Privacy Policy

PRIVACY NOTICE REGARDING THE PROTECTION OF PERSONAL DATA

EU Regulation 2016/679 “General Data Protection Regulation”

Dear User,
In this document, La Fabbrica del Panforte Srl (hereinafter “La Fabbrica del Panforte Srl” or “Data Controller”), in its capacity as “data controller,” informs you about how the information contained on the website https://www.fabbricadelpanforte.com/ is managed with regard to the processing of personal data of users who visit the site. This notice is provided pursuant to Article 13 of EU Regulation 2016/679, the “General Data Protection Regulation” (hereinafter the “Regulation”), to those who access the website. Pursuant to the aforementioned Regulation, such processing will be based on the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality. “Data processing” means any operation or set of operations performed with or without the aid of automated processes and applied to personal data or sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure, or destruction.

1. Purpose of the processing for which the personal data is intended.

Your personal data will be processed by La Fabbrica del Panforte Srl for the following purposes:

1. handling your requests for information submitted via the email addresses listed on the website or in the “Contact Us” section;
2. to fulfill the contracts entered into or to be entered into with you and the related obligations;
3. compliance with obligations set forth in laws, regulations, and European legislation (e.g., accounting and tax requirements, administrative audits), as well as with directives issued by authorized authorities or bodies;
4. protection of contractual rights;
5. to obtain statistical information on the use of the services (most-visited pages, number of visitors by time of day or day of the week, geographic regions of origin, etc.);
6. to verify the effectiveness and proper functioning of the website exclusively in aggregate and anonymous form.

Your personal data will be collected directly from you; the processing will involve the following categories of data:

• Browsing data: The computer systems and software procedures used to operate this website collect, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the response from the server (successful, error, etc.), and other parameters related to the user’s operating system and IT environment.
• Identifying information: Sending communications via email to the addresses listed on the website or in the “Contact Us” section, subscribing to the newsletter or purchasing a product results in the subsequent collection of the sender’s email address as well as any other personal data provided (name, address, phone number, bank details, VAT number, tax ID, etc.);

intended solely to enable La Fabbrica del Panforte Srl to achieve the aforementioned purposes.

2. Legal basis for processing and legitimate interest.

The personal data processed for purpose 1) is considered to have been voluntarily provided by you; by sending a message via email or through the “Contact Us” section, you expressly accept this Privacy Policy. The legal basis for processing for purposes 2) and 3) consists of processing necessary for the performance of a contract to which you are a party and the legal obligations imposed on La Fabbrica del Panforte Srl by laws, regulations, European legislation, and provisions issued by authorized authorities or bodies (Art. 6, para. 1, letters b) and c) of the Regulation). The legal basis for processing for purpose 4) is the Data Controller’s legitimate interest in protecting its contractual rights through the appropriate channels (Article 6, paragraph 1, letter f of the Regulation).Personal data processed for purposes 5) and 6) will be processed based on the Data Controller’s legitimate interest in verifying the effectiveness and proper functioning of the website in order to implement any corrective and/or improvement measures to the website itself.

3. Any recipients or categories of recipients of personal data.

La Fabbrica del Panforte Srl will process your data using appropriate technical and organizational measures to ensure the integrity, confidentiality, and availability of your data. The designated staff will use paper-based records as well as electronic, IT, and telecommunications tools. The management of La Fabbrica del Panforte Srl and its employees may have access to your identifying data in accordance with the principle of necessity and in their capacity as data processors. These individuals have been provided with specific instructions and are bound by an obligation to maintain the confidentiality of your data.
Your personal data may be disclosed, in accordance with the law, to:

• banks for handling collections;
• tax authorities and other companies or public entities in compliance with regulatory requirements;
• companies, tax firms, and law firms for accounting services and the protection of contractual rights, to the extent necessary to perform their duties and subject to obtaining adequate assurances that impose a duty of confidentiality and security upon them;
• suppliers, professionals, and/or companies working with La Fabbrica del Panforte Srl (e.g., marketing, website maintenance providers, etc.) to the extent necessary for them to perform their duties and subject to obtaining adequate safeguards that impose a duty of confidentiality and security upon them;
• public authorities that may access the data to fulfill all obligations set forth by law, regulations, and EU legislation for the purpose of carrying out activities aimed at preventing or combating cybercrimes.

Under no circumstances will your personal data be disclosed. The updated list of “data processors” is available by writing to the contact information provided at the bottom of this policy (“Identity and Contact Information of the Data Controller”).

4. Transfer of personal data to a third country or an international organization.

Data processing related to this website’s web services takes place at the headquarters of La Fabbrica del Panforte Srl and at the Web Hosting data center. Your personal data will not be transferred to a country outside the European Union or to an international organization.

5. Retention period for personal data.

Personal data collected for Purpose 1) will be retained for the time strictly necessary to manage the information you have requested. Personal data collected for Purposes 2), 3), and 4) will be retained for as long as necessary to carry out activities related to the management of the contract and for up to ten years following its termination or from the time the rights arising from it may be asserted (pursuant to Articles 2935 and 2947 of the Italian Civil Code); as well as for the fulfillment of obligations (e.g., tax and accounting obligations) that remain even after the contract’s termination (Article 2220 of the Italian Civil Code), for which purposes the Data Controller must retain only the data necessary to fulfill such obligations. This is without prejudice to cases in which rights arising from the contract must be asserted in court; in such cases, your data—only those necessary for such purposes—will be processed for the time required to pursue them. Personal data collected for purposes 5) and 6) are deleted immediately after processing. The transmission of any data defined as “special categories” by the Regulation (personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as the processing of genetic data, biometric data intended to uniquely identify a natural person, data concerning health, sex life, or sexual orientation) and/or data relating to criminal convictions and offenses shall result in the immediate deletion of such data in the absence of a written statement of consent from the data subject for their processing by La Fabbrica del Panforte Srl.

6. Mandatory Data Reporting.

The provision of your personal data for purpose 1) is optional. The provision of your personal data for purposes 2), 3), and 4) is a necessary requirement for establishing and subsequently managing the business relationship with La Fabbrica del Panforte Srl. Providing La Fabbrica del Panforte Srl with your personal data, as requested on various occasions when data is collected, may be necessary to achieve the purposes identified above, or it may be optional. Whether the provision of data is mandatory or optional is specified on a case-by-case basis with reference to the specific information requested at the time of each data collection.

7. Consequences of failing to provide this information.

Failure to provide the data marked as required will make it impossible to achieve the purpose of that specific data collection. Providing La Fabbrica del Panforte Srl with additional data, other than that marked as required, is optional and will not affect the achievement of the purpose for which the data is collected.

8. Automated decision-making and profiling.

Your personal data will not be subject to automated decision-making.

9. Rights of the Data Subject.

Pursuant to Articles 15, 16, 17, 18, 20, 21, and 22 of the Regulation, We hereby inform you that, as the data subject, you have the right to request from the Data Controller access to your personal data, as well as the rectification or erasure of such data, the restriction of processing concerning you, or to object to the processing of your personal data, in addition to the right to data portability. Any rectifications, erasures, or restrictions on processing carried out at your request (unless this proves impossible or involves a disproportionate effort) will be communicated by the Data Controller to each of the recipients to whom the personal data have been disclosed. The Data Controller may disclose these recipients to you upon your request. The exercise of your rights is not subject to any formal requirements; you need only send a clear communication regarding the right you intend to exercise to the contact information provided at the bottom of this notice (“Identity and Contact Information of the Data Controller”). We inform you that La Fabbrica del Panforte Srl has a procedure in place for handling requests from data subjects.

10. Withdrawal of Consent.

Pursuant to Article 7, paragraph 3, of the Regulation, we inform you that you remain free to revoke your consent at any time without affecting the lawfulness of the processing based on the consent given prior to the revocation, by sending a clear notice to that effect—without any formalities—to the contact information provided at the bottom of this notice (“Identity and Contact Information of the Data Controller”). Upon receipt of such a request, the Data Controller will promptly remove and delete the data from the archives and databases used for processing and will notify any third parties to whom the data has been disclosed of the deletion. We inform you that La Fabbrica del Panforte Srl has a procedure in place for managing the revocation of consent at the request of data subjects.

11. Right to File a Complaint.

Pursuant to Article 77 of the Regulation, We hereby inform you that, as a data subject, if you believe that the processing of your personal data violates the Regulation, you have the right to file a complaint with the Data Protection Authority, following the procedures and guidelines published on the Authority’s official website (www.garanteprivacy.it).

12. Identity and contact information of the data controller.

The data controller pursuant to Articles 4(7) and 24 of the Regulation is La Fabbrica del Panforte Srl, with registered office at Via Po 20 – Località Pian dei Mori, 53018 Sovicille (SI), whose contact information is as follows:
Phone: +39 0577 349338
Fax: +39 0577 349389
Email address: info@fabbricadelpanforte.com

13. Links to Other Websites

The website https://www.fabbricadelpanforte.com/ may contain links to other websites that may have no connection to La Fabbrica del Panforte Srl. The Data Controller does not control or monitor these websites or their content and cannot be held responsible for the content of these sites or the policies they adopt, including with regard to your privacy and the processing of your personal data while you are browsing. We therefore ask that you exercise caution when accessing these sites via the links on our website and that you carefully read their terms of use and privacy policies. La Fabbrica del Panforte Srl’s Privacy Policy does not apply to third-party websites; our website provides links to these sites solely to assist users in their searches and navigation and to facilitate hyperlinks to other sites on the Internet. The inclusion of these links does not imply any recommendation or endorsement by La Fabbrica del Panforte Srl regarding access to or browsing of these sites, nor does it imply any guarantee regarding their content, the services they provide, or the goods they may supply and sell to Internet users.

14. Social Plug-ins

The website https://www.fabbricadelpanforte.com/ may contain social media plug-ins (e.g., Facebook.com, operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, United States (“Facebook”). If you visit one of our web pages that includes such a plug-in, your web browser connects directly to the social network, and the plug-in is displayed on your screen through that connection. Before using these plug-ins, we encourage you to review the privacy policies of the respective social networks on their official websites.