We would like to inform you that your personal data will be processed in compliance with the provisions of the European Regulation on personal data protection (Reg. UE 2016/679, hereinafter “GDPR”), as well as with the current and applicable privacy legislation (Italian Leg Decree 196/2003 and subsequent modifications and integrations, hereinafter “Privacy Code”) and in any case in compliance with the principles of lawfulness, correctness and transparency.
Furthermore, specific information on the processing of collected data relating, for example, to registration procedures to the portal, other requests for services or the participation in promotional initiatives, may be contained in specific information notes within subsections of the portal, which we invite you to read.
The website and its services are intended for adults. We do not collect personal data relating to subjects under the age of 18. At the request of users, we will promptly delete all personal data inadvertently collected which relates to subjects under the age of 18.
Who is the Data Controller?
Your personal data will be processed by F.lli De Cecco di Filippo Fara San Martino S.p.A. (herein after “De Cecco”) with registered offices in Via F. De Cecco, Zona Industriale, 66015, Fara San Martino (CH)-Italy, telephone number 0872/9861, as Data Controller.
What types of data will be processed and for what purpose?
Personal data means any information which could allow your identification.
In particular, through browsing the website the following can be collected:
How is your data used?
Your personal data will be processed with or without the aid of IT and electronic tools and may consist of any operation among those indicated in Art. 4, item 2 of the GDPR, including collection, registration, organisation, preservation, consultation, analysis, matching, processing, modification, selection, extraction, comparison, use, interconnection, cross-referencing, blocking, communication, deletion and destruction, according to the overall process concerning the intended purposes.
In any case, the processing will be carried out adopting technical and organisational security measures appropriate to the processing risks in accordance with the provisions of Art. 32 of the GDPR.
How long is your data stored for?
Your personal data will be processed for the time strictly necessary to achieve the purposes relevant on each occasion, and in any case will not be retained for more than 10 years.
What is the nature of providing your data?
Apart from what we have specified for navigation data which will be collected automatically, as a user/visitor you will be free to provide your personal data. However, failure to provide the requested personal data marked with a specific asterisk may only result in the impossibility to use the services requested.
Who can access your data and to whom may they be transmitted?
In order to provide the services offered through the website, the Data Controller may make use of third parties, who will act on its behalf as Data Processors. The updated list of Data Processors is available from the Data Controller.
Furthermore, your personal data will not be disclosed, but may be made accessible to employees and/or collaborators of De Cecco or De Cecco Group companies, as well as to employees and/or collaborators who work under the direct authority of the Data Processors, and who will operate in their capacity as authorised subjects and/or system administrators.
Where may your personal data be transmitted?
The personal data will be processed in the Republic of San Marin as a non-European country. This transfer will occur, however, by adopting suitable guarantees in compliance with the provisions of art 46 of the GDPR.
The Data Protection Officer (DPO) and their contact details
De Cecco has decided to use a data protection officer. Our data protection officer (DPO) is Giulio Maria Garofalo, who may be contacted at the email address: [email protected].
What are your rights?
As data subject, you may exercise the rights set forth in Articles 15 and following of the GDPR. In particular, the data subject has the:
The rights may be exercised by sending us a specific email to the address [email protected].
Please also remember that should you believe the processing of personal data carried out by us violates the provisions of the current privacy legislation, you can always lodge a complaint with the Data Protection Authorities, as envisaged by art 77 of the GDPR or take legal action in the appropriate courts of law.