Privacy Policy

Privacy policy

Dear user,

the protection of the privacy of our users and visitors who browse and use the services offered through our website is fundamentally important for us and we wish you to always feel protected.  For this reason, as we are aware that you have entrusted your data to us, we would like to share some simple information, in the form of this privacy policy, which will allow you to understand aspects concerning the processing of your personal data and, in particular, those collected and provided by you while browsing the website.

We would like to inform you that your personal data will be processed in compliance with the provisions of the European Regulation on personal data protection (Reg. UE 2016/679, hereinafter “GDPR”), as well as with the current and applicable privacy legislation (Italian Leg Decree 196/2003 and subsequent modifications and integrations, hereinafter “Privacy Code”) and in any case in compliance with the principles of lawfulness, correctness and transparency.

We also wish to inform you that the information note is provided only for the website and its possible sub-domains, and not for other websites which may be consulted by the user through specific links. The website is owned and managed by F.lli De Cecco di Filippo Fara San Martino S.p.A. (hereinafter “De Cecco”). Please read this Privacy Policy carefully before submitting any personal information and/or filling in any electronic form on the website. We reserve the right to modify the terms of the Privacy Policy at any time, when the website is updated, and these changes will take effect on the day of the update.

Furthermore, specific information on the processing of collected data relating, for example, to registration procedures to the portal, other requests for services or the participation in promotional initiatives, may be contained in specific information notes within subsections of the portal, which we invite you to read.

By using the De Cecco website, you give your consent to the collection, use and possible communication of your personal data to the Group companies, in accordance with this Privacy Policy. Should you not wish to authorise these, please do not use the services provided by the platform.

The website and its services are intended for adults. We do not collect personal data relating to subjects under the age of 18. At the request of users, we will promptly delete all personal data inadvertently collected which relates to subjects under the age of 18.

Who is the Data Controller?

Your personal data will be processed by F.lli De Cecco di Filippo Fara San Martino S.p.A. (herein after “De Cecco”) with registered offices in Via F. De Cecco, Zona Industriale, 66015, Fara San Martino (CH)-Italy, telephone number 0872/9861, as Data Controller.

What types of data will be processed and for what purpose?

Personal data means any information which could allow your identification.

In particular, through browsing the website the following can be collected:

  • Navigation data: computer systems and software procedures used to operate this website acquire, during the normal course of their routines, some personal data which are then transmitted when using Internet communication protocols. This is information that by its nature could, through associations and processing with data held by third parties, allow identifying you as a user and visitor (e.g. IP address, domain names of computers used by users/visitors connecting to the website, etc.); these data are collected automatically and exclusively in order to allow you to browse the website and, completely anonymously, they may also be used for statistical surveys;
  • Data provided by you voluntarily and directly such as, by way of example, name, surname and contact details. Your request for information or services provided on the website could result in De Cecco’s acquisition of the sender’s address and/or of any other personal data, which will be processed exclusively to answer the request, or to provide the related service, and therefore your consent may not be required. Should you wish to enjoy additional services offered through the portal, for example in order to receive the newsletter informing you about De Cecco products, or commercial communications, invitations to events or to take part in competitions, or targeted promotional offers, you may be asked to provide the related consent.

De Cecco uses cookies and, therefore, invites you to read the Cookie Policy (


How is your data used?

Your personal data will be processed with or without the aid of IT and electronic tools and may consist of any operation among those indicated in Art. 4, item 2 of the GDPR, including collection, registration, organisation, preservation, consultation, analysis, matching, processing, modification, selection, extraction, comparison, use, interconnection, cross-referencing, blocking, communication, deletion and destruction, according to the overall process concerning the intended purposes.

In any case, the processing will be carried out adopting technical and organisational security measures appropriate to the processing risks in accordance with the provisions of Art. 32 of the GDPR.


How long is your data stored for? 

Your personal data will be processed for the time strictly necessary to achieve the purposes relevant on each occasion, and in any case will not be retained for more than 10 years.

What is the nature of providing your data?

Apart from what we have specified for navigation data which will be collected automatically, as a user/visitor you will be free to provide your personal data. However, failure to provide the requested personal data marked with a specific asterisk may only result in the impossibility to use the services requested.

Who can access your data and to whom may they be transmitted?

In order to provide the services offered through the website, the Data Controller may make use of third parties, who will act on its behalf as Data Processors. The updated list of Data Processors is available from the Data Controller.

Furthermore, your personal data will not be disclosed, but may be made accessible to employees and/or collaborators of De Cecco or De Cecco Group companies, as well as to employees and/or collaborators who work under the direct authority of the Data Processors, and who will operate in their capacity as authorised subjects and/or system administrators.


Where may your personal data be transmitted?

The personal data will be processed in the Republic of San Marin as a non-European country. This transfer will occur, however, by adopting suitable guarantees in compliance with the provisions of art 46 of the GDPR.


The Data Protection Officer (DPO) and their contact details

De Cecco has decided to use a data protection officer. Our data protection officer (DPO) is Giulio Maria Garofalo, who may be contacted at the email address: [email protected].


What are your rights?

As data subject, you may exercise the rights set forth in Articles 15 and following of the GDPR. In particular, the data subject has the:

  1. right of access: obtain confirmation of the existence or not of the processing of their personal data and in this case to gain access to personal data and the following information (i.e. processing purposes, categories of personal data, recipients to whom the data are or will be transmitted, the storage period, the information on the origin of the data if not collected directly from the person concerned, and the existence of adequate guarantees in case of data transfers to countries outside the EU) as well as to obtain a copy of the personal data being processed;
  2. right of rectification: rectify inaccurate personal data concerning them without undue delay, or supplement incomplete data;
  3. right of deletion: delete personal data concerning them without undue delay, if one of the following six reasons are involved:
    • the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
    • revocation of the consent given for the processing, if there is no other legal basis;
    • objection to processing, if there is no prevailing legitimate reason;
    • the personal data have been unlawfully processed;
    • the personal data must be erased in order to comply with a legal obligation under EU law;
    • the personal data have been collected in relation to the offer of information society services pursuant to Art. 8.
  4. Right to limit the processing: limit the processing when:
    • the accuracy of the personal data is contested by the data subject, for the period required for the data controller to verify the accuracy of the personal data;
    • the processing is unlawful and the data subject opposes the deletion of the personal data and requests the restriction of their use instead;
    • the data controller no longer requires the personal data for processing purposes, but they are required by the data subject for the legal establishment, exercise or defence of a right;
    • the data subject has objected to processing pending verification of whether the legitimate grounds of the controller override those of the data subject;
  5. right to portability: the data subject has the right to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used and machine-readable format and has the right to transmit said data to another controller;
  6. the right to object to the processing: the data subject has the right to object to the processing of personal data concerning him or her for direct marketing, including profiling to the extent that it is related to such direct marketing, at any time.


The rights may be exercised by sending us a specific email to the address [email protected].


Please also remember that should you believe the processing of personal data carried out by us violates the provisions of the current privacy legislation, you can always lodge a complaint with the Data Protection Authorities, as envisaged by art 77 of the GDPR or take legal action in the appropriate courts of law.