser’s functions or third party. More info.
Bing	Profiling – Display advertising banners based on users’s behaviours	Third party cookie	Removal through the browser’s functions. More info.
Yandex	Profiling – Display advertising banners based on users’s behaviours.	Third party cookie	Removal through the browser’s functions. More info.
Booking.com	Profiling – Display advertising banners based on users’s behaviours.	Third party cookie	Removal through the browser’s functions. More info.
Vimeo	Statistics on the viewing of videos embedded in the website	Third party cookie	Removal through the browser’s functions.
Issuu	User Profiling: display similar contents while browsing the portal issuu.com – Statistics on the use of contents embedded in the website	Third party cookie	Removal through the browser’s functions. More info.

How to provide or withdraw consent to the installation of Cookies

Where the installation of Cookies is based on consent, such consent can be freely withdrawn at any time following the instructions provided in this document.
In addition to what is specified in this document, the User can manage preferences for Cookies directly from within their own browser and prevent – for example – third parties from installing Cookies.
Through browser preferences, it is also possible to delete Cookies installed in the past, including the Cookies that may have saved the initial consent for the installation of Cookies by this website. Users can, for example, find information about how to manage Cookies in the most commonly used browsers at the following addresses:

With regard to Cookies installed by third parties, Users can manage their preferences and withdrawal of their consent by clicking the related opt-out link (if provided), by using the means provided in the third party’s privacy policy, or by contacting the third party.
Notwithstanding the above, Edipap srl informs that Users may follow the instructions provided on the subsequently linked initiatives by the EDAA (EU), the Network Advertising Initiative (US) and the Digital Advertising Alliance(US), DAAC (Canada), DDAI (Japan) or other similar services. Such initiatives allow Users to select their tracking preferences for most of the advertising tools.

Last update: 24-02-2023