The Data Controller is GR3N SA. For any further information on the processing of personal data or to exercise your rights, you can contact us:

• by sending a written request to: GR3N SA Via Probello, 19 14, 6863 – Lugano Switzerland
• by email at: info@gr3n-recycling.com

Personal data means any information relating to an identified or identifiable natural person; an identifiable natural person can be identified, directly or indirectly, in particular by reference to an identifier such as, for example, a name, an identification number, location data or an online identifier. Processing means any operation which is performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, consultation, erasure or destruction, etc.

We inform the User that we process the following categories of personal data:

• Browsing Data The IT systems and software procedures for the operation of the website acquire, during normal operation, some personal data the transmission of which is implicit in the use of Internet communication protocols. This is information is not collected to be associated with identified parties concerned, but that by its very nature could, through processing and association with data held by third parties, allow identifying users. This category of data includes the IP addresses or domain names of computers used by users connecting to the website, URI (Uniform Resource Identifier) ​​addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment. These data are only used to obtain anonymous, statistical information regarding website use, to verify its correct operation, to identify anomalies and/or abuses, and are deleted immediately after processing. The data could be used to ascertain liability in case of hypothetical computer crimes against the Data Controller or third parties.
• Contact us form User data is collected by the Data Controller when filling in a form (hereinafter referred to as "form"). The form requires the entry of the following personal data: name, telephone, email.
• Platform P-Turn form User data is collected by the Data Controller when filling in a form (hereinafter referred to as "form"). The form requires the entry of the following personal data: name, surname, company email, username, password.
• Data provided voluntarily by the User The optional, explicit and voluntary sending of e-mails to the addresses indicated on this website involves the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the message.
• Information related to applications sent by email, such as CV and references

GR3N will process the User’s personal data for the following purposes:

• Respond to a request for information from the User
• Sign contract for GR3N services
• Fulfil the contractual, pre-contractual, administrative and tax obligations arisingfrom the relationship between the User and GR3N
• Fulfil the obligations established by law, by a regulation, and satisfy requestsfrom the competent authority
• Update and inform the User about the status of the process.

Each treatment is justified by one of the following legal bases:

• The processing is necessary to execute the contract between the parties. In this case, the provision of personal data is optional but its absence makes the impossibility to conclude the contract and execute the requested service
• The processing is necessary to fulfil a legal obligation. In this case, the provision of data is mandatory and its absence makes the impossibility to conclude the contract and execute the requested service
• The processing is necessary for the purposes of the legitimate interests pursued by the Data Controller, except where such interests are overridden by the interests or fundamental rights and freedoms of the User which require protection of personal data. In this case, the provision of data is optional.

As part of GR3N's activity and for the purposes specified above, the User's personal data may be shared with:

• Appointed Data Processors who provide specific processing activities or services on behalf of the Data Controller and under its instructions (e.g. web hosting, system administrators)
• Data Controllers to whom the data could be communicated pursuant to legal provisions or orders of the Authorities, or e.g. to execute payments (banks); to allow the Data Controller to exercise its rights (law firm); etc.
• Subjects authorised by the Data Controller to process the personal data necessary to perform activities strictly related to the provision of services and who have assumed an appropriate legal and contractual obligation of confidentiality (e.g. employees and/or collaborators of the Data Controller).

All personal data are stored on servers located in the EU. However, if it will be necessary, the Data Controller will have the right to transfer the data even outside the EU. In such a case, the Data Controller ensures from now on that the data transfer will take place in accordance with the applicable law and regulations.

In compliance with the principles of lawfulness, purpose limitation and data minimization, according to art. 6 of the FDPA and art. 5 of the GDPR, the retention period of the User’s personal data is established for a period of time not exceeding the achievement of the purposes for which they are collected and processed and in compliance with the mandatory time limits prescribed by law. The CV and the information related to the application are kept for 2 months, except for the strategic need for the Data Controller to keep them longer (e.g. for specific profiles to be evaluated in the future).

The User has the right to obtain from GR3N confirmation as to whether or not personal data concerning him or her are being processed and, where that is the case, the User can exercise the following rights:

• right to access to the personal data and the following information: the purposes of the processing; the recipients to whom the personal data have been or will be disclosed; where possible, the envisaged period for which the personal data will be stored; the envisaged consequences of the processing based on profiling
• right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal the right to obtain the rectification of inaccurate personal data concerning him or her
• right to obtain the erasure of personal data concerning him or her, if the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, the User withdrew his or her consent on which the processing is based or the personal data have been unlawfully processed
• right to restrict processing, if provided by applicable law
• right to receive the personal data concerning him or her, which the User has provided to the GR3N, in a structured, commonly used and machine-readable format and has the right to transmit those data to another Data Controller without hindrance from GR3N (if provided by applicable law)
• right to object to the processing of personal data concerning him or her. Specifically, the User has the right not to be subject to a decision based solely on automated processing, including profiling
• right to lodge a complaint with a supervisory authority, if the User considers that the processing of personal data relating to him or her infringes the applicable law.
• The User may exercise his or her rights freely and at any time:using the contact details provided in the paragraph "Data Controller" contacting the Federal Data Protection and Information Commissioner.

The User is not subject to decisions based solely on automated processing.

GR3N reserves the right to update or change this Policy at any time. We will release the latest Privacy Policy on this page for any changes. By continuing to use or access the website after this Privacy Policy has changed, the User indicates his or her agreement to the revised Privacy Policy. GR3N encourages the User to regularly review this section to make sure he or she is aware of any changes and how his or her information may be used.