Privacy Policy

INFORMATION IN ACCORDANCE WITH ART. 13 GDPR 2016/679

Fratelli Gancia & C. S.p.A. ("Fratelli Gancia"), with Canelli headquarters, Corso Libertà n. 66, as data controller, pursuant to art. 13 of the European Regulation n. 16/679 for the protection of personal data, intends to inform you about the processing of your personal data:

PRINCIPLES APPLICABLE TO THE PROCESSING OF PERSONAL DATA

pursuant to Article 5 of European Regulation n. 16/679:

O. Your data will be processed lawfully, correctly and transparently,

O. Your data is accurate and, in any case, it will be updated if necessary;

O. The processing of your data respects the principle of relevance and does not exceed the aims pursued by the same;

O. Access to your personal data is only permitted if the knowledge is strictly necessary to achieve the purposes described

Purpose and legal basis of the Data processing

The personal data relating to your person (name, surname, address, telephone, fax and email, if provided) (hereinafter, the "Data") will be processed exclusively for the referred purposes:

I. the execution of pre-contractual measures prepared on Your Request and / or for the execution of sales contracts for products marketed by Fratelli Gancia;

II. formulate requests or fulfill requests received

III. exchange information aimed at the execution of the contractual relationship

IV. to comply with legal obligations, regulations deriving from EU legislation or deriving from instructions given by public authorities or supervisory bodies.

V. For commercial / promotional communications by email address, telephone contact.

The legal basis for the processing of personal data for the purposes referred to in points A, B and C is the execution of the contract or pre-contractual measures upon the request of the interested party.

The legal basis for the processing of personal data for the purposes referred to in point D is the legal obligation, while for point E it is the legitimate interest of the owner (soft spam).

Mandatory or optional nature of Data provision

O. The provision of data by you referred to in point D is necessary for the purposes referred to in points A, B, C, therefore, any refusal thereof will make it impossible to continue the contractual relationship.

O. The provision of data by you for the commercial purposes referred to in point E does not prevent the conclusion and execution of any sales contracts stipulated with Fratelli Gancia.

Processing Methods

Your data will be processed using manual tools as well as automated and electronic tools, including its insertion into databases, suitable for storing, managing and transmitting data, in the ways and within the limits necessary to achieve the aforementioned purposes.

The Company has established appropriate security measures in order to prevent the loss of data as well as their unlawful or incorrect use or unauthorized access.

Scope of communication and Data dissemination

For the pursuit of the purposes referred to in point 1 above and within the limits of what is strictly necessary, your Data will be processed by persons specifically authorized to process it.

Furthermore, certain categories of people carrying out activities connected to and instrumental to the activities carried out by the Fratelli Gancia company and to whom the latter could turn - also after appointment as processors - may be informed of your data within the limits of what is strictly necessary and in compliance with the purposes referred to in the previous point 1. These are merely categories such as those carrying out shipping and transport activities, etc.

With your consent freely and voluntarily given, your data may be communicated and transferred to any company controlled and/or connected to Fratelli Gancia so that it may be used by them, for their own interest, for the same purposes referred to in the previous point.

Your Data will not be disseminated in any way.

Should it be necessary to transfer personal data to the Parent Company located in a Third Country, such transfer will take place in compliance with the rights and guarantees provided for by EU Regulation 16/679, or by virtue of standard contractual clauses signed by the Data Controller.

Rights of the interested party

As the party interested in the processing of personal data, you may at any time exercise the rights expressly recognized by the European Regulation, in particular:

O. The right to access personal data (art. 15) in order to obtain confirmation from the data controller that personal data concerning the interested party is being processed and in this case, to obtain access to personal data and to the following information:

I. the purposes of the processing;

II. the categories of personal data in question;

III. the recipients or categories of recipients to whom the personal data has been or will be communicated, in particular if the destination is to third countries or international organizations;

IV. when possible, the period of storage of the personal data envisaged or, if this is not possible, the criteria used to determine this period;

V. the existence of the interested person’s right to request the data controller to rectify or delete personal data or limit the processing of personal data concerning the interested party or to oppose their processing;

VI. the right to lodge a complaint with a supervisory authority;

VII. if the data is not collected from the interested party, all available information on their origin;

VIII. the existence of an automated decision-making process, including the profiling referred to in Article 22, paragraphs 1 and 4, and, at least in such cases, significant information on the process used, as well as the importance and consequences envisaged by such treatment for the person concerned

IX the existence of adequate guarantees pursuant to Article 46 relating to the transfer of data abroad

O. the right to rectify (art.16) and to integrate inaccurate or incomplete personal data concerning him;

O. the right to cancellation (art. 17) of personal data concerning him / her if:

I. it is no longer necessary with respect to the purposes for which they were collected or otherwise processed or are unlawfully processed or still need to be canceled in order to fulfill a legal obligation under EU law or that of the Member State to which the data controller is subject;

II. it has been collected with regard to the offer of information society services referred to in Article 8, paragraph

III. withdraw consent and no other legal basis for processing

IV. objects to the processing pursuant to Article 21, paragraph 1, and there is no legitimate prevailing reason for proceeding with the processing, or is opposed to the processing pursuant to Article 21, paragraph 2;

O. the right to limit the processing of personal data (art. 18) when one of the following situations occur:

I. You challenge the accuracy of personal data, for the period necessary for the data controller to verify the accuracy of such personal data;

II. The processing is illegal and you object to the deletion of personal data and request instead that its use be limited

III. Although the data controller no longer needs it for the purposes of processing, personal data is necessary for the data subject to ascertain, exercise or defend a right in court

IV. You object to the processing pursuant to Article 21, paragraph 1, pending verification regarding the possible prevalence of the legitimate reasons of the data controller with respect to your

O. right to the handling of personal data (Article 20) or to transmission of such data to another data controller if it is based on consent or a contract;

O. right to object (art.21) at any time, for reasons connected to a particular situation, to the processing of data concerning the interested party

O. revoke the consent if this has been previously given

O. the right to lodge a complaint with a supervisory authority.