Information on the processing of personal data
made pursuant to art. 13 EU Reg. 2016/679
Dear user,
for us the protection of your personal data is of fundamental importance and we want you to always feel protected. For this reason, we would like to share with you some simple information that will allow you to understand aspects regarding the processing of your personal data and in particular that collected and provided by you for the purposes described below.
We would like to let you know that the processing of your personal data will take place in compliance with the provisions of the European Regulation on the protection of personal data (EU Reg. 2016/679, hereinafter “GDPR”), as well as the current and applicable privacy legislation (Legislative Decree 196/2003 ss.mm.ii., hereinafter “Privacy Code”) and in any case in compliance with the principles of lawfulness, correctness and transparency.
This information is provided pursuant to art. 13 of the GDPR. We invite you to read it carefully before providing your personal data and using the related services.
Data controller and contact details
Your personal data will be processed by F.lli De Cecco di Filippo Fara San Martino SpA (hereinafter, “De Cecco”) with headquarters in via F. De Cecco, zona Industriale, 66015, Fara San Martino (CH)-Italy, tel no. 0872 9861, as Data Controller.
The Data Protection Officer (DPO) and his contact details
De Cecco has decided to make use of a Personal Data Protection Officer. Our Personal Data Protection Officer (DPO) is the lawyer. Giulio Maria Garofalo, reachable at the email address [email protected].
Purpose of the processing, data processed and legal basis of the processing
The personal data necessarily requested (i.e. name, surname, city, country, e-mail, contact reasons) or any further data optionally provided by you to Customer Service (i.e. purchase order or data connected to the same, telephone contact or, any allergies to substances potentially contained in De Cecco products) may be processed for the pursuit of the following purposes:
- Request for information/customer assistance. Such data will be processed within the limits strictly necessary in order to process your request and follow up on all operational and/or verification activities connected to it. The provision of your data for this purpose is necessary. Failure to provide them will prevent you from forwarding the request for information and/or assistance or from receiving correct feedback. The processing of such data will take place to follow up on your pre-contractual requests or in execution of the contract (art. 6, par. 1, letter B GDPR).
- Compliance with legal obligations. Your personal data may also be processed for the purpose of fulfilling legal obligations or specific sector regulations (art. 6, par. 1, letter C GDPR). Other than the data spontaneously provided by the interested party, De Cecco does not process so-called data. details of the interested parties (art. 9 par. I GDPR) and invites the interested parties, where possible, not to communicate this type of data, which will in any case be processed only in the presence of a lawful legal basis pursuant to the aforementioned article of the Reg. EU 2016/679.
- Exercise of rights in court. Your personal data may be processed by the Data Controller in order to initiate or manage any disputes (judicial or extrajudicial) or complaints arising due to or in connection with the request for information and/or assistance or the product purchase contract (art. 6, par. 1, letter.
Method of processing personal data
The processing of your personal data will take place with the aid of IT and telematic tools. In any case, the processing will take place by adopting the technical and organizational security measures appropriate to the risk of the processing in accordance with the provisions of the art. 32 of the GDPR.
Terms of retention of personal data
Personal data will be processed for the time strictly necessary to pursue the purposes described above and in particular:
- for the purpose of requesting information, your personal data will be stored exclusively for a maximum of 6 months from their collection;
- for customer support purposes your personal data will be retained exclusively for a maximum of 3 years from their collection;
- for the fulfillment of legal obligations, the data will be stored according to the terms established by the applicable legislation;
- for the protection of rights in court, the data will be retained for a period of 10 years from the date of final decision becoming final.
Communication and dissemination of personal data
Your personal data will not be disclosed to undetermined recipients, but may be made accessible to
following categories of subjects:
- Employees and/or collaborators of De Cecco or of the companies of the De Cecco Group;
- External companies that offer services related to the purposes (e.g. hosting services, etc.) that operate as Data Controllers, pursuant to art. 28 of the GDPR. The updated list of Data Processors is available from the Data Controller.
- Public authorities (e.g. judicial authorities in case of litigation)
- Charitable organizations or associations (in the case of mutual aid requests)
Transfer of personal data outside the EU
Personal data will not be transferred outside the EU
What are your rights?
As an interested party you will be able to exercise, where the conditions applythe rights referred to in the articles. 15 et seq. of the GDPR. In particular:
- the right of access: obtain confirmation of the existence or otherwise of processing of personal data and in this case to obtain access to the personal data and the following information (i.e. purposes of processing, categories of personal data, the recipients to whom the data are or will be communicated, the retention period, information on the origin of the data if not collected directly from the interested party, and the existence of adequate guarantees in case of data transfers to non-EU countries) as well as obtaining a copy of the data personal data subject to processing;
- the right of rectification: obtain the rectification of inaccurate personal data concerning him without unjustified delay, or obtain the integration of incomplete ones;
- the right of cancellation: obtain the deletion of personal data concerning him without unjustified delay, if one of the following reasons exists:
• the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
• the revocation of the consent on which the processing is based, if there is no other legal basis;
• opposition to processing, if there is no overriding legitimate reason;
• the personal data have been processed unlawfully;
• personal data must be deleted to comply with a legal obligation under EU law;
• the personal data were collected in relation to the offer of information society services pursuant to art. 8. - The right to limit processing: to obtain the limitation of processing when:
• the interested party disputes the accuracy of the personal data, during the period necessary for the owner of the
processing to verify the accuracy of personal data;
• the processing is unlawful and the interested party opposes the deletion of the personal data and requests instead
that its use is limited;
• although the data controller no longer needs the personal data for the purposes of the processing
are necessary for the interested party to ascertain, exercise or defend a right in the office
judicial;
• the interested party has objected to the processing pending verification regarding the possible prevalence of
legitimate reasons of the data controller compared to those of the interested party; - the right to portability: the interested party has the right to receive in a structured format, commonly used and
readable by automatic device the personal data concerning him provided to a data controller
processing and has the right to transmit such data to another data controller; - the right to object to the processing: It is possible to object to the processing of your personal data: a) for reasons related to the particular situation of the interested party, to be specified in the request; b) (without the need to justify the opposition) when the data are processed for direct marketing purposes.
The exercise of the rights may take place by sending us a specific communication via email
at the address [email protected].
We also remind you that if you believe that the processing of personal data carried out by us is in violation of the provisions of current privacy legislation, you can always lodge a complaint with the Guarantor Authority for the protection of personal data, as required by art. 77 of the GDPR or take action in the appropriate judicial offices.
