Information on the privacy policy for Customers and Suppliers and for their respective contacts pursuant to articles 13/14 and art. 21 of the General Data Protection Regulation (hereinafter GDPR) of Foodness Spa (hereinafter referred to as “Foodness” or “we”)

Who is the Data Controller? Who can I contact?

Name and address of the Data Controller:

Foodness Spa, Via Dell’Agricoltura 8/10, 46030 Curtatone (MN)

E-Mail: foodness@pec.it

Web site: www.foodness.it

What are the categories of data processed by FOODNESS and for what purposes?

We process the following categories of customer and supplier data: company name, legal form, registered office, legal representatives and contact persons (name, surname, e-mail address and telephone/fax numbers) and billing data.

This data is stored and processed where necessary

  • for the preparation and execution of a contract (including management of customer relations);
  • for billing purposes;
  • for marketing purposes, promotional, commercial and advertising activities, such as for example sending material and advertisements connected with the products and/or services marketed by Foodness, sending promotional e-mails and sms and sending newsletters, e-books, provided that there is no opposition to the use of data for commercial purposes

What is our legal basis for carrying out the data processing?

The legal basis for the processing of personal data is the General Data Protection Regulation (GDPR) and in particular:

  • Art. 6 (1) (b) of the GDPR, which allows processing for the purposes of concluding and executing contracts;
  • Art. 6 (1) (f) of the GDPR, which allows processing for the protection of our legitimate interests, provided that there is no overriding interest of the natural person concerned that prevents such processing.

We also process personal data on the basis of the consent provided by the interested parties. Interested parties may withdraw their consent at any time. Such action will not be retroactive. However, the withdrawal of consent will prevent us from further processing the subject’s personal data. The other regulations that allow the processing of data (art.6 (1) (b) and art.6 (1) (f) of the GDPR) will remain unchanged.

With whom do we share the data provided? Where is the personal data stored?

We share personal information that allows identification with recipients within the FOODNESS group who need to know this information in the performance of their functions and obligations, and with third parties in charge of data processing on our behalf, as service providers, in turn bound by the contracts provided for by the law on data protection, or to which FOODNESS must provide information in order to fulfill its legal obligations. We share personal information that allows identification with FOODNESS business partners who provide products and services sold by FOODNESS.

Personal data is stored on FOODNESS servers in the European Union.

Is the data transferred to recipients outside the European Union or the European Economic Area (i.e. so-called third countries) or to international organisations?

The personal data of customers/suppliers will be transferred to third countries only if necessary for the execution of the contract.

How long does FOODNESS keep the data?

We keep personal data only for the time necessary to achieve the purposes described above and then we delete it, and in any case the data will be deleted in accordance with the retention periods provided by law

What are the rights of the Data Subject? Where can I file a complaint?

Art. 15 of the GDPR provides for the right to be informed about the data in our possession relating to the subject.

When there is incorrect or outdated information, the subject has the right to request its correction at any time, pursuant to art. 16 of the GDPR.

Furthermore, pursuant to art. 17 of the GDPR, the subject may have the right to request the cancellation of their personal data, in the absence of our greater powers or rights in favour of the continuation of the processing.

Finally, pursuant to art. 18 of the GDPR, the subject has the right to restrict/limit the processing of their personal data.

To obtain information regarding the data we hold, for its correction, cancellation or for the restriction/limitation of processing, please contact the address indicated in point 1.

You may request the information provided to us be sent in a structured and common format that can be read by automatic devices, or the transmission of such information to third parties.

Furthermore, the interested party has the right to oppose the processing pursuant to art. 21 of the GDPR. See the information box below.

To contact the competent supervisory authority,

The Guarantor for the protection of personal data, write to:

Privacy Authority

Piazza di Monte Citorio n. 121 00186 ROMA

Tel.: (+39) 06.696771

Email: garante@gpdp.it

Is sharing or updating of data mandatory?

Providing your data is voluntary. However, we are authorised to process the personal data of the subjects with whom we have contractual or pre-contractual relationships, to conclude and execute contracts and for billing purposes.

Is the personal data provided used for automated decision-making processes?

In principle, we do not use customer/supplier data for automated decision-making processes as described in art. 22 of the GDPR.

Is the data used for profiling/scoring?

No

Right to object pursuant to art. 21 GDPR:

  1. Right to object based on a particular situation:

Pursuant to art. 21 (1) of the GDPR, the interested party has the right to object to the processing of their personal data at any time when there is a particular situation. In the event of an objection, we will stop the processing of personal data unless there are convincing and legitimate legal bases in our favour, prior to the interests of the subject (e.g. to assert our rights or defend ourselves in the event of lawsuits)

  1. Right to object to processing for commercial purposes:

Pursuant to art. 21 (2) of the GDPR, the subject also has the right to object to the processing for direct commercial purposes. In such an event, we will stop using the personal information received for promotional purposes.

An objection can be sent in any format to the addresses indicated in paragraph 1.

Privacy policy – Online privacy

The protection of your personal information is of primary importance to us. We will use the identification data that the user decides to provide us with, or that in any case has been collected during the use of the website, only as described in this online privacy policy and in accordance with current data protection regulations.

This online privacy policy specifies the type, purpose and ends of the collection, processing and use of the personal information that the user chooses to provide to us while browsing and/or that may be transmitted through the Foodness website (www.foodness.it) (hereinafter “our site”). Please note that you are not required to provide any personal information to use our site.

Users who provide personal information for the collection, storage or use by Foodness, have the right to be informed about the methods of storage, use and transfer of the information and have the right to access the information and to control its use, pursuant to Legislative Decree 196 of 30 June 2003 (Code regarding the protection of personal data) and (effective from 25 May 2018) of the GDPR (General Data Protection Regulation) hereinafter “the Law”. The expression Personal data means any information relating to identifiable persons, even indirectly, by referring to any other information, including a personal identification number, such as name, e-mail address, telephone number and the like. For more information on the right of access, rectification and deletion of any personal data that we hold, on the exercise of these rights and for our contacts, please consult section 6 and section 7.

As required by law, the data controller is the legal representative of Foodness Spa, Via dell’Agricoltura 8/10, 46030 Curtatone (below “Foodness“). For more information on Foodness see section 7.

The competent data protection authority is the Guarantor for the protection of personal data www.garanteprivacy.it. If the user thinks the data processing carried out by us is not compliant with this online privacy policy or with the laws and regulations in force, they can file a complaint with the Guarantor for the protection of their personal data. For completeness in certain circumstances, as required by art. 157 of Legislative Decree no. 196/2003 (not subject to the normal management of the site), Foodness must transmit information and updates to the competent authorities so that the processing of personal data can be checked. In these cases, failure to provide this information will result in administrative penalties.

Section 1

Information collected while using our site and use of such information

  1. a) Contact forms

Our site offers the opportunity to provide us with personal information by filling out a contact form, for example to request a quote or information relating to our products, for interest in a job offer from Foodness. The information provided may include your name, address, e-mail address and telephone number, age and date of birth.

We use the information to:

provide the user with the information, products and services requested; to customise the user experience on our site and make sure that the site is displayed in the best way for the user and for the computer being used.

Data transferred via the internet (e.g. by e-mail transmission) is subject to security risks. It is, therefore, not possible to guarantee complete protection against access by third parties to the transferred data.

  1. b) Log information

While browsing the site, standard log information and details of user behaviour patterns are collected, for example:

date and time of visit; type of browser used and version; operating system; Internet Protocol (IP) address complete with clicks and related URLs to and from our site, for example websites visited and products viewed or searched for, page response times, download errors, duration of visits to certain pages, interaction with pages (e.g. scrolling, clicking and mouse hovering) and methods used to exit the page types of plug-in and version for system administration

We have a legitimate interest in treating this data anonymously since it allows us to improve and develop our site. We are in no way interested in identifying the user who visits our site. The data collected in this way will in no way be associated with any user identification information from any other source.

  1. c) Newsletter and commercial offers

Our site offers the user the possibility to download and/or register to receive commercial offers sent by us or our newsletter (hereinafter “newsletter”). To register, the user must enter a valid e-mail address. When registering for commercial offers or for the newsletter, the IP address, date and time will be saved in our archives. We need this to protect ourselves in the event that a third party improperly and without consent uses the user’s e-mail address to register for our commercial offers/newsletter. No other data will be collected. The data collected in this way is used for the sole purpose of sending the user commercial offers or newsletters. The data is not transferred to third parties and is in no way combined with any information collected on our site. In case of downloading commercial offers or newsletters, we use the tracking system offered by Google Analytics (see below). You can unsubscribe from commercial offers/newsletters at any time. Further details are contained in the confirmation e-mail and in each commercial offer/newsletter.

For e-mail communications, we use services and software provided by third parties and track user activities to ensure that the content sent is targeted and to improve the user experience.

  1. e) Cookies

Our site uses Cookies, Pixel Tags, Local Shared Objects (otherwise known as “Flash Cookies”) and similar technologies while browsing to allow certain specific features of our site and to facilitate the analysis of user behaviour on the site in order to improve the user experience.

For more information on the cookies used and how they work, please visit our cookie policy.

To avoid the installation of cookies, adjust your browser settings accordingly. However, this operation could preclude the user from making full use of all the functions of the site.

  1. f) Use of the Google Analytics IP anonymisation function

Our site uses Google Analytics, a web analytics service offered by… (hereinafter “Google“). Google Analytics uses so-called “cookies”, text files stored on the user’s computer, to facilitate the analysis of the use of the site by the user. The information generated by these cookies, such as the time, place and frequency of visits to our site, including IP addresses, is transmitted to Google in the United States for storage.

Google declares that the IP addresses sent by the user’s browser will never be associated with other data held by Google.

Our site uses Google Analytics with the IP anonymisation function. For this reason, Google shortens and then anonymises IP addresses before transferring them from member states of the European Union or signatory states to the Agreement on the European Economic Area.

Google will use this information on our behalf to evaluate the use of our site by the user, to compile reports on the activity on our site for us, and to provide us with other services related to the use of the site and the internet. We use this information for statistical purposes. Google may also transfer this information to third parties where required by law or when the data is processed by third parties on behalf of Google.

We use Google Analytics including the Universal Analytics function. Universal Analytics allows us to analyse the activities on our site across different devices (e.g. if the user accesses our site via a laptop and tablet at a later time). The process consists of assigning a username alias to each user. This assignment is done upon registration or login with a username and password. Google will not receive any personal information. The addition of additional features to Google Analytics through Universal Analytics does not diminish or invalidate the security measures adopted for the protection of personal data, such as IP obscuring or additional browser applications.

The user can avoid the installation of cookies by adjusting the browser settings to this effect. However, this operation could preclude the user from making full use of all the functions of the site.

Google offers a deactivation function in the most common browsers, the user, therefore, has greater control over the data collected and processed by Google. By activating this option, no information regarding the visit to our site will be transmitted to Google Analytics. However, activation will not prevent information from being transmitted to us or our web analytics service providers. For more information on the deactivation option provided by Google and its activation, visit the page https://tools.google.com/dlpage/gaoptout.

Marketing services can be deactivated at the following link (https://support.google.com/ads/answer/2662922?hl=it&ref_topic=7048998)

For more information on Google’s terms of use and data protection visit the page http://www.google.com/analytics/terms.

  1. g) Use of Google Remarketing

This site uses the remarketing function of Google Inc. (see the Google Inc. address reported in point f above). This feature is designed to report interest-based commercial messages through the Google promotional network. The user’s browser will save cookies that make it possible to recognise this user on sites that belong to the Google promotional network. These pages can show users promotional messages related to the contents previously visited by them on sites that use the Google Remarketing function. Google declares that it does not collect any personal data in this process. The user can disable the Google Remarketing function from the page … Alternatively, you can disable the use of cookies for interest-based promotional messages through the Advertising Network Initiative by following the instructions on the page http://www.networkadvertising.org/managing/opt_out.asp

  1. h) Use of Hotjar

To improve the browsing experience on our sites, we use services and software of Hotjar Ltd. (Level 2, St Julian’s Business Center, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta[AB1] , http://www.hotjar.com). Hotjar allows us to measure and evaluate user behaviour on our site. The purpose is to improve the user’s browsing experience, remember their preferences, solve technical problems, analyse trends and generally improve our site. For these purposes, Hotjar places cookies on visitors’ devices to collect non-personal information on the device and browser (for example the IP address of the device in anonymous format, screen resolution, device type, operating system and browser type, country from which the site is accessed, language settings), relating to user interactions (such as mouse movements, keyboard entries, scrolling, etc.) and log data (such as pages visited, time spent visiting a page, URL and referring domain, date and time of access, etc.). Hotjar may store such data collected from users in an anonymous format. For more information on Hotjar’s privacy policies, see https://www.hotjar.com/privacy.

To prevent Hotjar from processing your data, you can disable the use of cookies in your browser settings and delete any active cookies. You may also object to the collection and processing by Hotjar on the page https://www.hotjar.com/opt-out.

Section 2

Storage and transmission of information to third parties

The information will be stored on our secure servers and may be shared with our service providers who assist us in targeted communication to specific audiences, personalised advertising and optimisation of our site.

Personal information may be transferred outside Italy and, in some cases, outside the European Economic Area (EEA) where necessary for the purposes of the processing described above (including the transfer of confidential information to third parties). In such cases, personnel operating outside the EEA, our employee or our supplier’s employee, may process your personal information. By submitting your personal information, you agree to this transfer, storage and processing.

In cases where your personal information is transmitted outside the EEA, we guarantee that we have put in place adequate measures to protect users’ personal information and that we always ensure that it is handled as required by law.

Section 3

Data storage period

Personal data is kept only for the period necessary to achieve the purposes described above. Personal data will be deleted when it is no longer necessary for the purposes described or when the retention periods provided for by law have expired.

Section 4

Links to other websites

This privacy policy does not cover links contained on our site that lead to other sites. It is advisable to read the information of the other sites visited.

Section 5

Changes to our online privacy policy

Foodness may change the online privacy policy from time to time. The changes will be communicated through updates on the site. It is advisable to access the site regularly to evaluate the acceptance of any changes.

Section 6

Access to personal information/right to rectification and cancellation

According to article 15 of the GDPR (Right of Access of the interested party) the user has the right to know exactly what personal information is contained in our archives.

If the information in our possession is out of date or incorrect, the user has the right to request that the data be corrected and updated. According to article 15 of the GDPR (right of rectification) the user can also request the deletion of their data, provided that there is no regulatory obligation or a legitimate interest of greater importance in maintaining such data.

The right to object pursuant to the article of the GDPR;

Right to object on the basis of a particular situation:

Pursuant to Art. 21 (1) of the GDPR, the subject has the right, on the basis of a particular situation, to object to the processing of their personal data at any time.

In the event of an objection, we will no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject (for example, the establishment, exercise or defence of legal claims).

Right to object for commercial purposes:

Furthermore, pursuant to Art. 21 (2) of the GDPR, the subject has the right to object to the use of their data for direct marketing. In such cases, we will no longer use the data of the subject concerned for commercial purposes.

An objection may be sent in any format to the addresses indicated in Section 7 below.

The Guarantor for the protection of personal data can be contacted at the following addresses:

Address: Piazza di Monte Citorio n. 121 00186 ROMA

Fax: (+39) 06.69677.3785

Telephone: (+39) 06.696771

E-mail: garante@gpdp.it

If the data processing is based on consent, the subject may withdraw this consent at any time and regardless of whether it was granted before or after the entry into force of the GDPR. Withdrawal of consent will not compromise the legality of the processing activities carried out up to the date of withdrawal.

Section 7

Contact address

For questions and comments relating to this online privacy policy, the use of personal information or any requests, please contact:

Foodness Spa

Via dell’Agricoltura 8/10

46030 Curtatone (MN)

E-Mail: foodness@pec.it

Web site: www.foodness.it

Privacy policy – Cookie management

No personal data is intentionally collected through cookies.

Cookies are not used to transmit personal information, we do not use persistent cookies, or other user tracking systems.

The use of so-called session cookies (which are not stored on the user’s computer and which are deleted when the browser is closed) is limited to the transmission of session identifiers (random numbers generated by the server) which favour safe and effective navigation.

The so-called session cookies are used instead of other techniques that could compromise the user’s privacy and do not collect any personal data or other personal information.