Privacy Policy

Information on the processing of personal data

The Data Controller has decided to make use of Gemini Consult S.r.l., in the person of Andrea Paro, as Data Protection Officer, who can be contacted for any need at the following addresses:

Telephone: 0422.877411
Email / PEC: rpd@legalmail.it.

(Articles 13 and 14 of EU Regulation 2016/679)

Pursuant to art. 13 and 14 of EU Regulation 2016/679 (hereinafter called GDPR) regarding the protection of personal data, you We inform you that the personal data collected, with reference to the contractual relationships established or simple requests for information, will be processed in compliance with the aforementioned legislation and we provide you with the following information:

Personal data collected
The personal data collected, with your free and express consent, are exclusively inherent to:

• identification data (for example: name, surname, address, telephone, e-mail, etc …)
• tax data (if required in accordance with the law – for example tax code, VAT number etc …)

Owner and responsible for the processing of personal data (13.1 A, B)

The data controller of personal data is IDB SRL INDUSTRIA DOLCIARIA BORSARI – Badia Polesine (RO) Via Ca Mignola Nuova 1577 / A CAP 45021. The Privacy contact person, appointed by the Data Controller, can be contacted by e-mail at the following Address: info@idbgroup.it or at 800 013346 for the exercise of the rights referred to in Article 13.2 letters b, c, d of GDPR. The updated list of external managers appointed by the Data Controller pursuant to Article 28 of GDPR and of the persons authorized to process it can be consulted by making a request to the Data Controller.

Purposes and methods of processing personal data (13.1 C)

The personal data collected with the registration on this site are processed in order to allow access to the services provided by the portal and reserved for users who have communicated their data and have consented to their processing. In the event that the user has given consent at the time of activation of the service, or expresses it later and until the revocation of the same, his personal data may be processed by the Data Controller for:

1. allow access to the services provided by the portals and reserved for registered users;
2. send, in the event that users have given consent at the time of activation of the service, or express it later, and until the revocation of the same, commercial communications on their products and services also in automated methods, for sending market research and for verifying the degree of satisfaction of the users;
3. send, in the event that they have given consent at the time of activation of the service, or express it later, and until the revocation of the same, statistics on their own products and services, even with automated methods, for sales purposes;
4. carry out, in the event that users have given consent at the time of activation of the service, or express it later, and until the revocation of the same, also through electronic tools, analysis of specific behaviors and consumption habits, in order to improve the services provided and direct the commercial proposals of the user’s interest, also offering to third parties the aggregate summary data of the openings and clicks obtained through a tracking system by means of “cookies” (profiling);
5. The Data Controller will also use personal data for administrative and accounting purposes and for the execution of contractual obligations towards users who are part of their customers.

Personal data sent through the registration procedure can be processed by the Data Controller with automated tools. Without prejudice to the possibility for the Data Controller to process the aforementioned data in aggregate form, in compliance with the measures prescribed by the Guarantor and by virtue of the specific exemption from the consent provided for by the same, for electronic analysis and processing (eg: classification of the entire customers into homogeneous categories by levels of Services, consumption, spending, etc.) aimed at periodically monitoring the development and economic trend of the owner’s activities, to guide the related industrial and commercial processes, to improve services, as well as to design and implement commercial communication campaigns.

Specific security measures are observed by the Data Controller to prevent data loss, illicit or incorrect use, and unauthorized access.

Any recipients of personal data (13.1 E, F)

Personal data are recorded and stored on electronic databases located in Italy, in countries belonging to the European Economic Area (EEA) and in third countries that guarantee an adequate level of data protection. The processing of personal data provided by users can also be carried out by companies, entities or consortia, appointed as data processors pursuant to art. 28 of the aforementioned EU Regulation, which, on behalf of the Data Controller, provide specific processing services, or related, instrumental or support activities.

Among these data processors is the provider of the owner’s website hosting service

Personal data provided by users may also be communicated:

• to recognized accounting firms relating to the profession of assistance to companies when the communication is due by law, or is in the interest of the subject;
• to recognized lawyers’ studies relating to the profession of assistance to companies when the communication is due by law, duly appointed to this form of processing in full compliance with the measures in force, or when the communication is in the interest of the subject;
• to subjects necessary for the conclusion of the sales relationship (for example couriers, suppliers of logistical supports and similar ones);
• to investee or associate companies in the interest of the subject;
• to subjects to whom the right to access personal data is recognized by law, regulations or community legislation;
• to subjects against whom the communication is required by law or regulation, or by public entities for the performance of their institutional functions.

retention period of personal data (13.2 A)

The retention period of the above personal data is:

24 months for the purposes referred to in points 2) and 3);

12 months for the purposes referred to in point 4);

10 years from the date of termination of the contractual relationship for the purposes referred to in point 5).

At the end of the provision, provision of the service or response, personal data will be stored exclusively for historical or statistical purposes, in accordance with the law, regulations, community legislation and codes of ethics and good conduct signed pursuant to Article 40 of the GDPR. Beyond the aforementioned period, personal data will be stored anonymously, or will be destroyed.

Rights of the interested parties (13.2 b)

In relation to the aforementioned processing, the interested party has the right to request access to his personal data and the rectification or cancellation of the same or the limitation of the processing that concerns him or to oppose their processing, as well as having the right to data portability.

Right of withdrawal of consent (13.2 C)

If the processing is based on consent, the Data Controller informs the interested party that he has the right to revoke him at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation.

right to lodge a complaint (13.2 d)

The Data Controller informs the interested party of his right to lodge a complaint with a supervisory authority, in which case he will have to ask him for information using one of the systems indicated above to contact him.

Mandatory or optional nature of the provision of data (13.2 e)

The provision of data and related processing are mandatory in relation to the purposes relating to the use of the site and tax obligations (purposes 1 and 5); It follows that any refusal to provide the data for these purposes may determine the inability of the Data Controller to carry out the same professional relationships and legal obligations. The provision of data and its processing is to be considered optional in other cases, without any consequences.

possible existence of an automated decision-making process (13.2 F)

The Data Controller informs the interested party that there is an automated decision-making process on this site, so in particular there is a profiling system described on the page Cookie Policy.

Marketplace

The holder informs the interested party that this trademark can only be sold in Italy. It cannot be sold abroad, so it is useless to request it in this sense.

Corporate data

business name	IDB SRL INDUSTRIA DOLCIARIA BORSARI
registered office	Badia Polesine (RO) Via Ca Mignola Nuova 1577 / A CAP 45021
VAT number	02681730541
Registration of the Register of Companies Office	n.02681730541
No. Economic Administrative Repertory (REA)	ro – 139409
capital in the balance sheet	110,000.00
Certified Electronic Mail (PEC)	IDBSRL@LEGALMAIL.IT
possible liquidation following dissolution	The company is not in liquidation.
Possible status of a company with a single shareholder	The company is not a single shareholder.
Art. 2497-bis of the Italian Civil Code – Direction and Coordination	The Company is not subject to coordination by other entities or companies.