Free shipping on orders over 50 Kg
GUIDELINES ON THE PROCESSING OF PERSONAL DATA
PURSUANT TO ART. 13 REG. EU 2016/679
Dear user,
the protection of your personal data is fundamentally important for us and we wish you to always feel protected. For this reason, we would like to share with you some simple information which will allow you to understand aspects concerning the processing of your personal data and in particular those collected and given by you for the purposes described below.
We would like to inform you that your personal data will be processed in compliance with the provisions of the European Regulation on personal data protection (Reg. EU 2016/679, hereinafter "GDPR"), as well as with the current and applicable privacy legislation (L. Decree 196/2003 and subsequent modifications and integrations, hereinafter "Privacy Code" and in any case in compliance with the principles of lawfulness, correctness and transparency.
The website and its services are intended for adults. We do not collect personal data relating to subjects under the age of 18. At the request of users, we will promptly cancel all personal data inadvertently collected which relates to subjects under the age of 18.
These guidelines are provided pursuant to art. 13 of the GDPR. We invite you to read them carefully before submitting your personal information and making use of the related services.
Data controller and contact details
Your personal data will be processed by F.lli De Cecco di Filippo Fara San Martino S.p.A. (hereinafter "De Cecco") with registered office in via F. De Cecco, industrial area, 66015, Fara San Martino (CH) -Italy, Phone no 0872 9861, as Data Controller.
Purpose of the processing and legal basis
The personal data requested such as (for example, Name, Surname, City, Country, e-mail) or any other data freely provided by you to the Customer Service may be processed in order to pursue the following purposes:
a) Request for information and / or customer assistance. In addition to the personal data necessary or provided by you freely at the time you requested the information and/or assistance, additional data may be processed during the conversation with the operator (for example, purchase order or data related to the same, any allergies to substances potentially contained in De Cecco products). These data will be processed within the limits strictly necessary in order to process your request and to follow up all the operational and/or verification activities connected to it. The provision of your data for this purpose is necessary. Failure to provide the data will prevent you from submitting the request for information and/or assistance or from receiving a correct feedback. The processing of such data will take place in order to follow-up on your pre-contractual requests or to execute the contract, and therefore your consent will not be required.
b) Fulfilment of legal obligations. Your personal data could also be processed in order to fulfil legal obligations or specific sector regulations.
The provision of your data for this purpose is necessary. Failure to provide the data will prevent you from submitting the request for information and/or assistance or from receiving a correct feedback. The processing of such data will take place in order to fulfil legal obligations or to comply with specific sector regulations, and therefore your consent will not be required.
c) Exercising rights in a Court of Law. Your personal data could be processed by the Data Controller in order to process or manage any disputes (judicial or extrajudicial) or claims arising due to or in connection with the request for information and/or assistance or with the purchase contract for the products.
The provision of your data for this purpose is necessary. Failure to provide the data will prevent you from submitting the request for information and/or assistance or from receiving a correct feedback. The processing of data for this purpose will take place on the basis of the legitimate interest of the Data Controller, found in the protection of its rights and therefore your consent will not be required.
d) Sending newsletters, in order to allow you to stay up to date on our organisation or to provide you with new features regarding our products;
The provision of your personal data for this purpose is optional. However, failure to provide these will prevent you from receiving the newsletter. Furthermore, your data can only be processed with your consent. You can unsubscribe at any time by clicking on the appropriate link available at the bottom of the email received.
e) Marketing activities of De Cecco. To allow you to receive advertising material, direct sales services, commercial communications via e-mail and/or telephone (automated call or call communication systems with and/or without operator intervention, MMS, SMS,) consisting of the presentation of offers, promotions, commercial opportunities, invitations to events or to take part in competitions with prizes, and participate in market research on De Cecco products and services.
Please note that the provision of your personal data for this marketing purpose is optional. However, failure to provide these will prevent you from using the related commercial services. Furthermore, the processing of your data for this purpose can only take place with your consent. You can revoke this at any time by contacting the Data Controller.
f) profiling in order to allow you to receive a personalised commercial and / or promotional communication tailored to your specific needs and designed according to your habits and / or consumption choices and / or your country of origin.
Please note that the provision of your personal data for this profiling purpose is optional. However, failure to provide these will prevent you from using the related services. Furthermore, the processing of your data for this purpose can only take place with your consent. You can revoke this at any time by contacting the Data Controller.
Methods of processing personal data
Your personal data will be processed with or without the aid of IT and electronic tools and may consist of any operation among those indicated in art. 4, item 2 of the GDPR, including the collection, registration, organisation, conservation, consultation, analysis, matching, processing, modification, selection, extraction, comparison, use, interconnection, cross-referencing, blocking, communication, deletion and destruction, according to logics concerning the pursuit of the intended purposes.
In any case, the processing will be carried out adopting technical and organisational security measures appropriate to the processing risks in accordance with the provisions of art 32 of the GDPR.
Personal data retention terms
Personal data will be processed for the time strictly necessary for pursuing the purposes described above and for related needs and for fulfilling legal obligations and the protection of judicial rights. In any case, data will not be stored for more than 10 years from the conclusion of the relationship with the customer.
In addition, for:
- purposes of information and customer assistance: personal data will be stored only for a maximum of 5 years from their collection;
- purposes of receiving the newsletter: personal data will be stored exclusively for the period during which it is active;
- marketing purposes: personal data will be processed for a maximum of 24 months from their collection;
- profiling purposes: personal data will be processed for a maximum of 12 months from their collection.
Communication and dissemination of personal data
Your personal data will not be disclosed, but may be made accessible to employees and/or collaborators of De Cecco or De Cecco Group companies, as well as to employees and/or collaborators who work under the direct authority of the Data Processors, and who will operate in their capacity as authorised subjects and/or system administrators.
In order to achieve the goals described above, your personal data could be transmitted to service providers or product suppliers which, on behalf of De Cecco, perform activities related, instrumental or in support of the management and maintenance of the website and electronic platform contents, customer support, management of Information Technology systems, editorial services, management of electronic platforms, marketing communications and newsletters, legal advisory services, commercial agents.
These subjects could operate as Data Processors pursuant to art. 28 of the GDPR. The updated list of Data Processors is available from the Data Controller.
Furthermore, in order to enable processing your request for information and/or assistance, the protection of the rights of the Data Controller before a court of law, your data may become known to the other companies of the De Cecco group and be transmitted to public authorities in order to fulfil legal or regulatory obligations, as well as to judicial authorities at their request.
Transmission of personal data outside the European Community
Your personal data will be processed by the Data Controller or Data Processors within the European Union, as no transfers to non-EU countries are envisaged.
The Data Protection Officer (DPO) and his/her contact details
De Cecco has decided to use a data protection officer. Our data protection officer (DPO) is Attorney in Law Mr Giulio Maria Garofalo, who may be contacted at the email address: DPO@dececco.it.
What are your rights?
As data subject, you may exercise the rights set forth in articles 15 and ff. of the GDPR. In particular, the data subject has:
a) the right of access: to obtain confirmation of the existence or not of the processing of his/her personal data and in this case to gain access to personal data and the following information (i.e. processing purposes, categories of personal data, recipients to whom the data are or will be transmitted, the retention period, the information on the origin of the data if not collected directly from the person concerned, and the existence of adequate guarantees in case of data transfers to countries outside the EU) as well as to obtain a copy of the personal data being processed;
b) the right of rectification: to obtain the rectification of inaccurate personal data concerning him/her without undue delay, or to obtain the integration of incomplete ones;
c) the right of deletion: to obtain the cancellation of personal data concerning him/her without undue delay, if one of the following six reasons should be present:
- the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
- the revocation of the consent on which the treatment is based, if there is no other legal basis;
- the opposition to processing, if there is no prevailing legitimate reason;
- the personal data have been unlawfully processed;
- the personal data must be erased in order to comply with a legal obligation under EU law;
- the personal data have been collected in relation to the offer of information society services pursuant to art. 8.
d) The right to limit the processing: to obtain the limitation of the processing when:
- the accuracy of the personal data is contested by the data subject, for a period enabling the data controller to verify the accuracy of the personal data;
- the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
- the controller no longer requires the personal data for processing purposes, but they are required by the data subject for the establishment, exercise or defence of legal claims;
- the data subject has objected to processing pending verification of whether the legitimate grounds of the controller override those of the data subject.
e) the right to portability: the data subject has the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and has the right to transmit said data to another controller;
f) the right to object to the processing: the data subject has the right to object to the processing of personal data concerning him or her for direct marketing, including profiling to the extent that it is related to such direct marketing, at any time.
The exercise of the rights may take place by sending us a specific e-mail communication to the address privacy@dececco.it.
Please also remember that should you believe the processing of personal data carried out by us violates the provisions of the current privacy legislation, you can always lodge a complaint with the Data Protection Authorities, as envisaged by art 77 of the GDPR or take legal action in the appropriate courts of law.
