Information document pursuant to and in accordance with Art. 13 Regulation (EU) 2016/679 (GDPR) and Art. 130 Privacy Code
WHY THIS INFORMATION
1.WHO IS THE DATA CONTROLLER? HOW TO CONTACT HIM?
The Data Controller is Gran Madre Fine Food Srl, with registered office at Via Monferrato 6, 10131 Turin (TO), in the person of its pro-tempore Legal Representative, who can be contacted for any information by e-mail granmadrefine@pec.it
HAS THE DATA PROTECTION OFFICER BEEN APPOINTED? WHAT ARE YOUR CONTACT DETAILS?
Gran Madre Fine Food Srl has appointed its own Data Protection Officer (DPO/DPO- Data Protection Officer) pursuant to Articles 37, 38 and 39 of the GDPR. The DPO can be reached at the Owner’s office listed above and via email granmadrefine@pec.it
2.TYPE OF DATA THAT CAN BE PROCESSED
Personal data: any information relating to an identified or identifiable natural person (“data subject”); an identifiable person is one who can be identified, directly or indirectly, with particular reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more characteristic elements of his or her physical, physiological, genetic, mental, economic, cultural or social identity.
3. PURPOSE OF PROCESSING, LEGAL BASIS, STORAGE PERIOD, AND NATURE OF CONTRIBUTION
PURPOSES OF DATA PROCESSING A
A) Contact: sending contact requests, information.
LEGAL BASIS: processing is necessary for the performance of a contract to which the data subject is a party or the performance of pre-contractual measures taken at the request of the data subject; (C44)
art. 6 para. 1 letter b) of the GDPR.
DATA STORAGE PERIOD: maximum 12 months.
NATURE OF THE CONFERMENT: the conferment is necessary.
Failure to provide the necessary data will result in the impossibility of being contacted and receiving information.
PURPOSE OF THE PROCESSING B
B) Direct marketing, for sending advertising or direct sales material or for carrying out market research, approval/review questionnaires, commercial and promotional communication, newsletters, by automated means (e-mail, SMS, instant messaging systems such as Whatsapp). The Data Controller, in order to compare and possibly improve the results of automated communications, uses systems with reports. Thanks to the reports, the Owner will be able to know, for example: the number of readers, openings, unique “clickers” and “clicks”; the devices and operating systems used to read the communication; the detail on the activity of individual users; the detail of e-mails sent, e-mails delivered and not, of those forwarded. All these data are used for the purpose of comparing, and possibly improving, the results of communications.
LEGAL BASIS: The processing is based on consent to the processing of personal data (C42, C43)
art. 6 par. 1 lett. a) of the GDPR.
DATA STORAGE PERIOD: 24 months starting from the date consent is given or (if earlier) until consent is revoked (or opt-out).
NATURE OF CONFERRENCE: Conferment is optional. Failure to provide the necessary data will result in the inability to receive direct marketing communications and (where the date of birth is also indicated) direct marketing communications with dedicated discount codes.
PURPOSE OF THE PROCESSING C
C) Fulfillment of contractual obligations and administrative-accounting and legal purposes related to the establishment, execution and termination of the contractual relationship.
LEGAL BASIS: The data processing is necessary for the execution of a contract (C44)
Art. 6 par. 1 lett. b) of the GDPR.
DATA STORAGE PERIOD: 10 years. Article 2220 Civil Code, subject to contractual and extra-contractual issues that may arise and unless otherwise required by law.
NATURE OF THE CONFERMENT: the provision of personal data is necessary for contractual purposes
Failure to provide the necessary personal data will result in the impossibility of establishing a contractual relationship with you.
PURPOSE OF THE PROCESSING D
D) DIRECT MARKETING, “SOFT-SPAM” AUTOMATED E-MAIL: The data controller will use, for the purpose of direct sales of its own products or services, the e-mail coordinates provided by the data subject in the context of the sale of a product or service, without requesting the consent of the data subject, for promotional and commercial communications and newsletters on services similar to those being sold and the data subject, adequately informed, does not refuse such use, initially or on the occasion of subsequent communications. The data subject, at the time of collection and at the time of sending each communication made for the purposes referred to in this paragraph, is informed of the possibility to object at any time to the processing, easily and free of charge.
The Data Controller to compare and possibly improve the results of communications, uses systems to send newsletters and promotional communications with reports. Thanks to the reports, the Owner will be able to know, for example: the number of readers, openings, unique “clickers” and clicks; the devices and operating systems used to read the communication; the detail on the activity of individual users; the detail of e-mails sent, e-mails delivered and not, of those forwarded; All these data are used for the purpose of comparing, and possibly improving, the results of communications.
LEGAL BASIS: The processing is necessary for the pursuit of the legitimate interest of the data controller or third parties, provided that the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data do not prevail (C47-C50) Art. 6 PAR. 1 lett. f) GDPR and Art. 130, para. 4 of Legislative Decree 196/2003.
DATA STORAGE PERIOD: until opposition(opt-out).
NATURE OF THE CONFERMENT: the conferment is optional. Failure to provide the necessary data will result in the inability to receive direct marketing e-mail communications (soft-spam).
PURPOSE OF THE PROCESSING AND
E) Execution of the contract related to joining the fidelity program
LEGAL BASIS: The processing is necessary for the execution of a contract to which the data subject is a party (Art. 6 par. 1 lett B and C44 of the GDPR).
DATA STORAGE PERIOD: For the entire contractual term and, after termination, for a maximum period of 10 years from their collection.
NATURE OF THE CONFERRING: The conferment of data is optional. Failure to do so will make it impossible to join the fidelity program under the terms of the relevant regulations.
PURPOSE OF THE PROCESSING F
F) MANAGEMENT OF YOUR REQUESTS AND REQUESTS OF OTHER DATA SUBJECT, pursuant to Art. 15 et seq. of the GDPR (data subject’s rights).
LEGAL BASIS: The processing is necessary to fulfill a legal obligation to which the data controller is subject (C45) Art. 6 par. 1 lett. c) of the GDPR.
DATA CONSERVATION PERIOD: 5 years from the closing of the request, except in case of litigation.
NATURE OF THE CONFERMENT: the conferment of personal data is obligatory, as it is indispensable in order to be able to execute legal obligations.
PURPOSE OF PROCESSING G
G) Prevention and conduct of litigation and other legal matters and for the defense in case of litigation
LEGAL BASIS: The processing is necessary for the pursuit of the legitimate interests of the data controller or third parties, provided that the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data (C47-C50) do not prevail (C47-C50)
Art. 6 PAR. 1 lett. f) GDPR
DATA STORAGE PERIOD: 10 years, unless objected to and except for the time necessary for the defense in court
NATURE OF THE CONFERMENT: The provision of data is necessary.
The denial will have to be balanced against the legitimate interest of the Holder stated in the purposes of this section.
PURPOSE OF THE PROCESSING H
H) CUSTOMER AREA, to access your account/register/manage your profile.
LEGAL BASIS: The processing is necessary for the performance of a contract to which the data subject is a party or for the performance of pre-contractual measures taken at the request of the data subject (C44) art. 6 par. 1 letter b) of the GDPR.
DATA STORAGE PERIOD: until the termination of the contract or until the cancellation of the same, in any case without prejudice to the technical time for the disabling of credentials.
NATURE OF THE CONFERMENT: the conferment is necessary. Failure to provide the necessary data will result in the inability to access your account.
4. TO WHOM WILL PERSONAL DATA BE COMMUNICATED? RECIPIENTS OF THE DATA
Personal data will be communicated, according also to the purposes envisaged in specific areas, to subjects who will process the data as autonomous Data Controllers, or Data Processors (art. 28 GDPR) and processed by natural persons (art. 29 GDPR) acting under the authority of the Data Controller and Data Processors on the basis of specific instructions given regarding the purposes and methods of processing, for specific purposes according to the area of reference. The data will be communicated to recipients belonging to the following categories: subjects who provide services for the website and communication networks, including e-mail, host and website management; subjects based in Italy, with whom the Data Controller has signed agreements (e.g. consultants, shipping and transport companies etc.); social channels; subjects for the management of direct marketing activities; competent authorities for the fulfillment of legal obligations and/or provisions of public bodies, upon request.
5. IS THERE A DATA TRANSFER TO A COUNTRY OUTSIDE SEE?
The management and storage of data is in Europe. It should be noted that in case of transfer of personal data to countries located outside the European Economic Area, the same will be carried out in accordance with the measures established by the applicable legislation ensuring an adequate level of protection to the data subjects. For information about the guarantees inherent in the transfer of data outside the EEA please write to granmadrefine@pec.it .
6. IS THERE AN AUTOMATED PROCESS?
Personal data will be subject to traditional manual, electronic and automated processing. It should be noted that fully automated decision-making processes are not carried out.
7. RIGHTS OF DATA SUBJECT
You may assert your rights as expressed in Art. 15 et seq. GDPR, by contacting the DPO/RPD at granmadrefine@pec.it or by contacting the Data Controller at granmadrefine@pec.it. You have the right, at any time, to request access to your personal data (art.15), rectification (art.16), deletion of the same (art.17), restriction of processing (art.18). The data controller shall notify (art. 19) each of the recipients to whom the personal data have been transmitted of any rectification or erasure or restriction of processing carried out. The data controller shall inform the data subject of such recipients if the data subject so requests. In the cases provided for, you have the right to the portability of your data (art.20), in which case they will be provided to you in a structured, commonly used and machine-readable format. You have the right to object (art.21), at any time, to the processing of data based on legitimate interest, and in cases where the legal basis is consent, you have the right to revoke the consent given without affecting the lawfulness of the processing based on the consent before revocation.
To stop receiving automated direct marketing communications (e-mail, SMS-type messages, instant messaging) write an e-mail to granmadrefine@pec.it with the subject line “unsubscribe from automated” or use our automated unsubscribe systems provided for e-mail only (opt-out).
In the event that the data subject believes that the processing of personal data carried out by the Data Controller is in violation of the provisions of Regulation (EU) 2016/679, the data subject has the right to lodge a complaint with the Supervisory Authority, in particular in the member state where he or she normally resides or works or in the place where the alleged violation of the regulation occurred (Privacy Guarantor https://www.garanteprivacy.it/), or to take appropriate legal action.
8. MODIFICATIONS TO THE DISCLOSURE
The Owner reserves the right to change, update, add or remove parts of this disclosure. In order to facilitate verification and modification of the text, the notice will contain the date of update.
Update date: November 11, 2024.
Pursuant to and in accordance with Articles 6 and 13 of the EU Regulation 2016/679 – GDPR I have read the information for the processing of personal data of Gran Madre Fine Food Srl