PRIVACY POLICY

The Joint Data Controllers collect your personal data in two ways:
- by registering and filling in forms for sending requests, when users access certain pages of the website;
- through cookies (for more information on cookies see the appropriate section on the site).

Joint Controllers may request your name, address, telephone number, email address, suggestions, comments or additional information related to the site, products or services or company. In addition, they may request other specific information in connection with competitions, promotions or other marketing initiatives.

The personal “identification” data will be processed to follow up on the requests of the interested parties (pursuant to art. 6(b) GDPR) for the following purposes:

a) to allow registration on the site, necessary for access to particular sections of the site and to provide and manage the various services offered/requested;

Subject to specific consent (pursuant to Art. 6(a) GDPR), the data will be processed for:

b) sending promotional and commercial messages through newsletters on products marketed by Salumifici Granterre S.p.A., Caseifici Granterre S.p.A., Parmacotto S.p.A. and other copmanies in the Granterre Group;

c) carrying out profiled analyses on registered users in order to offer them personalised products and services, including by other companies in the Group

The processing of personal data is carried out by means of the operations indicated in art. 4 no. 2) GDPR, specifically: collection, registration, consultation, profiling, preservation, extraction, dissemination, communication, erasure and destruction. Personal data shall be processed both on paper and electronically and/or automatically.

The Joint Data Controllers will process the personal data for the time necessary to fulfil the aforementioned purposes and, specifically:

-as regards the purpose referred to in point a) for the time strictly necessary for the processing of requests made by the user;

-with regard to the purpose referred to in points b) and c) of paragraph 2 for no more than 36 months after the collection of consent.

In any case, the processing will be based on the principles of fairness, lawfulness and transparency and will be implemented with the aid of tools and procedures that avoid the risk of loss, unauthorised access, unlawful use and dissemination.

Personal data may be made accessible for the purposes referred to in paragraph 2:

• to employees and collaborators of the Joint Data Controllers, in their capacity as authorised data processors;

• to companies belonging to the Granterre Group and companies controlling the Granterre Group;

• to third-party companies or other subjects such as professional firms or consultants, who carry out outsourced activities on behalf of the Joint Data Controllers, in their capacity as Data Processors (the Joint Data Controllers make the list of appointed Data Processors available to users).

Without the need for express consent – art. 6 letters (b) and (c) GDPR – the Joint Data Controllers may communicate personal data, for the purposes referred to in paragraph 2 to: supervisory bodies, judicial authorities, as well as those to whom disclosure is mandatory by law and/or for the execution of the mandate. These entities will process the data in their capacity as independent controllers.

Personal data are stored in paper files located at the headquarters of the companies belonging to the Granterre Group and of the companies controlling the Granterre Group, and on servers located within the European Union.

In any case, it is understood that the Joint Controllers, if necessary, will have the right to move the servers and archives, including to locations outside the EU. In this case, the Joint Data Controllers shall ensure from this point on that the transfer of non-EU data will take place in accordance with the applicable legal provisions, subject to the stipulation of the standard contractual clauses provided for by the European Commission.

The consent originally given may be withdrawn at any time by communicating this intention to the Joint Controllers using the contacts referred to in paragraph 8 below. Any processing carried out prior to such withdrawal shall remain valid and lawful.

Each data subject has the right to obtain from the Joint Data Controllers, in the cases provided for, access to their personal data and the rectification or erasure of such data or the restriction of the processing concerning them or to object to the processing (art. 15 et seq. of the Regulation).

The appropriate application may be submitted to the Joint Controllers by using one of the following contacts:

• an e-mail to privacyconsumatori.salumificispa@granterre.it;

• an e-mail to privacy.caseificispa@granterre.it;

• use the specific link at the bottom of the email you receive to stop receiving communications, promotions, etc.

Data subjects who consider that the processing of personal data reported to them by the Joint Data Controllers to be in violation of the provisions of the GDPR have the right to lodge a complaint with the Guarantor, as provided for by art. 77 GDPR, or to bring proceedings before the appropriate courts (Art. 79 GDPR).

The disclosure of personal data relating to a minor must be made by a parent, legal guardian or person exercising authority. In any case, personal data will be processed only for the purposes of the competition or activity for which the data was registered. The acquisition of such data is justified by the need to send the requested prize to the user’s home.

Online participation is only possible with the consent of parents or those with parental authority.

Prizes will be sent to the address indicated by the parents or guardians. If a subsequent check, which the Joint Controllers reserve the right to make, reveals an entry to have been made without parental permission, the entry and potential win will not be considered valid.