Dear User, thank you for visiting our website. Below, we describe the management modalities of the website with reference to the processing of personal data of users who consult it.
CUSTOMER PRIVACY NOTICE
In compliance with the obligations under the European Privacy Regulation EU/2016/679 (GDPR) and Legislative Decree 196/2003 as amended by Legislative Decree no. 101 of August 10, 2018, we hereby inform you regarding the processing of personal data freely provided by you and/or communicated by other parties to Stuzzicami S.r.l.
The processing of data will be carried out in compliance with applicable privacy regulations and based on principles of correctness, lawfulness, and transparency, and conducted in accordance with the principles of relevance, completeness, and non-excessiveness.
1. Identity and Contact Details of the Data Controller
STUZZICAMI S.R.L.
Via Enzo Ferrari n. 6/8
36026 — Pojana Maggiore (VI), Italy
Tel. +39 0444 1497826
Legal Representative of the Data Controller: Nicola Buratti
2. Categories of Personal Data Processed and Purposes of Processing
The Personal Data you provide upon entering into a contract, establishing pre-contractual relations, or submitting requests for quotes and/or information consist of so-called common personal data, including for example:
- Personal identification details;
- Telephone number;
- Email address;
- VAT number and Tax Code;
- Residential address; IBAN code.
The data provided by you will be processed for the following purposes:
- For the proper execution of institutional activities related to the production and processing of food products;
- For operational needs relating to sending quotes and proposals requested by the client, establishing contractual relations, executing contracts, implementing subsequent amendments or variations, and fulfilling any obligations provided therein;
- For operational, organizational, managerial, tax, financial, and accounting requirements related to established contractual and/or pre-contractual relations; To comply with any type of obligation provided for by laws, regulations, or EU legislation;
- For sending informative newsletters regarding new products and events.
3. Legal Basis for Processing
The provision and processing of data is:
- Mandatory and does not require your consent to achieve purposes related to obligations provided for by laws, regulations, or EU legislation;
- Essential and does not require your consent for all personal data indispensable for the proper establishment, management, and continuation of commercial and/or contractual relations;
- Essential and does not require your consent for the pursuit of legitimate business interests;
- Optional and requires your explicit consent for all personal data collected for purposes not directly and/or indirectly related to contractual or pre-contractual obligations or legitimate interests.
Any refusal, even if legitimate, to provide all or part of the above data may compromise the proper execution of relations with our organization and, in particular, for data defined above as mandatory and essential, may make it impossible for us to carry out normal business operations and provide the requested products/services.
4. Processing Methods
The processing of your personal data is carried out with or without the aid of IT tools, including partially automated systems, and may consist of the following operations: collection, recording, organization, storage, consultation, use, processing, modification, selection, extraction, comparison, interconnection, transmission, communication, erasure, destruction, blocking, and restriction. In performing processing operations, all technical, IT, organizational, and procedural security measures will always be adopted to ensure the minimum level of data protection required by law. The aforementioned methods applied for processing will guarantee access to data exclusively to the parties specified in Section 5.
5. Categories of Personal Data Recipients
The individuals or categories of individuals who may become aware of personal data or to whom personal data may be communicated are:
- The Legal Representative of the Data Controller, employees authorized to process data;
- Data Processors, such as IT consulting and support companies, independent professionals (e.g., accounting firms, legal counsel, etc.), commercial agents and consultants, external collaborators;
- Judicial or supervisory authorities, public administrations, bodies, and organizations (national and foreign), solely for the purpose of fulfilling obligations under law, regulations, or EU legislation.
Personal data may also be disseminated, but solely in an aggregated, anonymous form for statistical purposes.
6. Storage and Transfer of Personal Data
The management and storage of personal data take place on servers located within the European Union (Italy), owned by and/or available to the Data Controller and third-party companies duly appointed as Data Processors.
7. Data Retention
Period Data will be collected and recorded solely for the purposes described above and will be retained for the time strictly necessary to complete contractually required activities, which in any case will not exceed 10 years from collection for administrative and accounting purposes.
8. Rights of the Data Subject
In accordance with the provisions of the GDPR, you may exercise the rights indicated therein, and in particular:
- You may request at any time from the Legal Representative of the Data Controller a copy of your personal data, information regarding the location where your personal data are processed, and an updated list identifying all appointed Data Processors and System Administrators authorized to process your data.
- You may freely revoke consent previously given at any time, without any charge or prejudice to the lawfulness of processing carried out up to that point, and exercise the rights of the data subject vis-à-vis the Data Controller as provided for by European Privacy Regulation EU/2016/679: Access, Rectification, Erasure, Restriction, Objection, Data Portability, and Lodging a Complaint with the Privacy Authority (Garante Privacy).
Requests may be submitted by sending an email to: privacy@stuzzicami.com
8. Consent to the use of cookies.
For our website to function properly we use cookies. To obtain your valid consent for the use and storage of cookies in the browser you use to access our website and to properly document this we use a consent management platform: CookieFirst. This technology is provided by Digital Data Solutions BV, Plantage Middenlaan 42a, 1018 DH, Amsterdam, The Netherlands. Website: https://cookiefirst.com referred to as CookieFirst.
When you access our website, a connection is established with CookieFirst’s server to give us the possibility to obtain valid consent from you to the use of certain cookies. CookieFirst then stores a cookie in your browser in order to be able to activate only those cookies to which you have consented and to properly document this. The data processed is stored until the predefined storage period expires or you request to delete the data. Certain mandatory legal storage periods may apply notwithstanding the aforementioned.
CookieFirst is used to obtain the legally required consent for the use of cookies. The legal basis for this is article 6(1)(c) of the General Data Protection Regulation (GDPR).
Data processing agreement
We have concluded a data processing agreement with CookieFirst. This is a contract required by data protection law, which ensures that data of our website visitors is only processed in accordance with our instructions and in compliance with the GDPR.
Server log files
Our website and CookieFirst automatically collect and store information in so-called server log files, which your browser automatically transmits to us. The following data is collected:
- Your consent status or the withdrawal of consent
- Your anonymised IP address
- Information about your Browser
- Information about your Device
- The date and time you have visited our website
- The webpage url where you saved or updated your consent preferences
- The approximate location of the user that saved their consent preference
- A universally unique identifier (UUID) of the website visitor that clicked the cookie banner