The Data Controller is ITALIANA PASTIFICI SRL.
Processed data, purposes and legal bases of processing
The personal data provided is collected and processed to fulfill your requests (eg. contact request, possibility to leave a comment, request for information).
Nature of the provision
Data provision to the Company is optional, but necessary to enable us to satisfy your requests.
Processing methods and data retention times
The data collected will be processed by electronic or automated, computerized or telematic means, or by manual processing with logic strictly related to the purposes for which the personal data was collected and, in any case, in order to guarantee the security of the same. The data is stored for a time strictly necessary for management of the purposes for which the data is collected in compliance with current regulations and legal obligations.
In any case, this company has rules in place that prevent the storage of data indefinitely, in compliance with the principle of minimization of data processing.
Authorized entities for the treatment, supervision and communication of data
The collected data is processed exclusively by the Data Controller.
The communication of your data to third parties may be carried out only for the fulfillment of legal obligations.
The Data Controller has no intention to transfer your personal data to a third-party country outside the European Union.
In any case, personal data will never be disclosed.
Rights of the interested party
Interested parties may, at any time, exercise the following rights sanctioned by the GDPR:
- request access, from the Data Controller, to personal data or its editing, cancellation or limitation of processing, or oppose the processing of data, as long as this does not compromise the execution and performance of contractual obligations and/or does not conflict with legal provisions;
- to request, as far as applicable, the portability of the data to another Data Controller;
- limited to processing for which explicit consent is required and revoke this consent. This revocation will not however be retroactive and will therefore not affect the lawfulness of processing based on previously given consent.
To exercise the rights recognized by REGULATION (EU) 2016/679 (hereinafter “GDPR” or “Regulations”) or to request any clarification regarding the processing of personal data, the interested party may contact the Data Controller directly at the following e-mail address: firstname.lastname@example.org
If the interested party’s requests are clearly unfounded or excessive, the Data Controller may charge a fee for administrative expenses, or refuse to satisfy the request according to art. 12, paragraph 5 of the GDPR.
Interested parties may also lodge a complaint with a supervisory authority.