Privacy Policy for Delicius.it

Why This Notice

This page describes how the website is managed with regard to the processing of personal data of the users who visit it. As a result of visiting this website, data relating to identified or identifiable persons may be processed.

This notice is provided pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR 2016/679) to those who interact with the web services of Delicius Rizzoli S.p.A. Benefit Company (hereinafter Delicius Rizzoli), concerning the protection of personal data, accessible electronically from the following address: www.delicius.it

The notice is provided only for the Delicius Rizzoli website and not for other websites that may be consulted by the user through links.

The notice is also based on Recommendation No. 2/2001, adopted on 17 May 2001 by the European data protection authorities within the Working Party established under Article 29 of Directive no. 95/46/EC. The recommendation sets out minimum requirements for the online collection of personal data. In particular, it defines the methods, timing and nature of the information that data controllers must provide to users when they access web pages, regardless of the purpose of their visit.

Types of Data Processed

Browsing data

The computer systems and software procedures used to operate these websites acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to the user’s operating system and IT environment.

These data are used for the sole purpose of obtaining anonymous statistical information on the use of the website and to ensure its correct functioning, and are deleted immediately after processing. The data may be used to establish liability in the event of hypothetical computer crimes against the website: except in this case, at present web contact data are not retained for more than seven days.

Data provided voluntarily by the user

Delicius Rizzoli will process the personal data that the user provides when requesting a specific service or in any case as part of the relationship with the website www.delicius.it

Such data may include:

• Identification data (name and surname)
• Contact data (email address)
• Educational and professional data contained in the CV
• Special data relating to your health status (exclusively in the case of participation in the Longevity Nutrition Program)

Purposes and legal bases for processing

The personal data you provide will be used for the following purposes:

1. to ensure proper navigation of the website (Article 6 (1)(b) GDPR)
2. to manage requests for information and complaints submitted through the “Contact us” section (Article 6 (1)(b) GDPR)
3. to assess professional skills and abilities, for the possible establishment of an employment relationship with Delicius Rizzoli. The recruitment process may involve participation in interviews and/or assessments, both in person and online (Article 6 (1)(b) GDPR)
4. subject to specific consent, to participate in the “Longevity Nutrition” programme and download the nutritional plan developed in collaboration with INRC – National Institute for Cardiovascular Research (Article 9 (2)(a) GDPR)
5. subject to specific consent, to receive promotional and informative communications via email regarding products, services, commercial updates, initiatives and promotional campaigns offered by Delicius (Article 6 (1)(a) of the GDPR)
6. to comply with obligations arising from civil, tax and EU legislation, as well as from rules, codes or procedures approved by competent authorities and other institutions.

Personal data may also be processed in response to requests from competent administrative or judicial authorities and, more generally, from public bodies, in accordance with applicable legal requirements (Article 6 (1)(c) GDPR).

Data Controller, Data Processor and DPO

The Data Controller is Delicius Rizzoli S.p.A. Benefit Company represented by its legal representative.

The list of External Data Processors is kept up to date and may be consulted at the company’s registered office.

The Company has not appointed a DPO, as the legal requirements making such an appointment mandatory do not apply.

Provision of Data

The provision of data is mandatory for the purposes stated in letters a), b), c) and f): failure to provide such data will prevent Delicius Rizzoli from fully providing the services offered.

For the purpose referred to in letter d), the provision of data is optional. Failure to provide such data will prevent you from downloading the nutritional plan formulated on the basis of the information provided.

For the purpose referred to in letter e), the provision of data is optional. Failure to provide such data will prevent you from receiving promotional and informational communications.

Processing Methods

All personal data are processed mainly through electronic tools and methods; however, processing by paper-based means is not excluded.

Data will be stored in a form which allows the identification of data subjects only for as long as is strictly necessary to achieve the purposes for which the data were originally collected and, in any case, within the limits of the law.

In order to ensure that personal data are always accurate, up-to-date, complete and relevant, users and other data subjects are invited to keep their data updated, reporting any changes to the following email address: press@delicius.it

Appropriate security measures will be used to ensure the confidentiality of the data subject to whom the data relate and to prevent unauthorised access by third parties or unauthorised personnel.

Data retention

Personal data will be processed only for the time necessary in relation to the purposes described above, and in particular:

• in relation to data processed for the purpose set out in point a), please refer to the Cookie Policy
• in relation to data processed for the purpose referred to in point b) for 2 years from submission of the request
• in relation to data processed for the purpose referred to in point c), for 2 years from submission of your application
• in relation to data processed for the purpose referred to in point d), for 1 week from the granting of consent to obtain the nutritional plan
• in relation to data processed for the purpose referred to in point e), for 2 years from the granting of consent
• in relation to data processed for the purpose referred to in point f), for 10 years.

The user may at any time request that processing be stopped or that their data be deleted

Place of Data Processing

Processing operations connected with the web services of this website take place at Delicius’ registered and operational offices and are carried out only by specifically authorised personnel; the data are also processed in any other place where the parties involved in the processing are located. In particular, all data relating to the website, as well as the related backup copies, are stored on servers hosted in data centres located within the European Union and compliant with applicable EU regulations.

For more information, please contact the Data Controller.

Disclosure of data to third parties

No data will be disclosed. Where communication to third party suppliers, consultants or partners is necessary for needs related to the provision of services, the Data Controller will appoint such parties as data processors pursuant to Article 28 of the Regulation, based on their demonstrated capacity, experience and reliability.

It is understood that users’ personal data may be freely disclosed to third parties, such as police forces or other public administrations, whenever this is permitted by law or required by an order or decision of a competent authority. Such parties will process the data as independent data controllers.

Third-party cookies

Since the installation of cookies and other tracking systems operated by third parties through the services used within this website cannot be technically controlled by the Data Controller, any specific reference to cookies and tracking systems installed by third parties is to be considered indicative.

Given the objective complexity involved in identifying cookie-based technologies and their close integration with the functioning of the website, the user is invited to contact the Data Controller if they wish to receive further information regarding the use of cookies and any related uses – for example by third parties – carried out through this website.

Security of personal data

Appropriate security measures are adopted in order to minimise the risks of destruction or loss – even accidental – of data, unauthorised access or processing that is not permitted or does not comply with the collection purposes indicated in this Privacy Policy.

The transfer, storage and processing of your data collected through the Site is ensured by appropriate technical measures. However, Delicius cannot guarantee its users that the measures adopted for the security of the Site and for the transmission of data and information on the Site will limit or exclude any risk of unauthorised access or data leakage through devices belonging to the user. We therefore recommend ensuring that your device is equipped with appropriate software to protect the transmission of data over the network, both incoming and outgoing (such as updated antivirus systems), and that your Internet service provider has adopted suitable measures to ensure the security of data transmission over the network (such as firewalls and anti-spam filters).

Rights of the data subject

At any time, you may exercise your rights pursuant to Articles 15-22 of Regulation (EU) 2016/679, including the right to:

1. request confirmation as to whether or not personal data concerning you exists and, if so, obtain access to such personal data and the information referred to in point b) below;
2. obtain information about the purposes of processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be disclosed (in particular where recipients are in third countries or international organisations) and, where possible, the retention period;
3. obtain rectification and deletion of personal data;
4. withdraw consent at any time (however, withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal);
5. obtain restriction of processing;
6. obtain data portability, namely, to receive personal data from a data controller, in a structured, commonly used and machine-readable format, and transmit them to another data controller without hindrance;
7. object to processing at any time, including where processing is carried out for direct marketing purposes;
8. object to automated decision-making concerning natural persons, including profiling;
9. obtain confirmation of compliance with Article 19 of Regulation (EU) 2016/679 by the Data Controller, namely communication to each of the recipients, to whom the personal data have been transmitted, of any corrections, cancellations or limitations of the processing carried out pursuant to Article 16 Regulation (EU) 2016/679, unless this proves impossible or involves disproportionate effort;
10. lodge a complaint with the competent supervisory authority.

To exercise your rights and/or to request further information, you may contact the Data Controller Delicius Rizzoli S.p.A. Benefit Company, with registered office and place of processing at Via Micheli, 2 43056 San Polo di Torrile, Parma (PR); tel. +39 0521 813525, e-mail: press@delicius.it