Privacy Policy

PRIVACY POLICY

Last update 25.01.23

Dear user,

First of all, thank you for visiting our website.

The following information will provide you with a comprehensive guide on what we do with your personal data. This privacy and cookie policy has been prepared to inform you about how we collect, use, and transfer your personal data.

Salumifici Granterre S.p.A., headquartered in Modena, Strada Gherbella, No. 320, VAT number 02654810361, and Caseifici Granterre S.p.A., headquartered in Modena, Via Polonia, 30-33, VAT number 01299680353, as Data Controllers, inform you, pursuant to art. 13 of EU Regulation No. 2016/679 – GDPR – that the data will be processed according to the following methods and purposes:

 

  1. Subject of the Processing

The Data Controllers collect users’ personal data in two ways:

– through registration and information requested when accessing certain pages of the website;

– through cookies (for further information on cookies, please see the dedicated section on the website).

The Data Controllers may request your name, address, telephone number, email address, suggestions, comments, or additional information related to the website, products, services, or the company. Additionally, they may request other specific information related to contests, promotions, or other marketing initiatives.

 

  1. Purpose of the Processing

Personal “identifying” data will be processed without the need for specific consent for the following purposes:

  1. a) to enable registration on the website, necessary for accessing particular sections of the website itself and to provide and manage the various services offered/requested;

With specific consent, the data will be processed to:

  1. b) carry out marketing activities (such as, merely by way of example but not exhaustively: sending promotional and advertising material) on products marketed by Salumifici Granterre S.p.A., Caseifici Granterre S.p.A., and other companies of the Granterre Group;
  2. c) send newsletters to receive updates on all the news of the website, recipes, menus, nutritionist advice, and many other news about the world of Salumifici Granterre, Caseifici Granterre, and other companies of the Granterre Group.
  3. d) carry out profiled analyses on registered users to propose them personalized products and services also by other companies of the Granterre Group.

 

  1. Processing Methods

The processing of personal data is carried out through the operations indicated in art. 4, no. 2) GDPR, specifically: collection, recording, consultation, profiling, storage, extraction, dissemination, communication, deletion, and destruction. Personal data are subject to both paper and electronic and/or automated processing.

The Data Controllers will process personal data for the time necessary to fulfill the purposes outlined above and, in particular:

– as for the purpose referred to in point a) for the time strictly necessary for the fulfillment of the requests made by the data subject;

– as for the purposes referred to in points b), c), and d) of paragraph 2 for no more than 36.

The Processing will, in any case, be based on the principles of fairness, lawfulness, and transparency and will be carried out with the aid of tools and procedures that prevent the risk of loss, unauthorized access, unlawful use, and dissemination.

 

  1. Access to Data

Personal data may be made accessible for the purposes referred to in paragraph 2:

– to employees and collaborators of the Data Controllers, in their capacity as authorized data processors;

– to companies belonging to the Granterre Group, as well as to companies controlling the same Group;

– to third-party companies or other subjects – by way of example: professional firms, consultants, etc. – who carry out outsourcing activities on behalf of the Data Controllers, in their capacity as Data Processors.

 

  1. Data Communication

Without the need for express consent – art. 6, lett. b) and c) GDPR – the Data Controllers may communicate personal data, for the purposes referred to in paragraph 2, to: Supervisory Bodies, Judicial Authorities, as well as to those subjects to whom communication is mandatory by law and/or for the execution of the mandate. Said subjects will process the data in their capacity as independent Data Controllers.

 

  1. Data Transfer

Personal data is stored in paper archives located at the headquarters of the Companies belonging to the Granterre Group and of the companies controlling the same Group and on servers located within the European Union. However, it is understood that the Data Controllers, if necessary, have the right to move the servers and archives also outside the EU. In such a case, the Data Controllers ensure in advance that the transfer of data outside the EU will take place in accordance with the applicable legal provisions, following the conclusion of the standard contractual clauses provided by the European Commission.

 

  1. Withdrawal of Consent

The consent originally given can be withdrawn at any time by communicating this intention to the Data Controllers, using the contacts provided in the following paragraph 9. Processing carried out prior to such withdrawal remains valid and lawful.

 

  1. Rights of the Data Subject

In relation to the processing of personal data, you have the right:

– to be informed about: the data and headquarters of the Data Controllers; the purposes and methods of the processing; the data and headquarters of the Data Processor;

– to obtain, from the Data Controllers or the Processor, without undue delay:

1) confirmation of the existence of processing of personal data concerning you and communication in an intelligible form of the same data and their origin, as well as of the purposes on which the processing is based;

2) the erasure of personal data concerning you, where: i) they are no longer necessary in relation to the purposes for which they were collected, ii) consent has been withdrawn and there is no other legal basis for processing, iii) the data have been unlawfully processed, iv) you have objected to processing and there are no overriding legitimate grounds for processing, v) the Data Controllers are subject to a legal obligation to erase personal data;

3) the updating, rectification, or, where interested therein, integration of the data;

4) certification that the operations referred to in points 2) and 3) have been notified, also as regards their contents, to those to whom the data have been communicated or disseminated, except where this proves impossible or involves a disproportionate effort compared to the right protected;

– to object, for reasons relating to your particular situation, to the processing of personal data concerning you, pursuant to art. 6, paragraph 1, letters e) or f);

– to object to the processing of personal data concerning you for direct marketing purposes;

– to lodge a complaint with a supervisory authority;

– to receive personal data concerning you in a structured, commonly used, and machine-readable format and to transmit those data to another Data Controller without hindrance from the Data Controllers to whom they were originally provided. In exercising your rights regarding data portability, you have the right to have personal data transmitted directly from one Controller to another, where technically feasible;

– not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you as an individual.

The Data Controllers provide a copy of the personal data undergoing processing; for any further copies requested by the data subject, the Data Controllers may charge a reasonable fee based on administrative costs actually incurred.

 

  1. Exercise of Rights

You may exercise the above rights at any time by sending a communication to  the attention of the Data Controllers:

– by registered mail with return receipt to Salumifici Granterre S.p.A., headquartered in Modena, Strada Gherbella, No. 320, or to Caseifici Granterre S.p.A., headquartered in Modena, Via Polonia, No. 30/33;

– by email to the following address: privacyconsumatori.salumificispa@granterre.it or privacy.caseificispa@granterre.it;

– by using the specific link at the bottom of the received email to no longer receive communications, promotions, etc.

 

  1. Data Controller, Data Processor, and Data Processor

The Data Controllers are Salumifici Granterre S.p.A., headquartered in Modena, Strada Gherbella, No. 320, and Caseifici Granterre S.p.A., headquartered in Modena, Via Polonia, No. 30/33.

The list of companies belonging to the Granterre Group is available to the data subject.

The updated list of data processors is kept at the registered office of the Data Controllers.

 

  1. Additional Protection for the Privacy of Minors

The communication of personal data concerning a minor must be made by a parent, legal guardian, or person exercising parental authority. In any case, personal data will be processed solely for the purposes of the contest or activity for which registration took place.

The acquisition of such data is motivated by the need to send the prize requested to the user’s home.

Online participation is only possible with the consent of parents or persons exercising parental authority.

Prizes will be sent to the address indicated by the parents or those acting on their behalf. If, following a subsequent check, which the Data Controllers reserve the right to carry out, participations without the authorization of the parent emerge, the participation and any winnings will not be considered valid.