Privacy

Privacy policy for Customers and Suppliers and for respective contacts pursuant to articles 13/14 and art. 21 of the General Data Protection Regulation, (hereinafter “GDPR”) of Foodness Spa (hereinafter referred to as “Foodness” or “we”/“us”)

 

Who is the Data Controller? Who can I refer to?

Name and address of the Data Controller:

Foodness Spa, Via Dell’Agricoltura 8/10, 46030 Curtatone (MN)

E-Mail: foodness@pec.it

Website: www.foodness.it

 

What are the categories of data processed by FOODNESS and for what purposes?

We process the following categories of customer and supplier data: company name, legal status, registered office, legal representatives and contact persons (name, surname, e-mail address and telephone/fax numbers) and invoicing data.

These data are stored and processed as necessary

  • for the preparation and execution of a contract (including managing relations with the customer);
  • for invoicing purposes;
  • for marketing purposes and for promotional, commercial and advertising activities such as, for example, the forwarding of advertising material and advertisements connected with the products and/or services marketed by Foodness; the sending of promotional e-mails and text messages and the forwarding of newsletters, e-books, unless opposition has been expressed regarding the use of data for commercial purposes.

 

On what legal basis are the data processed?

The legal basis for the processing of personal data is the General Data Protection Regulation, (hereinafter “GDPR”), and in particular:

  • art. 6 (1) (b) of the GDPR, which permits processing for the entering into and performance of contracts;
  • art. 6 (1) (f) of the GDPR, which permits processing for the protection of our legitimate interests, provided there is no priority interests of the individual data subject that prevents said processing.

In addition, we process personal data on the basis of consent given by the data subjects, who can withdraw their consent at any time. This action shall not be retroactive. The withdrawal of consent shall prevent the further processing on our part of the personal data of the individual or legal entity. The other regulations permitting the processing of data (art. 6 (1) (b) and art. 6 (1) (f) of the GDPR) shall remain unaltered.

 

Who do we share the supplied data with? Where are the personal data stored?

We share personal information that permits identification with recipients inside the FOODNESS Group that need to have such information to perform their work tasks and obligations, and with third parties engaged in the processing of data on our behalf, as suppliers of services, who are bound in turn by the contracts required by law in relation to the protection of data, or to whom FOODNESS has to provide information in order to fulfil its legal obligations. We share personal information that permits identification also with the business partners of FOODNESS that supply products and services sold by FOODNESS.

The personal data are stored on FOODNESS’s servers in the European Union.

 

Are data transferred to recipients outside the European Union or the European Economic Area (or so-called third-party countries) or to international organisations?

Customer/supplier personal data are transferred to third-party countries only if necessary for the performance of the contract.

 

For how long are the data supplied to FOODNESS held for?

We store personal data only for the time necessary for accomplishing the above-described purposes and are then cancelled; they are, in any case, eliminated in compliance with the retention periods provided for by law.

 

What are the data subject’s rights? How can I make a complaint?

Art. 15 of the GDPR provides for the data subject’s right to be informed on the data in our possession regarding them.

In the event of erroneous or non-updated information, the data subject has the right to request its correction at any time, pursuant to art. 16 of the GDPR.

In addition, pursuant to art. 17 of the GDPR, the data subject could have the right to request the erasure of their personal data, unless we are attributed greater powers or rights to continue with the processing.

Finally, pursuant to art. 18 of the GDPR, the data subject has the right to restrict/limit the processing of their personal data.

To obtain information regarding data in our possession, their correction, erasure or restriction/limitation of the processing, reference should be made to the address indicated under point 1.

It’s possible to request the sending of the information provided to us in a structured, customary and legible form with automated means, or the transmission of said data to third parties.

In addition, the data subject has the right to oppose processing pursuant to art.21 of the GDPR. Please refer to the framework policy set out below.

To contact the competent supervisory body,

the Italian Data Protection Authority, write to:

Garante Privacy

Piazza di Monte Citorio n. 121 00186 ROMA

Telephone: (+39) 06.696771

E-Mail: garante@gpdp.it

 

Is the sharing or updating of data compulsory?

Providing your data is a free choice. We are, however, authorized to process the personal data of individuals and legal entities with whom we have contractual or pre-contractual relations, for the preparation and execution of a contract, and for invoicing purposes.

 

Are the personal data provided used for automated decision-making process?

We generally don’t used customer/supplier data for automated decision-making processes as described in art. art. 22 of the GDPR.

 

Are the data used for profiling/the assignment of scores?

No

 

Right of opposition pursuant to art. 21 GDPR:

  1. The right of opposition is based on a particular situation:

Pursuant to art. 21 (1) of the GDPR, the data subject has the right to oppose the processing of their personal data at any time in the event of a particular situation. In the event of opposition we will interrupt the processing of personal data unless there is proven evidence of a compelling and legitimate legal basis in our favour that takes priority over the interests of the data subject (e.g. to assert our rights or for our defence in litigation).

  1. Right of opposition to processing for commercial reasons:

Pursuant to art. 21 (2) of the GDPR, the data subject also has the right to oppose processing for direct commercial reasons. In this case, we will interrupt use of the personal information received for promotional purposes.

Opposition may be communicated at any time to the contact addresses set out in paragraph 1.

Privacy policy – Online privacy

The protection of personal information is of primary importance to us. We will use the identification data that the user decides to provide to us, or which have been collected during use of the website, only as described in this online privacy policy and in compliance with the regulations in force regarding data protection.

This online policy specifies the type, aim and the purpose of the collection, processing and use of the personal information that the user chooses to provide to us during browsing and/or which may be transmitted through the Foodness site (www.foodness.it) (hereinafter “our site”). It should be noted that it is not necessary to provide any personal information in order to use our site.

Users that provide personal information for collection, storage or use on the part of Foodness have the right to be informed on the methods of storage, use and transfer of the information and have the right to access the information and to check its use pursuant to Leg. Dec. No. 196 of 30 June 2003 (Privacy Code) and of the GDPR (General Data Protection Regulation – in force since 25 May 2018), hereinafter referred to as “the Law”. The expression “personal data” refers to any information relating to identifiable individuals and legal entities, also indirectly, making reference to any other information, including a personal identification number, such as, for example, name, e-mail address, telephone number and similar. For more information on the right of access, rectification and erasure of any personal data in our possession, on the exercise of said rights and for our contacts, please refer to section 6 and section 7.

As provided for by the Law, the data controller is the Legal Representative of Foodness Spa, Via dell’Agricoltura 8/10, 46030 Curtatone (hereinafter, “Foodness”). For further information on Foodness, please refer to section 7.

The competent authority on the question of data protection is the Garante per la protezione dei dati personali (Italian Data Protection Authority) www.garanteprivacy.it. In the event the user considers the processing of data carried out by us as non-conforming to this online policy or the laws and regulations in force, they may make a complaint to the Italian Data Authority. For the purpose of completeness, in certain circumstances, as provided for by art. 157 of Leg. Dec. no. 196/2003 (not subject to the normal management of the site), Foodness must transmit information and updates to the competent authorities to verify the processing of personal data. In such cases, response is compulsory, on penalty of administrative sanctions.

Section 1

Information collected during use of our site and use of such information

  1. a) Contact form

Our site offers the opportunity to provide us with personal information by completing a contact form, for example, to request a quotation or information regarding our products, or due to interest in a job offer on the part of Foodness. The information provided may include the name, address, e-mail address and telephone number, age and date of birth.

We use the information to:

provide the user with the information, products and services requested; to personalise the user’s experience on our site and to make sure that the site is used in the best way possible for the user and for the computer in use.

The data transferred via internet (e.g. with transmission via e-mail) are subject to risks associated with security. It is not, therefore, possible to guarantee complete protection against access on the part of third parties to the data transferred.

  1. b) Log information

Standard log information and details of the models of behaviour of the user are collected during browsing of the site, for example:

visit date and time; type of browser used and version; operating system; Internet Protocol (IP)  address, complete series of clicks and relative URL from and to our site, for example, websites visited and products visualised or for which a search has been carried out, response times of the pages, download errors, duration of the visits to certain pages, interaction with the pages (for example, scrolling, clicks and mouse movements) and methods used to exit from the page, types of  plug-ins and version for system administration

We have a legitimate interest in processing these data in anonymous form, since it allows us to improve and develop our site. We are not in any way interested in the identification of the user who visits our site. The data collected will not in any way be associated with any identification information of the user originating from any other source.

  1. c) Newsletter and commercial offers

Our site offers the user the possibility of downloading and/or registering to receive the commercial offers sent by us or our newsletter (hereinafter, “newsletter”). To register, the user must insert a valid e-mail address. Upon registering for commercial offers or the newsletter, the IP address, the date and time will be saved in our archives. This is required for protection in the event that a third party uses the user’s email for registering to our commercial offers/newsletter improperly or without consent. No other datum will be collected. The data collected in this way are used for the purpose of sending to the user commercial offers or newsletters. The data are not transferred to third parties and are not in any way combined with any other information collected on our site. In the event of downloads of commercial offers or newsletters, we use the tracking system offered by Google Analytics (see below). You can cancel your registration to commercial offers/newsletters at any time. Further details can be found in the confirmation e-mail and in each commercial offer/newsletter.

For communication via e-mail we use services and software offered by third parties and we track the user’s activities to ensure that the contents sent are targeted and to improve the user’s browsing experience.

  1. e) Cookies

Our site uses Cookies, Pixel Tags, Local Shared Objects (otherwise known as “Flash Cookies”) and similar technologies during navigation to permit a number of specific functions of our site and to facilitate an analysis of the behaviour of the user on the site with the aim of improving the user’s experience.

For further information on the cookies used and their functioning, please refer to our cookies policy.

To avoid the installation of cookies, it is necessary to regulate the browser accordingly. This operation, however, could prevent the user from fully using all the site’s functions.

  1. f) Use of the anonymization button of the Google Analytics IP

Our site uses Google Analytics, a web analysis service offered by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter, “Google”). Google Analytics uses so-called “cookies”, files of texts memorised on the user’s computer to facilitate the analysis of use of the site on the part of the user. The information generated by these cookies, such as, for example, the time, place and frequency of the visits to our site, including IP address, are transmitted to Google in the United States for memorisation.

Google declares that the IP addresses sent by the user’s browser will never be associated with other data possessed by Google.

On our site we use Google Analytics with an IP anonymization function. In this way Google abbreviates and anonymises the IP addresses before transfer from the member states of the European Union or the other signatory states of the European Economic Area Agreement.

Google will use such information in our place to assess the use of our site on the part of the user, to complete reports for us on the activity of our site and to provide us with other services connected with use of the site and of the internet. This information is used by us for statistical uses. Google can also transfer said information to third parties where required by law or when the data are processed by third parties on Google’s behalf.

We use Google Analytics including the Universal Analytics function. Universal Analytics allows us to analyse activities on our site through different devices (e.g. if the user accesses our site via a portable computer or via a tablet on a different occasion). The process consists in the assignment of a pseudonym of the user’s name to each user. This assignment is carried out upon registration or access with a user name and password. Google will not receive any personal information. The addition of further functions to Google Analytics through Universal Analytics does not diminish or invalidate the security measures adopted for the protection of personal data, such as the obscuring of the IP or additional applications of the browser.

The user can avoid the installation of the cookies by regulating the browser settings accordingly. This operation, however, could prevent the user from fully using all the functions of the site.

Google offers a function for disabling the most common browsers, to give the user more control over the data collected and processed by Google. By activating this option, no information relating to visits to our site will be transmitted to Google Analytics. Such action will not, however, avoid the transmission of information to us or to our suppliers of web analysis services. For more information on the disabling option provided by Google and on its application, visit the page:  https://tools.google.com/dlpage/gaoptout.

The marketing services can be disabled at the following link: (https://support.google.com/ads/answer/2662922?hl=it&ref_topic=7048998)

For more information on the terms of use and on the protection of Google data, refer to the page: http://www.google.com/analytics/terms.

  1. g) Use of Google Remarketing

This site uses the remarketing function of Google Inc. (see the Google Inc. address provided at point f). This function is designed to report commercial messages based on the interests of the user through Google’s promotional network. The user’s browser will save Cookies that make it possible to recognise said user on the sites belonging to Google’s promotional network. These pages can show the users promotional messages related to contents visited previously by the same users on sites that use the Google Remarketing function. Google declares not to collect any personal data in this process. The user may disable the Google Remarketing function from the http://www.google.com/settings/ads page. Alternatively, the user can disable use of the cookies for promotional messages based on their interest through the Advertising Network Initiative following the instructions contained in the page http://www.networkadvertising.org/managing/opt_out.asp

  1. h) Use of Hotjar

To improve the browsing experience on our sites, we use services and software of Hotjar Ltd. (Level 2, St Julian’s Business Center, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta [AB1], http://www.hotjar.com). Hotjar allows us to measure and evaluate the behaviour of the user on our site. The aim is to improve the user’s browsing experience, remembering preferences, resolving technical problems, analysing trends and, in general, improving our website. For this purpose, Hotjar inserts cookies onto visitors’ devices to collect non-personal information on the device and on the browser (for example, the IP address of the device in anonymous form, the screen resolution, the type of device, operating system and type of browser, country from which access to the site is made, language settings), relating to the user’s interactions with the site (such as mouse movements, inputs with the keyboard, scrolling, etc.) and logging data (such as pages visited, the page visit time, URL and reference dominion, date and time of access, etc.). Hotjar can store such data collected from the users in anonymous form. For further information on Hotjar’s privacy policy, refer to https://www.hotjar.com/privacy.

To prevent the processing of data on the part of Hotjar, the user can disable use of the cookies in their browser’s settings and cancel any active cookies. The user can oppose the collection and processing of data on the part of Hotjar at the page: https://www.hotjar.com/opt-out.

Section 2

Storage and transmission of information to third parties

Information will be stored on our safe servers and may be shared with our suppliers of services that assist us in targeted communication to a specific public, in personalised advertising and in the optimisation of our site.

Personal information may be transferred outside of Italy and, in certain cases, outside of the European Economic Area (EEA) where necessary for the above-described processing purposes (including the transfer of confidential information to third parties). In such cases, staff operating outside the EEA, our employees or employees of our supplier, may process personal information. In sending their personal information, the user accepts such transfer, storage and processing.

In the event that the user’s personal information is transmitted outside the EEA, we guarantee to have implemented adequate measures to protect the personal information of users and to check that it is always processed as required by the law.

Section 3

Period of storage

Personal data are stored only for the period necessary for the accomplishment of the above-described purposes. Personal data will be cancelled when no longer necessary for the described purposes or at the expiry of the legally required retention periods.

Section 4

Links to other internet sites

This Policy does not cover the links contained on our site that lead to other sites. We recommend reading the privacy policies of the other sites visited.

Section 5

Modifications to our online privacy policy

Foodness may modify its online privacy policy from time to time. The modifications will be communicated through site updates. We recommend accessing the site regularly to evaluate acceptance of any modifications.

Section 6

Access to personal information / right of rectification and erasure

On the basis of article 15 of the GDPR (data subject’s Right of Access), the user has the right to know exactly what personal information is contained in our archives.

If the information in our possession is not updated or is incorrect, the user has the right to request the correction and updating of the data. Pursuant to article 15 of the GDPR (right to rectification), the user can also request the cancellation of their data, unless there is a regulation or legitimate interest of greater importance to maintain said data.

Right of opposition pursuant to Article 21 of the GDPR:

Right of opposition on the basis of a particular situation:

Pursuant to Art. 21 (1) of the GDPR, the data subject has the right, on the basis of a particular situation, to oppose the processing of their personal data at any time.

In the event of opposition we will no longer process the personal data unless it is possible to demonstrate convincing legal bases for the processing which take priority over the interests, rights and freedom of the data subject (e.g. to initiate or defend in a legal action).

Right of opposition for commercial purposes:

In addition, pursuant to Art. 21 (2) of the GDPR, the data subject has the right to oppose the use of their data for direct marketing. In similar cases, we will no longer use the data of the data subject for commercial purposes.

Opposition may be communicated in any format to the contact addresses indicated in Section 7 below.

The Italian Data Protection Authority can be contacted at the following addresses and numbers:

Address: Piazza di Monte Citorio n. 121 00186 ROMA

Fax: (+39) 06.69677.3785

Telephone: (+39) 06.696771

E-mail: garante@gpdp.it

If the processing of data is based on consent, the data subject may withdraw their consent at any time and independently of the fact that consent has been given before or after the coming into force of the GDPR. Withdrawal of consent shall not affect the legality of the processing carried out until the date of withdrawal.

Section 7

Contact address

For enquiries and comments regarding this online privacy policy, on the use of personal information or for any requests, contact:

Foodness Spa

Via dell’Agricoltura 8/10

46030 Curtatone (MN)

E-Mail: foodness@pec.it

Website: www.foodness.it

Privacy policy – Management of cookies

No personal datum is collected intentionally through Cookies.

Cookies are not used for the transmission of personal information; we do not use persistent cookies or other user tracking systems.

The use of so-called session cookies (which are not memorised on the user’s computer and are cancelled upon closing the browser) is limited to the transmission of session identifiers (casual numbers generated by the server) that facilitate secure and efficient browsing.

So-called session cookies are used instead of other techniques that could compromise the user’s privacy and do not collect any personal datum or other personal information.