Information document pursuant to and for the purposes of Article 13 Regulation (EU) 2016/679 (GDPR) the data subject/user – and Art. 130 – Unwanted communications Legislative Decree 196/2003 – contractor
BECAUSE THIS INFORMATION
Pursuant to Regulation (EU) 2016/679 (hereinafter “GDPR”), this page describes how personal data is processed. This is a disclosure that is made pursuant to Art. 13 GDPR. This information does not apply to other third-party websites that may be consulted through links on this website, for which no responsibility is accepted.
- WHO IS THE DATA CONTROLLER? HOW TO CONTACT HIM?
The data controller is A&D S.p.A. Gruppo Alimentare e Dietetico . Strada 2, Palazzo C1, Assago Milanofiori (MI), tel number +39 02 5770791, e-mail address privacy@aedgruppo.it.
- Personal data that can be processed
Personal data: any information concerning an identified or identifiable natural person (“data subject“); an identifiable person is any natural person who can be identified, directly or indirectly, by reference in particular to an identifier such as a name, an identification number, location data, an online identifier, or to one or more features of his or her physical, physiological, genetic, mental, economic, cultural or social identity (C26, C27, C30 GDPR).
Contractor/user data.
Navigation data
The computer systems and software procedures used to operate this site acquire, in the course of their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes IP addresses or domain names of computers and terminals used by users, the addresses in URI/URL (Uniform Resource Identifier/Locator) notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to the user’s operating system and computer environment.
Data disclosed voluntarily
The optional, explicit and voluntary sending of messages to the contact addresses indicated on this site involves the subsequent acquisition of the sender’s address, which is necessary to respond to requests, as well as any other personal data entered.
Information about the processing of personal data carried out through social media platforms
About the processing of personal data carried out by the operators of the Social Media platforms used by the Owner, please refer to the information rendered by them through their respective privacy policies. The Owner processes personal data conferred by users through the pages of dedicated Social Media platforms, in order to manage interactions with users (comments, public posts, etc.) and in compliance with current regulations.
Cookies and other tracking systems. What are they? What are they for?
For Cookies and other tracking systems see the cookie policy found in the footer of the site and at the following link.
- PURPOSE OF PROCESSING, LEGAL BASIS, DATA RETENTION PERIOD, AND NATURE OF PROVISION OF DATA
| PURPOSE OF PROCESSING | LEGAL BASIS. | RETENTION PERIOD | NATURE OF CONFERMENT |
Navigation on this website. The data required for the use of web services, are also processed for the purpose of: -obtain statistical information on the use of services (most visited pages, number of visitors by time slot or daily, geographical areas of origin, etc.); -check the proper functioning of the services offered. The data will be used to ascertain liability in case of hypothetical computer crimes against the site. | Processing is necessary for the pursuit of the legitimate interest of the data controller or a third party, provided that the interests or the fundamental rights and freedoms of the data subject requiring the protection of personal data do not prevail, taking into account the reasonable expectations of the data subject and the activities strictly necessary for the operation of the site and navigation itself (Art. 6(1)(f) and C47 of the GDPR)
| The storage of browsing data will be for as long as the duration of the browsing session and in any case will not persist for more than seven days (except for any need for the investigation of crimes by the judicial authority).
| The provision of data is necessary to navigate the website.
|
Use of cookies and comparable technologies. See the cookie policy in the footer of the site. | For non-technical necessary cookies and comparable technologies, processing is based on consent to the processing of personal data (Art. 6 par. 1 letter a and C42, C43 of the GDPR). Consent is given through the site’s banner and cookie policy. | See the cookie policy in the footer of the site. | See the cookie policy in the footer of the site. |
In addition to navigation, personal data will be processed for:
| PURPOSE OF PROCESSING | LEGAL BASIS. | PERIOD OF STORAGE | NATURE OF CONFERMENT |
A) CONTACTS, sending contact requests, information, assistance
| the processing is necessary for the performance of a contract to which the data subject is party or the performance of pre-contractual measures taken at the request of the data subject; (C44) Art. 6 par. 1(b) of the GDPR | Maximum 12 months | Conferring is necessary. Failure to provide the necessary data will result in the inability to be contacted and receive information |
| B) MANAGEMENT OF YOUR REQUESTS and requests of other data subjects, pursuant to Art. 15 et seq. of the GDPR (rights of the data subject) | Processing is necessary to fulfill a legal obligation to which the data controller is subject (C45) Art. 6 par. 1(c) of the GDPR | 5 years from the closing of the application, barring litigation
| The provision of personal data is mandatory, as it is indispensable in order to be able to execute the obligations of the Law.
|
- TO WHOM WILL PERSONAL DATA BE DISCLOSED? RECIPIENTS OF THE DATA
Personal data will be disclosed, also according to the purposes envisaged in specific areas, to individuals who will process the data as autonomous Data Controllers, or Data Processors (Art. 28 GDPR) and processed by individuals (Art. 29 GDPR) acting under the authority of the Data Controller and Data Processors on the basis of specific instructions given regarding the purposes and methods of processing, for specific purposes according to the area of reference. Data will be disclosed to recipients in the following categories:
- Subjects based in Italy and EEA countries, who provide services for the website and communication networks, including email, host and website management;
- Studies or companies within the scope of assistance and consulting relationships (including Parent and Group companies);
- Competent authorities for fulfillment of legal obligations and/or provisions of public bodies, upon request
The list of Data Processors is available by writing to privacy@aedgruppo.it or the other contact details above.
- WILL THE DATA BE TRANSFERRED TO NON-SEE COUNTRIES?
Personal data will not be transferred to countries outside the EEA
- IS THERE AN AUTOMATED PROCESS?
Personal data will be subject to traditional manual, electronic, and automated processing. It should be noted that fully automated decision-making processes are not carried out.
- WHAT ARE YOUR RIGHTS? HOW CAN HE EXERCISE THEM?
You may assert your rights as expressed in Art. 15 et seq. GDPR, by contacting the Data Controller at the e-mail address privacy@aedgruppo.it, or at the above contacts or. You have the right, at any time, to request access to your personal data (art.15), rectification (art.16), deletion of the same (art.17), and restriction of processing (art.18). The data controller shall communicate (art. 19) to each of the recipients to whom the personal data were transmitted any rectification or deletion or restriction of processing carried out. The data controller shall notify the data subject of these recipients if the data subject so requests. In the cases provided for, you have the right to the portability of your data (art.20), in which case it will be provided to you in a structured, commonly used, machine-readable format. He has the right to object in the cases provided (art.21), at any time, to the processing of data based on legitimate interest.
In the event that the data subject believes that the processing of personal data carried out by the Data Controller is in violation of the provisions of Regulation (EU) 2016/679, the data subject has the right to lodge a complaint with the Supervisory Authority, in particular in the member state where he or she normally resides or works or in the place where the alleged violation of the regulation occurred (Privacy Guarantor https://www.garanteprivacy.it/), or to take appropriate legal action.
- CHANGES TO THE DISCLOSURE
The Owner reserves the right to change, update, add or remove portions of this policy. In order to facilitate verification and modification of the text, the disclosure will contain the date it was updated.
Update date: March 31, 2022