Privacy Policy Information

INFORMATION ON THE PROCESSING OF PERSONAL DATA

FreshyFoods (hereinafter, for brevity, “the Owner”) informs that the personal data acquired through browsing this site will be processed in compliance with the law on the protection of personal data.

With reference to the methods of management and processing of personal data of users who consult this site, pursuant to Article 13 of EU Regulation no. 679/2016, the Data Controller provides the following information:

1. Types of data collected, purposes and legal basis of processing

Browsing data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes the IP addresses or domain names of the terminals of users who connect to the site, the MAC (Media Access Control) addresses, the URI (Uniform Resource Identifier) ​​addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s computer environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site. The legal basis that legitimises the processing of personal data for this purpose is to be found in the case provided for by art. 6 par. 1, letter b) of EU Regulation no. 679/2016, or to allow the user to use the requested service. The same data may also be used to comply with legal obligations or requests from the judicial authorities. The legal basis that legitimises the processing of personal data for this purpose is to be found in the case provided for by art. 6 par. 1, letter c) of EU Regulation no. 679/2016, or because the processing is necessary to comply with a legal obligation to which the data controller is subject.

Data provided voluntarily by the user

Following the voluntary sending of emails to the email addresses on the site, the Data Controller may process the sender’s email address and any additional personal data contained in the message, to respond, always via email, to requests made by the user. The legal basis that legitimises the processing of personal data for this purpose is to be found in the case provided for by art. 6 par. 1, letter b) of EU Regulation no. 679/2016, or to provide the user with the requested service. The same data may also be used to comply with legal obligations or requests from judicial authorities. The legal basis that legitimises the processing of personal data for this purpose is to be found in the case provided for by art. 6 par. 1, letter c) of EU Regulation no. 679/2016, or because the processing is necessary to comply with a legal obligation to which the data controller is subject.

The interested party is invited not to insert or send through the tools on the site “special categories of personal data”, “biometric data”, “genetic data”, “data relating to health”, “data relating to crimes or criminal convictions” as defined by the legislation in force.

Such data, if provided by the interested party, will be immediately deleted.

Cookie

The site uses technical cookies (session and navigation) to ensure normal navigation and use of the website (allowing, for example, authentication to access restricted areas). The site also uses third-party analytical cookies (with reduced identification potential) to monitor the use of the site by users for the purpose of optimizing the web platform and statistics (analytical) and profiling cookies. For all information relating to the processing of personal data carried out via cookies, please refer to the extended cookie policy, accessible on every page of the portal.

2. Data retention period

The personal data collected and processed following the navigation of this site will be retained for the entire period of provision of the service and in any case deleted or made anonymous within 7 days. The personal data sent independently by users through the tools present on the site will be deleted after having provided the requested service or having responded to them and in any case within a maximum of 15 days from the completion of such activity, with the exception of those necessary for compliance with tax, accounting and administrative regulations or to fulfill other legal obligations and to document the activities carried out.

3. Methods of processing

The personal data collected will be treated, stored and processed with electronic tools and will be stored both on computer media and on paper media, organised in databases, and on any other type of suitable media.

Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.

The processing of personal data carried out by the Data Controller does not involve automated decision-making processes.

4. Communication of personal data

The communication of navigation data is a necessary requirement for the provision of the requested service (navigation on the site) and therefore mandatory for this purpose: failure to communicate personal data by the interested party will make it impossible for the Data Controller to allow navigation of this site. The communication of data for further purposes is optional: failure to communicate data, in such cases, will not have consequences for the interested party, but may make it impossible to provide the user with the requested feedback.

5. Subjects to whom personal data may be communicated

The personal data collected will not be disclosed and may be communicated, in addition to subjects who are recognized as having the right and interest to access your personal data by law or secondary and/or community regulations, to authorized personnel within the Data Controller, as well as to companies, associations or professional firms that provide services and activities on behalf of the Data Controller as Data Processors for the fulfillment of legal obligations, as well as for any organizational and administrative need necessary to provide the requested services.

The names of other subjects who may become aware of your personal data in their capacity as “Data Processors” are listed in an updated list available from the Data Controller (to be requested at the contact details indicated in point 9).

6. Transfer of data abroad or to international organisations

The Data Controller does not transfer the personal data of the interested parties collected through this site and the tools provided therein abroad or to international organizations.

7. Links to third-party sites or services

This information is provided only for the processing of personal data carried out through this site or the tools provided by the same, and not for other websites that may be consulted by the user via links, whose managers operate as independent data controllers. Users are therefore invited to carefully read their privacy policies before accessing third-party services.

8. Rights of the interested party

In relation to the aforementioned processing of personal data, the interested party has the right to exercise at any time the rights provided for by EU Regulation no. 679/2016, including, for example, to obtain the indication:

• of the origin of the personal data;
• of the purposes and methods of processing;
• of the logic applied in the case of processing carried out with the aid of electronic instruments;
• of the identifying details of the Owner, the managers and the designated representative.

The interested party has the right to obtain:

• access, updating, rectification or, when interested, integration of the data;
• the cancellation, transformation into anonymous form or blocking of data processed in violation of the Law;
• the limitation of the processing of data concerning him, that is, to ask the owner or the person responsible for the processing to reduce the purposes or the methods with which his data are processed.

L’interessato potrà inoltre chiedere copia dei propri dati in formato standard (cd “Diritto alla portabilità dei dati”).

Finally, the subject to whom the data refers has the right to object at any time and without any cost, in whole or in part:

• for legitimate reasons to the processing of personal data concerning him/her, even if pertinent to the purpose of the collection;
• to the processing of personal data concerning him or her carried out pursuant to Article 6, paragraph 1 GDPR, letters e. (“processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller”) or f. (“processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party”) including profiling based on these provisions.
• to the processing of personal data concerning him/her for the purposes of sending advertising or direct sales material or for carrying out market research or commercial communication (direct marketing), including profiling to the extent that it is connected thereto.

The interested party has the right to withdraw his/her consent to the processing, when this is based on the hypothesis provided for by art. 6, paragraph 1, letter a. (when “the interested party has given consent to the processing of his/her personal data for one or more specific purposes”), or by article 9, paragraph 2, letter a. (when “the interested party has given his/her explicit consent to the processing of such personal data for one or more specific purposes”) of EU Regulation 679/2016, at any time without prejudice to the lawfulness of the processing based on the consent given before the withdrawal.

If the interested party considers that the processing of his/her personal data violates the legislation in force, he/she has the right to lodge a complaint with a supervisory authority, in particular in the Member State in which he/she habitually resides, works or where the alleged violation occurred. The Italian Supervisory Authority can be reached at the contact details on its website.

9. Data Controller – Contact details

The Data Controller is FreshyFoods Via Gazzoletto, n. 4/C CAP 26100 Cremona (CR).

The Company may also be contacted at the email address info@freshyfoods.it.

To exercise the rights listed above, the interested party may submit a request using the email account Info@freshyfoods.it.